build(deps): Bump the ruby-minor-and-patch group with 2 updates by dependabot[bot] · Pull Request #534 · wordpress-mobile/GutenbergKit

dependabot · 2026-07-01T19:02:50Z

Bumps the ruby-minor-and-patch group with 2 updates: fastlane and fastlane-plugin-wpmreleasetoolkit.

Updates fastlane from 2.234.0 to 2.236.1

Release notes

2.236.1 Improvements

Revert "[transporter] Decode Base64 key content for .p8 file generation in Al…" (#30066) via Connor Tumbleson (@iBotPeaches)

2.236.0 Improvements

[ci] fix: add 'multi_json' as direct dep due to upstream googleapis bug. (#30062) via Connor Tumbleson (@iBotPeaches)

Fix --copy_to_clipboard flag for spaceauth command (#29888) via owurman (@owurman)

[transporter] Decode Base64 key content for .p8 file generation in Al… (#30057) via Kaan Çembertaş (@kaancembertas)

[ci] remove xcode 16.3 as CircleCI dropped it (#30058) via Connor Tumbleson (@iBotPeaches)

[action] Add update_app_age_rating action for standalone age rating updates (#30025) via Pratik Patil (@PratikPatil131)

[core] Set ruby-jwt gem to v2.10.3 minimum. (#30056) via Nakshatra Singh (@nakshatrasinghh)

[snapshot] run simulator using Rosetta2 for Apple Silicon (#21559) via Iceman (@sidepelican)

[snapshot] use simulator UDIDs for destinations (#30054) via Philip Niedertscheider (@philprime)

[spaceship] remove dots from names (#30052) via Tim Shedor (@tshedor)

[docs] keep docs assets moving along during update_docs (#30051) via Connor Tumbleson (@iBotPeaches)

2.235.0 Improvements

[docs] allow deletion of no longer existing docs (#30020) via Connor Tumbleson (@iBotPeaches)

[increment_version_number] update MARKETING_VERSION build setting (#30031) via André Destro (@andredestro)

[match] nuke respects "skip_confirmation" (#30023) via Connor Tumbleson (@iBotPeaches)

[screengrab] Fix screenshot copy count and path probe output (#30038) via Nakshatra Singh (@nakshatrasinghh)

[chore] remove top level dirs of "rakelib" and "rubocop" (#30045) via Connor Tumbleson (@iBotPeaches)

[ci] fix flaky test due to time shift (#30030) via Connor Tumbleson (@iBotPeaches)

[supply] fix crash if no release on track (#30029) via Connor Tumbleson (@iBotPeaches)

[frameit] add sanitized device name to error message (#30028) via Connor Tumbleson (@iBotPeaches)

[match] strip nbsp; from return of phone 2fa (#30004) via Connor Tumbleson (@iBotPeaches)

[snapshot] fix: keep 'stderr' during simulator configuration/launch (#29839) via Connor Tumbleson (@iBotPeaches)

[ci] test on Xcode 26.5 (#30044) via Connor Tumbleson (@iBotPeaches)

[notarize] Remove legacy altool flow (#29896) via Hasancan Akgündüz (@hasancanakgunduz)

[supply] add google play endpoint for track meta (#29999) via Tim Shedor (@tshedor)

[core] Upgraded jwt gem dependency range to include v3 series (#30042) via Siddharth Bhatt (@sidbhatt11)

[pilot] Fix FrozenError when whats_new is a frozen string (#30039) via Eyüp Can Akman (@eyupcanakman)

[match] Expand range of valid characters in app name (#30036) via Michal Mazur (@michalm-st)

[spaceship][deliver][pilot] Add support for App Clips default experience metadata and review information (#30010) via Krystian Łabanowski (@Krych)

[test] skip VisionOS test if sdk not installed (#30032) via Connor Tumbleson (@iBotPeaches)

[Ruby] Ruby 3.0 is now the minimum (dropping Ruby 2.7) (#29942) via Connor Tumbleson (@iBotPeaches)

[slack] support thread_ts for slack messages (#29904) via Tim Shedor (@tshedor)

Commits

e931cf5 Version bump to 2.236.1 (#30067)
2784d84 Revert "[transporter] Decode Base64 key content for .p8 file generation in (#...
0c70b67 Version bump to 2.236.0 (#30064)
4a6c792 [core] fix: add 'multi_json' as direct dep due to upstream googleapis bug. (#...
e979ad4 [spaceauth] Fix --copy_to_clipboard flag for spaceauth command (#29888)
274a470 [transporter] Decode Base64 key content for .p8 file generation in (#30057)
efa4cab [ci] remove xcode 16.3 as CircleCI dropped it (#30058)
3f73c21 [action] Add update_app_age_rating action for standalone age rating updates (...
c30e449 [core] Set ruby-jwt gem to v2.10.3 minimum. (#30056)
57a2d0d [snapshot] run simulator using Rosetta2 for Apple Silicon (#21559)
Additional commits viewable in compare view

Updates fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.9.0

Release notes

Sourced from fastlane-plugin-wpmreleasetoolkit's releases.

14.9.0

New Features

upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733

ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719

Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719

Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Changelog

Sourced from fastlane-plugin-wpmreleasetoolkit's changelog.

14.9.0

New Features

upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733

ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719

Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719

Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Commits

29717d9 Release 14.9.0 into trunk (#748)
9078a00 Bumped to version 14.9.0
8d88607 Add GitHub release asset upload action (#743)
448e959 Find draft releases when uploading assets
d1d2011 [codex] Add failing release asset specs (#745)
572ec20 Validate GitHub release asset paths
291bee3 Merge branch 'trunk' into iangmaia/upload-github-release-assets
747d06f Add failing release asset specs
380f640 Release 14.8.0 into trunk (#744)
61f9118 Make changelog entries shorter than AI-generated ones
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-minor-and-patch group with 2 updates: [fastlane](https://github.com/fastlane/fastlane) and [fastlane-plugin-wpmreleasetoolkit](https://github.com/wordpress-mobile/release-toolkit). Updates `fastlane` from 2.234.0 to 2.236.1 - [Release notes](https://github.com/fastlane/fastlane/releases) - [Changelog](https://github.com/fastlane/fastlane/blob/master/CHANGELOG.latest.md) - [Commits](fastlane/fastlane@fastlane/2.234.0...fastlane/2.236.1) Updates `fastlane-plugin-wpmreleasetoolkit` from 14.6.0 to 14.9.0 - [Release notes](https://github.com/wordpress-mobile/release-toolkit/releases) - [Changelog](https://github.com/wordpress-mobile/release-toolkit/blob/trunk/CHANGELOG.md) - [Commits](wordpress-mobile/release-toolkit@14.6.0...14.9.0) --- updated-dependencies: - dependency-name: fastlane dependency-version: 2.236.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ruby-minor-and-patch - dependency-name: fastlane-plugin-wpmreleasetoolkit dependency-version: 14.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ruby-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

wpmobilebot · 2026-07-01T19:12:05Z

XCFramework Build

This PR's XCFramework is available for testing. Add the following to your Package.swift:

.package(url: "https://github.com/wordpress-mobile/GutenbergKit", branch: "pr-build/534")

_{Built from e9f7cac}

mokagio · 2026-07-02T07:57:18Z

Changes look good. Too bad the E2E fail.

I retried them, too.

Cc @jkmassel in case this is more than a flaky?

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 1, 2026

dependabot Bot requested a review from a team as a code owner July 1, 2026 19:02

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 1, 2026

This was referenced Jul 1, 2026

build(deps): Bump fastlane from 2.234.0 to 2.236.1 #529

Closed

build(deps): Bump fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.8.0 #531

Closed

github-actions Bot added the [Type] Build Tooling Issues or PRs related to build tooling label Jul 1, 2026

mokagio approved these changes Jul 2, 2026

View reviewed changes

mokagio enabled auto-merge (squash) July 2, 2026 07:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the ruby-minor-and-patch group with 2 updates#534

build(deps): Bump the ruby-minor-and-patch group with 2 updates#534
dependabot[bot] wants to merge 1 commit into
trunkfrom
dependabot/bundler/ruby-minor-and-patch-866977ef05

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

wpmobilebot commented Jul 1, 2026

Uh oh!

mokagio commented Jul 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.236.1 Improvements

2.236.0 Improvements

2.235.0 Improvements

14.9.0

New Features

14.8.0

New Features

14.7.0

New Features

Bug Fixes

Internal Changes

14.9.0

New Features

14.8.0

New Features

14.7.0

New Features

Bug Fixes

Internal Changes

Uh oh!

wpmobilebot commented Jul 1, 2026

XCFramework Build

Uh oh!

mokagio commented Jul 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading