Updated my Mac dev tools today: Command Line Tools 27.0 → 27.2. If you run full Xcode, get 27.2 (27B52). It fixes two security bugs: • CVE-2026-112605 (CoreDevice): bad symlink handling let an app read arbitrary files • CVE-2026-112602 (Instruments): an authorization bug let an app access sensitive user data Apple doesn't say they're being exploited, but shared and CI Macs that connect devices should update. Only have Command Line Tools? Those two components aren't in it, but you still get Swift 6.4.2: two optimizer miscompile fixes, an LLDB out-of-bounds write fix, and SwiftPM now checking each registry's cached download separately. Also new in Xcode 27.2: a JSON project format (.xcproj) that's easier for coding agents to edit. https://support.apple.com/en-us/149589 https://forums.swift.org/t/announcing-swift-6-4-2/90337