[dependabot]

Bumps maierj/fastlane-action from 3.1.0 to 3.2.0.

Release notes

Sourced from maierj/fastlane-action's releases.

Dependency Update

• Updated npm packages
• Updated workflow packages
• Updated Action runtime to Node 24

Commits

• 182983d Merge remote-tracking branch 'refs/remotes/origin/development' into development
• da92782 chore: bump version to 3.2.0 and update documentation
• 6962c51 Merge pull request #117 from bobinrinder/update-node-to-24
• 4192778 Merge remote-tracking branch 'refs/remotes/origin/development' into development
• 788932e fix: update runner version and improve error handling in main.js
• ec8eb0f Merge pull request #118 from maierj/dependabot/github_actions/actions/github-...
• 7daf92d Bump actions/github-script from 0.2.0 to 9.0.0
• e7a89a9 chore: dependency upgrades
• 5405f44 updated node to 24
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sourceant]

Code Review Summary

Dependabot bumps the maierj/fastlane-action GitHub Action from v3.1.0 to v3.2.0 in .github/workflows/deploy-with-fastlane.yaml, updating both the TestFlight deployment step and the Play Store release step. The new release updates its npm and workflow dependencies and moves the action runtime to Node 24.

🚀 Key Improvements

• Updates maierj/fastlane-action to v3.2.0, which runs on the Node 24 action runtime.
• Both iOS TestFlight and Android Play Store deployment steps are kept on the same action version.

💡 Minor Suggestions

• [warning] .github/workflows/deploy-with-fastlane.yaml:53 (semgrep github-actions-mutable-action-tag): GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608.
• [warning] .github/workflows/deploy-with-fastlane.yaml:111 (semgrep github-actions-mutable-action-tag): GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608.
• Review coverage is incomplete. Inspect the execution details before approving.

[sourceant]

Review complete. See the overview comment for a summary.