ci: harden dependency and Xcode compatibility checks (WW-60)

[nathanialhenniges]

Summary

• add a fork-safe, read-only dependency review gate pinned to actions/dependency-review-action v5.0.0
• add a non-blocking newest-Xcode compatibility build that reports the exact Xcode and Swift toolchain
• keep stable native/UI jobs parallel and leave release, nightly, signing, notarization, and Homebrew workflows unchanged

Validation

• actionlint .github/workflows/dependency-review.yml .github/workflows/test.yml
• YAML parse for both changed workflows
• git diff --check
• verified the pinned dependency-review commit has a valid GitHub signature
• make build with local Xcode 27: informational check correctly exposed existing Swift conformance-isolation failures; stable CI remains the blocking signal

Jira: WW-60

[coderabbitai]

Warning

Review limit reached

Next included review available in 31 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7ea5ae4b-8f9d-4041-882e-8fff71799f98

📥 Commits

Reviewing files that changed from the base of the PR and between c97d645 and 4eb95a9.

📒 Files selected for processing (2)

• .github/workflows/dependency-review.yml
• .github/workflows/test.yml

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}