chore: bump trunk-io/trunk-action from 1.3.1 to 2.0.0

[dependabot]

Bumps trunk-io/trunk-action from 1.3.1 to 2.0.0.

Release notes

Sourced from trunk-io/trunk-action's releases.

v2.0.0

2.0.0 should not be a breaking change per se - but safer to call this out as a major change as the check annotation service from Trunk is no longer offered.

What's Changed

• Remove defunct CheckService annotation path by @​EliSchleifer in trunk-io/trunk-action#297
• Harden composite action auth and stop persisting checkout credentials by @​yu-iskw in trunk-io/trunk-action#298

New Contributors

• @​yu-iskw made their first contribution in trunk-io/trunk-action#298

Full Changelog: trunk-io/trunk-action@v1.3.0...v2.0.0

Commits

• e1234e6 Harden composite action auth and stop persisting checkout credentials (#298)
• c146ebe Remove defunct CheckService annotation path (#297)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cursor]

PR Summary

Low Risk
Low risk CI workflow dependency update with no changes to application code.

Overview
Updates the trunk-io/trunk-action GitHub Action dependency in the build-and-lint.yml workflow from version v1 to v2.0.0 (e1234e6).

^{Reviewed by Cursor Bugbot for commit 70aa5ca. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

🐦 Swift Migration Progress

Production implementation code at 70aa5ca4adec compared with 5f798e7c0ace.

Area	Goal	Progress	Base	This PR	Swift SLOC	Objective-C remaining	Change
Core SDK	Short term — in scope	████████░░	80.54%	80.54%	13,426	3,244	➖ 0.00 pp
Core SDK	Long term — all Objective-C	█████▉░░░░	58.18%	58.18%	13,426	9,649	➖ 0.00 pp
SDK kit infrastructure	Short term — in scope	████████▉░	88.49%	88.49%	2,244	292	➖ 0.00 pp
SDK kit infrastructure	Long term — all Objective-C	████▌░░░░░	45.00%	45.00%	2,244	2,743	➖ 0.00 pp
Standalone kits	Short term — in scope	▋░░░░░░░░░	5.87%	5.87%	897	14,392	➖ 0.00 pp
Standalone kits	Long term — all Objective-C	▋░░░░░░░░░	5.87%	5.87%	897	14,392	➖ 0.00 pp

Objective-C retained by design: Core SDK 6,405 · SDK kit infrastructure 2,451 · Standalone kits 0.

This PR's code movement

Area	Swift lines added	Objective-C lines removed
Core SDK	0	0
SDK kit infrastructure	0	0
Standalone kits	0	0

How this is measured

• Current composition uses production source lines of code (SLOC) from cloc; comments and blank lines are excluded.
• Short term — in scope excludes the Objective-C the migration will not delete, so 100% completes the in-scope conversions: every in-scope implementation gone. Migration continues on main after the integration branch merge.
• Long term — all Objective-C keeps the full denominator. Reaching 100% there means the public API itself becomes Swift, which is a breaking change reserved for a future major release.
• The gap between the two rows is the retained public/kit contract, runtime-identity, and boundary-glue surface listed in Tools/swift-migration-retained-objc.txt.
• Retained wrappers keep their Objective-C interface but still shed logic to Swift. That thinning moves the long-term row and the retained figure, not the short-term row.
• Both revisions are measured with the manifest from the head revision, so a manifest edit does not by itself move the reported change. A retained file this pull request renamed or deleted still counts as retained at the base.
• Pull request movement uses physical additions/deletions from git diff base...head --numstat; it counts retained files too and is intentionally separate from SLOC totals.
• Core excludes SDK kit infrastructure and vendored libraries. Standalone kits include only files below Kits/**/Sources.
• Tests, examples, headers, build outputs, vendored libraries, and the MParticle/Sources Swift overlay are excluded.
• Objective-C++ (.mm) is included in the Objective-C figures and removed counts.

Generated with cloc 2.10. This report is informational and does not gate migration direction.

[github-actions]

📦 SDK Size Impact Report

Measures how much the SDK adds to an app's size (with-SDK minus without-SDK).

Metric	Target Branch	This PR	Change
App Bundle Impact	2.69 MB	2.69 MB	+N/A
Executable Impact	848 bytes	848 bytes	+N/A
Framework binary (ships)	2.97 MB	2.97 MB	+N/A

➡️ SDK size impact change is minimal.

Where the bytes are

Component	Target branch	This PR	Change
Executable code (__text)	1188.3 KB	1188.5 KB	+0.1 KB
Swift metadata (__swift5_*)	55.4 KB	55.4 KB	-0.0 KB
ObjC metadata (__objc_*)	401.9 KB	401.9 KB	+0.0 KB
Symbol tables (__LINKEDIT)	816.0 KB	816.0 KB	+0.0 KB
Mach-O images	2	2	+0
Exported symbols	6026	6026	+0

Debug symbols (not shipped to users)

The SDK is embedded as a dynamic framework, so the app's own executable barely
moves and App Bundle Impact is the number that tracks shipped code.
xcodebuild -create-xcframework folds the dSYM in beside the framework, so the
xcframework total is mostly debug symbols and is not a shipping cost.

	Target Branch	This PR
dSYMs	3.73 MB	3.73 MB
XCFramework total	6.70 MB	6.70 MB

Raw measurements

Target branch (main):

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":2836,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":2752,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6864,"framework_size_kb":3040,"dsym_size_kb":3820}

This PR:

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":2836,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":2752,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6864,"framework_size_kb":3040,"dsym_size_kb":3820}

[thomson-t]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.