Skip to content

chore(deps): bump fastlane from 2.237.0 to 2.240.1 - #1308

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/fastlane-2.240.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/fastlane-2.240.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps fastlane from 2.237.0 to 2.240.1.

Release notes

Sourced from fastlane's releases.

2.240.1 Improvements

  • [gem] add cgi gem for Ruby 4 std removal (#30232) via Connor Tumbleson (@​iBotPeaches)
  • [deliver] keep an explicitly set platform when a pkg is present (#30224) via Anand Hegde (@​anandghegde)
  • [match] upload certs immediatly to storage to prevent desync of files (#30160) via Connor Tumbleson (@​iBotPeaches)
  • security gem 0.3.0 integration (#30178) via Jerome Lacoste (@​lacostej)
  • build: prevent locking androidpublisher_v3 to 0.99.0 (#30228) via Connor Tumbleson (@​iBotPeaches)
  • [tests] Keep the Tempfile, not only its path (#30227) via Jerome Lacoste (@​lacostej)
  • [tests] Stop four specs writing into the shared temp root (#30225) via Jerome Lacoste (@​lacostej)
  • [tests] Restore the working directory structurally in two specs (#30221) via Jerome Lacoste (@​lacostej)
  • [tests] Remove the fixed paths under /tmp from the test suite (#30220) via Jerome Lacoste (@​lacostej)
  • build(deps): bump actions/upload-artifact from 4 to 7 (#30222) via dependabot[bot] (@​dependabot[bot])

2.240.0 Improvements

  • [fastlane_core] Fix for upload_to_testflight and altool - report failure, but upload succeeds (#30196) via Michal Šrůtek (@​michalsrutek)
  • [ci] run full workflows on master as they stack (#30218) via Connor Tumbleson (@​iBotPeaches)
  • chore: treat 'both' as 'all' for all 3 platforms (#30214) via Connor Tumbleson (@​iBotPeaches)
  • [tests] Give each spec its own scratch directory instead of /tmp/fastlane (#30217) via Jerome Lacoste (@​lacostej)
  • [tests] Stop a spec mutating the plist fixture another spec reads (#30215) via Jerome Lacoste (@​lacostej)
  • [spaceship] Read the App Store Connect API key from where Apple keeps it now (#30206) via Jerome Lacoste (@​lacostej)
  • [tests] Stop two spec files racing for the system clipboard (#30211) via Jerome Lacoste (@​lacostej)
  • [spaceship] Say what actually went wrong fetching the App Store Connect API key (#30205) via Jerome Lacoste (@​lacostej)
  • [core] Stop hardcoding /tmp where a real path is needed (#30209) via Jerome Lacoste (@​lacostej)
  • Run the CI suite as several processes (#30202) via Jerome Lacoste (@​lacostej)
  • Run the spec suite as several processes (#30191) via Jerome Lacoste (@​lacostej)
  • [fastlane_core] Carry the pty exit status as a value rather than in $? (#30201) via Jerome Lacoste (@​lacostej)
  • Stop two specs depending on process wide state another example populated (#30200) via Jerome Lacoste (@​lacostej)
  • [spaceship] Use the system temporary directory instead of a literal /tmp (#30197) via Jerome Lacoste (@​lacostej)
  • Stop two specs depending on files an earlier run left behind (#30195) via Jerome Lacoste (@​lacostej)
  • Report the environment variables that escape the example that set them (#30194) via Jerome Lacoste (@​lacostej)
  • Stop nine specs depending on what ran before them (#30193) via Jerome Lacoste (@​lacostej)
  • Stop spaceship specs sharing clients and cached state (#30192) via Jerome Lacoste (@​lacostej)
  • Stop specs depending on module level configuration another example left behind (#30190) via Jerome Lacoste (@​lacostej)
  • build: move to Bundler 2.6.9 (#30185) via Connor Tumbleson (@​iBotPeaches)
  • Define only the trainer fixture groups that apply to the current xcresulttool (#30183) via Jerome Lacoste (@​lacostej)
  • Surface xcresulttool version detection failures instead of hiding them (#30182) via Jerome Lacoste (@​lacostej)
  • Stop the pilot transporter specs querying the real Keychain (#30181) via Jerome Lacoste (@​lacostej)
  • Fix flaky fastlane_pty_spec by applying the PTY flush workaround (#30180) via Jerome Lacoste (@​lacostej)
  • [gym][scan][snapshot] Add disallow_xcodebuild_settings_lookup option (#30112) via Brett Best (@​Brett-Best)
  • [gem] move to rubyzip v3 (#30176) via Connor Tumbleson (@​iBotPeaches)
  • chore: update security gem to 0.2.0 (#30177) via Jerome Lacoste (@​lacostej)
  • [ci] unset GEM_HOST_API_KEY for GHA publish (#30174) via Connor Tumbleson (@​iBotPeaches)

2.239.0 Improvements

... (truncated)

Commits
  • 1b9d750 Version bump to 2.240.1 (#30233)
  • 354da89 [gem] add cgi gem for Ruby 4 std removal (#30232)
  • f05f95e [deliver] keep an explicitly set platform when a pkg is present (#30224)
  • d6c0e95 [match] upload certs immediatly to storage to prevent desync of files (#30160)
  • cf9422b security gem 0.3.0 integration (#30178)
  • 4a52b9a [gem] prevent locking androidpublisher_v3 to 0.99.0 (#30228)
  • 3309d41 [tests] Keep the Tempfile, not only its path (#30227)
  • bc8a1e0 [tests] Stop four specs writing into the shared temp root (#30225)
  • 3b29558 [tests] Restore the working directory structurally in two specs (#30221)
  • 88365c6 [tests] Remove the fixed paths under /tmp from the test suite (#30220)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fastlane](https://github.com/fastlane/fastlane) from 2.237.0 to 2.240.1.
- [Release notes](https://github.com/fastlane/fastlane/releases)
- [Changelog](https://github.com/fastlane/fastlane/blob/master/CHANGELOG.latest.md)
- [Commits](fastlane/fastlane@fastlane/2.237.0...fastlane/2.240.1)

---
updated-dependencies:
- dependency-name: fastlane
  dependency-version: 2.240.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from naveensingh as a code owner September 21, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants