build(deps): Bump fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.10.0 in the ruby-minor-and-patch group across 1 directory

[dependabot]

Bumps the ruby-minor-and-patch group with 1 update in the / directory: fastlane-plugin-wpmreleasetoolkit.

Updates fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.10.0

Release notes

Sourced from fastlane-plugin-wpmreleasetoolkit's releases.

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Changelog

Sourced from fastlane-plugin-wpmreleasetoolkit's changelog.

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Commits

• 93464af Release 14.10.0 into trunk (#752)
• 7105ca1 Bumped to version 14.10.0
• 28272d7 Add android_prune_orphaned_translations action (#734)
• f6c78ff Skip Android UI-mode values-* qualifier dirs (e.g. values-car) when pruni...
• 56dd66d Skip Android UI-mode qualifier dirs (e.g. values-car) when pruning
• 88bfb27 Bump concurrent-ruby for CVE-2026-54904 (#751)
• 109d55a Add PR no. for concurrent-ruby to changelog
• 4d4568f Bump concurrent-ruby for CVE-2026-54904
• f62d68e Update vulnerable Ruby gems (#749)
• 0a194dc Update vulnerable Ruby gems
• Additional commits viewable in compare view

[wpmobilebot]

XCFramework Build

This PR's XCFramework is available for testing. Add the following to your Package.swift:

.package(url: "https://github.com/wordpress-mobile/GutenbergKit", branch: "pr-build/548")

_{Built from f0614c4}