chore(deps): update dependency fastlane to v2.238.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
fastlane (source, changelog)	2.236.0 → 2.238.0

---

Release Notes

fastlane/fastlane (fastlane)

v2.238.0: Improvements

Compare Source

• [ci] support releases with PRs that were deleted (or users) (#​30105) via Connor Tumbleson (@​iBotPeaches)
• [pilot] Match groups by either name or id (#​30104) via Alexander Chapliuk (@​krin-san)
• [update_project_team] add support for sdk conditionals (#​30142) via Connor Tumbleson (@​iBotPeaches)
• harden: detected non-static command inside ` in... (#​30148) via Anupam Mediratta (@​anupamme)
• [fastlane_core] Create a unique package directory for non-macOS uploads (#​30144) via Victor Amorim dos Santos (@​victoramsantos)
• [gem] move to webrick 1.9.x (#​30135) via Connor Tumbleson (@​iBotPeaches)
• [gem] upgrade 'terminal-table' to drop monkey patch (#​30137) via Connor Tumbleson (@​iBotPeaches)
• [core] Fix video resolution parsing when audio track precedes video track (#​30143) via Thomas Walther (@​tcwalther)
• [gym] Fix Mac Catalyst package type detection when catalyst_platform is not set (#​29829) via Josh Holtz (@​joshdholtz)
• [deliver/pilot] change instruction on how to run iTMSTransporter (#​21155) via Merlin Ran (@​merlinran)
• [gem] move to sinatra 4 (#​30134) via Connor Tumbleson (@​iBotPeaches)
• [action][spm] add --skip-update (#​21127) via Atsuto Yamashita (@​att55)
• Fix precheck copyright rule wording (#​19500) via Andreas Ganske (@​ChaosCoder)
• docs: add detailed notation of what metrics collected (#​30132) via Connor Tumbleson (@​iBotPeaches)
• Bump actions/labeler from 6 to 7 (#​30133) via dependabot[bot] (@​dependabot[bot])
• [upload_symbols_to_crashlytics] Adds option to let the action fail when an upload fails (#​29700) via Tobias Kreß (@​Myrronth)
• [deliver] add support for social media rating keys (#​30128) via Connor Tumbleson (@​iBotPeaches)
• [core] Support for Ruby 4 (+ testing) (#​29849) via Connor Tumbleson (@​iBotPeaches)
• [register_devices] Ignore blank lines and comment lines in devices_file (#​30129) via David Cordero (@​dcordero)
• [core] detect installed Developer ID intermediate certificates by their common name (#​30126) via Rinat Kutuev (@​ReilganInt)
• [core] move to xcodeproj 1.28.1 (from 1.27.0) (#​30124) via Nuno de Carvalho (@​nmcc24)
• [core] normalize FastlaneSwiftRunner.xcodeproj plist quoting (#​30125) via Nuno de Carvalho (@​nmcc24)
• [register_devices] Register devices normalization for UDIDs. (#​29981) via Muhammet Ilendemli (@​ilendemli)
• [crashlytics] improve logging during error (#​30077) via Connor Tumbleson (@​iBotPeaches)
• [setup_ci] Add option to opt out of setting the default keychain (#​30121) via Eyüp Can Akman (@​eyupcanakman)
• [snapshot] Open the requested simulator for non-headless runs (#​30119) via huven (@​huven)
• [core] improve operating_system detection (#​30118) via Connor Tumbleson (@​iBotPeaches)
• [core] fix: upgrade yard to >= 0.9.42 (CVE-2026-41493) (#​30117) via OrbisAI Security (@​orbisai0security)
• [core] move to Faraday 2 (#​30089) via Connor Tumbleson (@​iBotPeaches)
• [docs] clarify platform resolution behavior (#​22185) via Douglas Hill (@​douglashill)
• [core] fix crash when uploading large .pkg by using Digest::MD5.file instead of Digest::MD5.hexdigest (#​21999) via reflexing (@​reflexing)
• [docs] fix a missing negation in pilot error message (#​22331) via Gemma Barlow (@​gemmakbarlow)
• [notarize] Fix erroring out with bundle_id parameter being absent (#​29736) via Timur Sharifianov (@​Scvairy)
• [metrics] move to GA4 and improve metrics (#​30111) via Connor Tumbleson (@​iBotPeaches)

