SPM Failed to verified fingerprint for SSH url since Tahoe 26.3

Hi there,

I recently updated to the latest version of macOS Tahoe 26.3. Since then, Xcode is not able to resolve my Swift Package dependencies anymore. We use SSH for all our Github hosted packages. When package resolution is running, we randomly have Failed to verify SSH fingerprint on some remote package.

Nothing has changed and it worked perfectly with Tahoe 26.2. The SSH have been reconfigured and known hosts have been verified.

Is something changed between those 2 versions or is it a bug ?

I'm also seeing this issue. A workaround seems to be to run:

xcodebuild -resolvePackageDependencies

from the command line, which Xcode then seems to pick up. No idea why it doesn't work in Xcode itself.

Can confirm the same bug on various machines with various different setups.

Issue happens only on Tahoe 26.3, but with Xcode 26.1.1, Xcode 26.2 and Xcode 26.3 RC. Issue happens with public projects and proper setups of SSH keys, known_hosts, Xcode settings etc.

Issue doesn't happen for all projects but for those affected it happens even on a first checkout with a fresh Xcode install that has never seen that project before. Haven't figured out exactly what triggers the issue, but projects that have dependencies that have dependencies again seems to have a higher likelihood.

Only mitigation is to run xcodebuild -resolvePackageDependencies via terminal before opening the project, that still works fine under macOS 26.3, resolving directly in Xcode always fils with Failed to verify SSH fingerprint.

Can confirm the findings of Onranym - this is also reproducible on a fresh install of macOS 26.3.

Hi,

I have the exact problem and have been struggling sins yesterday. xcodebuild -resolvePackageDependencies helps a bit but for some reason when I have a branch dependency it does not resolve the latest commit.

  1. quit Xcode
  2. in the terminal go into your .xcodeproj, then .xcworkspace, then xcshareddata
  3. delete the Package.resolved from the swiftpm folder
  4. reopen your project in Xcode. packages should properly update now
SPM Failed to verified fingerprint for SSH url since Tahoe 26.3
 
 
Q