Repository navigation
Cocoapods deprecation #96908
Description
Cocoapods is slated to be EOL in December 2026. Creating this issue as a reminder to investigate what's needed to transition fully to Swift Package Manager.
Some resources:
{{ message }}
Cocoapods is slated to be EOL in December 2026. Creating this issue as a reminder to investigate what's needed to transition fully to Swift Package Manager.
Some resources:
Activity
roryabraham commentedon Aug 13, 2026
no update for now. Hoping that someone else will do the heavy lifting to figure this out in the React Native upstream.
roryabraham commentedon Sep 10, 2026
@mateuuszzzzz would you be interested in helping to supervise this? With your experience in the cocoapods/prebuilt binaries, I think you'd be a good fit.
roryabraham commentedon Sep 10, 2026
@MelvinBot is there any upstream tracking issue in the React Native repo to migrate from Cocoapods to SPM?
MelvinBot commentedon Sep 10, 2026
There's no single umbrella tracking issue in the React Native repo itself. Upstream tracking lives in
react-native-community/discussions-and-proposals, and the plan of record is RFC0994: Swift Package Manager Support for React Native iOS Projects — open since 2026-04-21, authored bychrfalch(Callstack), explicitly framed around the December 2026 CocoaPods deprecation.The two places to watch:
npx react-native spmCLI withadd --deintegratefor existing Podfile apps, and the adoption strategy.Implementation is already landing, not just proposed. Note the repo moved: it's now
react/react-native, notfacebook/react-native.Current upstream status
mainright now, e.g. Derive an SPM library's Swift name from its podspec (#58290), landed 2026-09-09. RN closes these PRs via the Meta importer, so GitHub shows them as "closed" rather than "merged" — checkmain's commit log for the real state.set -euo pipefailscripts but runs them with/bin/sh, still open).cipolleschion Update version to 1.0.1-92 #587 (2026-06-22) is still unanswered.So the heavy lifting you were hoping for is in progress. The practical read for us: subscribe to #994 and #587, and the thing that will actually gate us is third-party library readiness — every native dep we use needs a
Package.swiftor SPM metadata, and the RFC pushes that onto library authors during the transition.Next Steps: Reply with
@MelvinBot <your feedback>to refine this.view run · no recording available
roryabraham commentedon Sep 10, 2026
seems like @mrousavy also likely has good context on the Nitro side of things
mrousavy commentedon Sep 10, 2026
Yup, we can do that @ margelo
roryabraham commentedon Oct 22, 2026
No update from me on our side, but I see RN 0.87 introduced experimental SwiftPM support and recent release notes show a lot of development around SwiftPM support in React Native
roryabraham commentedon Nov 10, 2026
Bumping to weekly since the deadline is coming up
roryabraham commentedon Nov 10, 2026
CocoaPods → SwiftPM: dependency and migration scope
Bottom line: This is a migration of two iOS projects and the React Native/Expo build machinery, not just a replacement of the explicit
podlines. The production mobile build is the HybridApp. Its legacy native dependencies and notification extension are additional to the autolinked NewDot native modules. A realistic first milestone is an experimental, non-production hybrid build on RN/Expo versions with SwiftPM support, not a production cutover on December 2.Deadline clarification: CocoaPods plans to make trunk read-only on December 2, 2026, not delete the client or existing specs. Locked builds should continue resolving; new trunk versions stop. Git/npm/path pods and private spec repos are different, although their own vendors can stop releasing. For example, Firebase stopped publishing new CocoaPods versions in October; our locked native Firebase is 11.13.0. Staying on CocoaPods buys time but can freeze security/SDK updates.
Likely critical path:
How I counted / caveats
Snapshot: App
3159209Podfile, lock, package.json; the submodule pinned there is Mobile-Expensify6d2f769Podfile and lock (private repo). Checked upstream and npm on 2026-11-10.DEPENDENCIES, including autolinked Expo/RN modules and generated RN pods, not just manually writtenpodcalls. There are 157 standalone entries, 190 hybrid entries, 191 distinct entries: 76 RN core/generated entries, 22 Expo entries, 37 explicitly declared native/extension entries, and 56 other RN/first-party entries. All are accounted for below. Transitive pods are discussed where they affect a direct package, not counted as direct packages.Appductis an additional conditional debug native dependency in currentpackage.json/autolinking config but absent from both locks, so it is included separately rather than counted in 191. The two locks disagree oncallstack-repackandAirshipServiceExtension; the hybrid lock also includes three Expo entries excluded in App's currentexpo.autolinkingconfig. Re-resolve both configurations before relying on the exact graph; a lockfile entry is not proof of runtime use.truemeans a stable, published version of the actual package (including the pinned version, when no upgrade is needed) offers SPM for the product we use. Expo preview-plugin source generation/binaries and RN preview support count. It does not promise a drop-in build for our app.falseincludes unverified support, unreleased/preview-only library versions, or cases requiring an owned fork/patch to retain our changes.truemeans the consumed repository is archived/explicitly deprecated, or its default branch has had no commit since 2023-11-10 (a staleness proxy, not proof a maintainer abandoned it); links ontrueshow the archive or last commit. For forks this evaluates the source we consume, even where the parent is active.falsemeans no such evidence was found, not that maintenance is guaranteed; the proprietary Group-IB vendor status is unverified.Explicit native and extension pods
ActionSheetPicker-3.02.3.0; HAFNetworking4.0.1; HUIImageView+AFNetworkingandAFNetworkActivityIndicatorManager. UIKit SPM PR is open in the archived repo. Fork/package the UIKit categories or replace their uses; validate networking, uploads, reachability, and TrustKit.AirshipServiceExtensionS 20.0.0 / H 19.10.0; BAirshipNotificationServiceExtensionproduct (19.10, 20.0). Link it to each notification extension, and reconcile its version with the app's Airship 20.8.1 dependency.AppLogs0.1.0; BAppLogsPodsources as an independent product linked to the extension; coordinate with the RN wrapper below and verify extension-safe logging.CropViewController2.5.2; HCryptoSwift1.3.2; HDTCoreText1.6.25; HDTFoundationanddefault.cssresources.DynamicButton6.2.1; HFlexibleSteppedProgressBar0.6.1; HFloaty4.2.0; HFullStory1.76.0; B${PODS_ROOT}uploader phase with FullStory's SPM uploader path.GBDeviceInfo6.6.0; HGzipSwift5.1.1; BGzipproduct; link it to the notification extension, preserve zlib linkage and test decompression.INTULocationManager4.3.0; HCLLocationManager; preserve one-shot, continuous, cancellation, and permission behavior.JTNumberScrollAnimatedView1.0.0; HMaterialComponents/Tabs54.13.0; HMaterialComponents/TextFields+Extensions54.13.0; HMDFInternationalization/resource dependencies, or replace the controls.MRProgress0.8.3; HNSData+Base641.0.0; HNSData+MD5Digest1.0.0; HNWWebSocket0.5.10; BPureLayout3.1.4; HPusherSwiftWithEncryption10.1.6; HPusherSwiftmanifest includesTweetNaclandNWWebSocket. Unify it with the RN wrapper's Pusher dependency; verify encrypted channels and avoid duplicate frameworks.ReachabilitySwift5.0.0; HReachabilitymanifest; link and test online/offline transitions.RMDateSelectionViewController2.3.1; HRMActionControlleror replace withUIDatePicker; test date/time behavior.SDCAlertView12.0.4; HSlideMenuControllerSwift5.0.0; HSSKeychain1.2.2; HSecurity.framework, preserving service/account/accessibility and existing persisted credentials.SwiftGifOrigin1.7.0; Hv1.7.0(fork). Port/tag it or replace; account for theSwiftGifproduct/module name and test GIF decoding.SwiftLint0.53.0; H${PODS_ROOT}/SwiftLint/swiftlintphase with a pinned plugin/binary. Its SPM graph asks for CryptoSwift ≥1.7.2, which can conflict with our 1.3.2 pin; a separately installed binary avoids that graph conflict.SwiftMessages9.0.4; HTagListView1.4.0; HTrustKit3.0.7; BTTGSnackbar1.10.2; HUIImage-Resize1.0.1; HUIGraphicsImageRenderer; test output size, scale and aspect ratio.UIImageViewAlignedSwift0.3.0; Hzipzap8.0.3; HReact Native bridges and first-party modules
These are direct CocoaPods entries generated by RN autolinking. The native vendor SDK supporting SPM is not by itself SPM support for the RN bridge. “Scaffold” means try RN's podspec-to-manifest generator, inspect/patch the result, and upstream it; mixed Swift/Obj-C++ targets, scripts, binary dependencies and codegen often need manual work.
