Swift PM 5.9 has a new rule around having "stable" dependencies if the parent package is added as "stable". This means to get things working on the next version of Xcode/SwiftPM; we'll either need to point argon2 at a stable tag (instead of .branch("master")) or document that you can't use the from: "1.0.4" syntax when including as a package.