v2.237.0: Improvements

Compare Source

• [ci] drop CircleCI for GHA (#​30108) via Connor Tumbleson (@​iBotPeaches)
• [fastlane_core] Restore altool -f flag, keep -assetFile only for iTMSTransporter (#​30106) via Roman Gardukevich (@​OdNairy)
• [gym] handle xcpretty errors cleaner & promote xcbeautify (#​30099) via Connor Tumbleson (@​iBotPeaches)
• [docs] Reflect specification changes regarding iPad Pro 12.9-inch screenshots in deliver (#​30103) via 417-72KI (@​417-72KI)
• [core] Reduce duplication on output and noise during failure. (#​30097) via Connor Tumbleson (@​iBotPeaches)
• Bump actions/checkout from 6 to 7 (#​30100) via dependabot[bot] (@​dependabot[bot])
• [match] Restore renew expired certs (opt in) (#​30096) via Roman Gardukevich (@​OdNairy)
• [match] fail fast for SSH authentication prompts in non-interactive shell (#​30078) via Pratik Patil (@​PratikPatil131)
• [gem] move to faraday 1.10.6 (#​30095) via Connor Tumbleson (@​iBotPeaches)
• [core] Skip repeating the output again when an sh command fails (#​19545) via Peter Tutervai (@​tutipeti)
• [scan] Forward force_legacy_xcresulttool to trainer (#​30092) via Eyüp Can Akman (@​eyupcanakman)
• [trainer] Fix output_remove_retry_attempts not stripping failures for skipped-on-retry tests (modern xcresult parser) (#​30081) via Oliver Fox (@​foxware00)
• [scan] Handle array destination in xcodebuild_destination_parameter (#​30069) via Ricardo Sawir (@​sawirricardo)
• [action][swiftlint] Fix path option for SwiftLint 0.48.0 and above (#​30080) via Augusto Xavier (@​augustocbx)
• [ci] move more workflows from CircleCI -> GHA (#​30090) via Connor Tumbleson (@​iBotPeaches)
• [core] remove upper bound on excon (#​30085) via Connor Tumbleson (@​iBotPeaches)
• Bump actions/checkout from 6 to 7 (#​30091) via dependabot[bot] (@​dependabot[bot])
• [spaceship] Fix appInfoLocalizations create/delete on the Tunes API (#​30084) via Marcel Hoppe (@​hoppsen)
• [match] Fix keychain import path escaping (#​30072) via Ricardo Sawir (@​sawirricardo)
• [precheck] Fix copyright year check to allow past years (#​30076) via Augusto Xavier (@​augustocbx)
• [supply] Fix version_codes_to_retain causing promote-only flow to use… (#​30073) via Pratik Patil (@​PratikPatil131)
• Bump rubygems/configure-rubygems-credentials from 2.0.0 to 2.1.0 (#​30074) via dependabot[bot] (@​dependabot[bot])
• [fastlane_core] Fix deprecated Transporter -f flag, use -assetFile fo… (#​30061) via Pratik Patil (@​PratikPatil131)
• [core] fix: update addressable to 2.9.0 min for CVE-2026-35611 (#​30060) via OrbisAI Security (@​orbisai0security)

v2.236.1: Improvements

Compare Source

• Revert "[transporter] Decode Base64 key content for .p8 file generation in Al…" (#​30066) via Connor Tumbleson (@​iBotPeaches)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sentry]

📲 Install Builds

iOS

🔗 App Name	App ID	Version	Configuration
HackerNews	com.emergetools.hackernews	3.10 (1)	Release
HackerNews	com.emergetools.hackernews	3.10 (1)	AdHoc

⚙️ hackernews-ios Build Distribution Settings

[emerge-tools]

📸 Snapshot Test

1 modified, 43 unchanged

Name	Added	Removed	Modified	Renamed	Unchanged	Errored	Approval
HackerNews com.emergetools.hackernews.snapshots	0	0	1	0	43	0	⏳ Needs approval

---

🛸 Powered by Emerge Tools

[sentry]

Sentry Snapshot Testing

Name	Added	Removed	Changed	Renamed	Unchanged	Skipped	Status
com.emergetools.hackernews com.emergetools.hackernews	0	0	0	0	132	0	✅ Unchanged
com.emergetools.hackernews.swift-snapshot-testing com.emergetools.hackernews.swift-snapshot-testing	0	0	0	0	18	0	✅ Unchanged

⚙️ hackernews-ios Snapshot Settings