callstack-repackS 5.4.1 / H 5.3.0; BJWTDecode/SwiftyRSAdependencies and codegen; verify bundle loading.expensify-react-native-background-task0.0.0; BExpensifyNitroUtils0.0.1; Bfullstory_react-native1.10.2; Bgroup-ib-fp2.6.0; Blottie-react-native7.3.8; Blottie-spmwhile its target names the packagelottie-ios. Verify/patch that identity, link native Lottie 4.6.0 and retain privacy resources.NitroFetch1.6.2; BNitroImage0.15.2; BNitroModules0.37.1; Bonfido-react-native-sdk15.1.0; Bpusher-websocket-react-native1.3.1; BQuickCrypto1.1.6; Breact-native-advanced-input-mask1.4.6; BForkInputMask7.3.3 and new-architecture flags; test masks and editing.react-native-airship26.7.0; Breact-native-app-logs0.3.1; BAppLogsnative product with the extension; test logging from both processes.react-native-blob-util0.24.12; Breact-native-cameraroll7.4.0; Breact-native-config1.5.3; BENVFILEand generated config; test Debug/AdHoc/Release and incremental env changes.react-native-document-picker10.1.3; Breact-native-image-picker7.1.2; Breact-native-key-command1.0.14; Breact-native-keyboard-controller1.22.4; Breact-native-netinfo11.4.1; Breact-native-pager-view9.0.4; Bios/Package.swift, our pin does not. Evaluate major upgrade andSwiftUIIntrospectdependency; test paging/gestures.react-native-pdf7.0.2; Breact-native-plaid-link-sdk12.5.3; Breact-native-quick-base643.0.1; Breact-native-safe-area-context5.9.1; Breact-native-skia2.11.2; Breact-native-view-shot5.1.0; Breact-native-wallet0.1.41; Breact-native-webview16.0.0; BReactNativeBiometrics0.15.0; BReactNativeHybridApp0.0.0; BRNAppleAuthentication2.5.0; BRNCClipboard1.16.3; BRNCPicker2.11.3; BRNDeviceInfo10.3.1; BRNFBAnalytics22.2.1; BRNFBApp22.2.1; Bfirebase.json/plist configuration and align all Firebase products. The existing mixed CocoaPods+SPM path has static/dynamic linkage conflicts.RNFS2.20.0; BRNGestureHandler3.3.0; BRNGoogleSignin10.0.1; BRNLiveMarkdown0.1.371; BRNWorklets, RN headers and version flags; test rich-text editing and selection.RNLocalize3.5.4; Brnmapbox-maps10.3.10; BRNNitroSQLite10.2.0; BthreadSafe/performanceModeand SQLite flags; test database migration, writes and offline behavior.RNPermissions5.4.0; Bsetup_permissionswith equivalent config for Camera, Contacts, LocationAccuracy, LocationAlways, LocationWhenInUse; Contacts requires a separate Swift target. Test prompts and privacy manifest.RNReactNativeHapticFeedback2.3.3; BRNReanimated4.7.0; BRNWorkletstogether on the new RN version.RNScreens4.28.0; BRNSentry8.32.0; BRNShare11.0.2; BRNSVG15.15.5; BRNWorklets0.13.0; BVisionCamera5.2.3; BAppduct0.16.0; conditional S/H, not in either lockExpo autolinked pods
We are on Expo SDK 57 / RN 0.86. Expo SDK 58 pairs RN 0.88 with a preview SwiftPM plugin: plugin, 28 source manifests. Upgrade the SDK as a coherent set, then validate every module below; don't assume the current 57 packages are already consumable pod-free.
EXConstants57.0.7; BExpo57.0.8; BExpoAdapterGoogleSignIn10.0.1; HExpoAsset57.0.7; BExpoAudio57.0.3; BExpoDomWebView57.0.1; BExpoFileSystem57.0.1; HExpoFont57.0.1; BExpoImage57.0.1; BSDWebImageand AVIF/SVG/WebP codec products, then test image formats.ExpoImageManipulator57.0.6; BSDWebImageWebPCoderand test image transformations.ExpoKeepAwake57.0.1; HExpoLocation57.0.6; BExpoLogBox57.0.1; BExpoModulesCore57.0.15; BExpoModulesJSI57.0.8; BPODS_ROOTand builds an XCFramework via a pod phase; Expo plugin must replace this integration. Test Hermes/JSI headers and build flavors.ExpoModulesWorklets57.0.15; BExpoModulesWorkletsAdapter57.0.15; SRNWorkletscompatibility.ExpoStoreReview57.0.1; BExpoTaskManager57.0.6; BUMAppLoader, background registration and privacy bundle; test background launch.ExpoVideo57.0.2; BExpoWebBrowser57.0.2; BUMAppLoader57.0.1; BReact Native core and generated pods
All 76 entries below appear in both locks and are part of the same RN/Hermes/codegen migration, rather than 76 independent third-party libraries. RN RFC / community tracker: upgrade from RN 0.86 to a supported SPM-preview version, regenerate headers/codegen/autolinking and validate prebuilt React, dependencies and Hermes. RN 0.87 explicitly says its SPM path is experimental and not for production. The following table names every direct entry so none are hidden by the grouping.
All 76 direct React Native/Hermes/codegen entries
FBLazyVectorhermes-engineRCTDeprecationRCTRequiredRCTSwiftUIRCTSwiftUIWrapperRCTTypeSafetyReactReact-callinvokerReact-CoreReact-Core-prebuiltReact-Core/RCTWebSocketReact-CoreModulesReact-cxxreactReact-debugReact-defaultsnativemoduleReact-domnativemoduleReact-FabricReact-FabricComponentsReact-FabricImageReact-featureflagsReact-featureflagsnativemoduleReact-graphicsReact-hermesReact-idlecallbacksnativemoduleReact-ImageManagerReact-intersectionobservernativemoduleReact-jserrorhandlerReact-jsiReact-jsiexecutorReact-jsinspectorReact-jsinspectorcdpReact-jsinspectornetworkReact-jsinspectortracingReact-jsitoolingReact-jsitracingReact-loggerReact-MapbufferReact-microtasksnativemoduleReact-mutationobservernativemoduleReact-NativeModulesAppleReact-networkingReact-oscompatReact-perfloggerReact-performancecdpmetricsReact-performancetimelineReact-RCTActionSheetReact-RCTAnimationReact-RCTAppDelegateReact-RCTBlobReact-RCTFabricReact-RCTFBReactNativeSpecReact-RCTImageReact-RCTLinkingReact-RCTNetworkReact-RCTRuntimeReact-RCTSettingsReact-RCTTextReact-RCTVibrationReact-rendererconsistencyReact-renderercssReact-rendererdebugReact-RuntimeAppleReact-RuntimeCoreReact-runtimeexecutorReact-RuntimeHermesReact-runtimeschedulerReact-timingReact-utilsReact-viewtransitionnativemoduleReact-webperformancenativemoduleReactAppDependencyProviderReactCodegenReactCommon/turbomodule/coreReactNativeDependenciesYogaCross-cutting work / suggested sequence
spm_dependencybridge can help a particular native SDK, but still leaves CocoaPods and can conflict with our static-framework setup.iOS/Expensify.xcodeprojand standaloneios/NewExpensify.xcodeproj; validatenpx rock config -p ios/custom config command, codegen, Expo module-provider generation, new-architecture flags and permissions. Prototype without assuming--deintegratehandles our custom targets/hooks automatically.PODS_ROOTheader paths, static-framework overrides, Expo configure phase,react-native-configgeneration, FullStory uploader, RNFB plist phase, SwiftLint path, resource-copy/embed/sign phases and the hybrid duplicate-implementation workaround. Preserve per-target extension dependencies and avoid incompatible package versions/duplicate binaries. Update iOS CI pod caches/install, prebuilt-lock checks, local scripts andPackage.resolved/artifact caching.