Skip to content

chore(deps): bump fastlane from 2.237.0 to 2.240.1 - #1155

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/fastlane-2.240.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/fastlane-2.240.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps fastlane from 2.237.0 to 2.240.1.

Release notes

Sourced from fastlane's releases.

2.240.1 Improvements

  • [gem] add cgi gem for Ruby 4 std removal (#30232) via Connor Tumbleson (@​iBotPeaches)
  • [deliver] keep an explicitly set platform when a pkg is present (#30224) via Anand Hegde (@​anandghegde)
  • [match] upload certs immediatly to storage to prevent desync of files (#30160) via Connor Tumbleson (@​iBotPeaches)
  • security gem 0.3.0 integration (#30178) via Jerome Lacoste (@​lacostej)
  • build: prevent locking androidpublisher_v3 to 0.99.0 (#30228) via Connor Tumbleson (@​iBotPeaches)
  • [tests] Keep the Tempfile, not only its path (#30227) via Jerome Lacoste (@​lacostej)
  • [tests] Stop four specs writing into the shared temp root (#30225) via Jerome Lacoste (@​lacostej)
  • [tests] Restore the working directory structurally in two specs (#30221) via Jerome Lacoste (@​lacostej)
  • [tests] Remove the fixed paths under /tmp from the test suite (#30220) via Jerome Lacoste (@​lacostej)
  • build(deps): bump actions/upload-artifact from 4 to 7 (#30222) via dependabot[bot] (@​dependabot[bot])

2.240.0 Improvements

  • [fastlane_core] Fix for upload_to_testflight and altool - report failure, but upload succeeds (#30196) via Michal Šrůtek (@​michalsrutek)
  • [ci] run full workflows on master as they stack (#30218) via Connor Tumbleson (@​iBotPeaches)
  • chore: treat 'both' as 'all' for all 3 platforms (#30214) via Connor Tumbleson (@​iBotPeaches)
  • [tests] Give each spec its own scratch directory instead of /tmp/fastlane (#30217) via Jerome Lacoste (@​lacostej)
  • [tests] Stop a spec mutating the plist fixture another spec reads (#30215) via Jerome Lacoste (@​lacostej)
  • [spaceship] Read the App Store Connect API key from where Apple keeps it now (#30206) via Jerome Lacoste (@​lacostej)
  • [tests] Stop two spec files racing for the system clipboard (#30211) via Jerome Lacoste (@​lacostej)
  • [spaceship] Say what actually went wrong fetching the App Store Connect API key (#30205) via Jerome Lacoste (@​lacostej)
  • [core] Stop hardcoding /tmp where a real path is needed (#30209) via Jerome Lacoste (@​lacostej)
  • Run the CI suite as several processes (#30202) via Jerome Lacoste (@​lacostej)
  • Run the spec suite as several processes (#30191) via Jerome Lacoste (@​lacostej)
  • [fastlane_core] Carry the pty exit status as a value rather than in $? (#30201) via Jerome Lacoste (@​lacostej)
  • Stop two specs depending on process wide state another example populated (#30200) via Jerome Lacoste (@​lacostej)
  • [spaceship] Use the system temporary directory instead of a literal /tmp (#30197) via Jerome Lacoste (@​lacostej)
  • Stop two specs depending on files an earlier run left behind (#30195) via Jerome Lacoste (@​lacostej)
  • Report the environment variables that escape the example that set them (#30194) via Jerome Lacoste (@​lacostej)
  • Stop nine specs depending on what ran before them (#30193) via Jerome Lacoste (@​lacostej)
  • Stop spaceship specs sharing clients and cached state (#30192) via Jerome Lacoste (@​lacostej)
  • Stop specs depending on module level configuration another example left behind (#30190) via Jerome Lacoste (@​lacostej)
  • build: move to Bundler 2.6.9 (#30185) via Connor Tumbleson (@​iBotPeaches)
  • Define only the trainer fixture groups that apply to the current xcresulttool (#30183) via Jerome Lacoste (@​lacostej)
  • Surface xcresulttool version detection failures instead of hiding them (#30182) via Jerome Lacoste (@​lacostej)
  • Stop the pilot transporter specs querying the real Keychain (#30181) via Jerome Lacoste (@​lacostej)
  • Fix flaky fastlane_pty_spec by applying the PTY flush workaround (#30180) via Jerome Lacoste (@​lacostej)
  • [gym][scan][snapshot] Add disallow_xcodebuild_settings_lookup option (#30112) via Brett Best (@​Brett-Best)
  • [gem] move to rubyzip v3 (#30176) via Connor Tumbleson (@​iBotPeaches)
  • chore: update security gem to 0.2.0 (#30177) via Jerome Lacoste (@​lacostej)
  • [ci] unset GEM_HOST_API_KEY for GHA publish (#30174) via Connor Tumbleson (@​iBotPeaches)

2.239.0 Improvements

... (truncated)

Commits
  • 1b9d750 Version bump to 2.240.1 (#30233)
  • 354da89 [gem] add cgi gem for Ruby 4 std removal (#30232)
  • f05f95e [deliver] keep an explicitly set platform when a pkg is present (#30224)
  • d6c0e95 [match] upload certs immediatly to storage to prevent desync of files (#30160)
  • cf9422b security gem 0.3.0 integration (#30178)
  • 4a52b9a [gem] prevent locking androidpublisher_v3 to 0.99.0 (#30228)
  • 3309d41 [tests] Keep the Tempfile, not only its path (#30227)
  • bc8a1e0 [tests] Stop four specs writing into the shared temp root (#30225)
  • 3b29558 [tests] Restore the working directory structurally in two specs (#30221)
  • 88365c6 [tests] Remove the fixed paths under /tmp from the test suite (#30220)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fastlane](https://github.com/fastlane/fastlane) from 2.237.0 to 2.240.1.
- [Release notes](https://github.com/fastlane/fastlane/releases)
- [Changelog](https://github.com/fastlane/fastlane/blob/master/CHANGELOG.latest.md)
- [Commits](fastlane/fastlane@fastlane/2.237.0...fastlane/2.240.1)

---
updated-dependencies:
- dependency-name: fastlane
  dependency-version: 2.240.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from naveensingh as a code owner September 21, 2026 04:13
@dependabot dependabot Bot added the ruby Pull requests that update ruby code label Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants