This release includes 3 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
ReleasePort's take
Moderate signalFastlane v2.235.0 now requires Ruby 3.0 or newer; support for Ruby 2.7 is dropped.
Why it matters: If your CI/CD pipelines use fastlane with Ruby 2.7, upgrade to Ruby 3.0 immediately before the next deployment cycle.
Summary
AI summaryUpdates @iBotPeaches, @tshedor, and @andredestro across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Drops Ruby 2.7; requires Ruby 3.0 minimum. Drops Ruby 2.7; requires Ruby 3.0 minimum. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds Google Play endpoint for track metadata in supply. Adds Google Play endpoint for track metadata in supply. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Expands valid characters allowed in app name within match. Expands valid characters allowed in app name within match. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds support for App Clips default experience metadata and review info across spaceship, deliver, pilot. Adds support for App Clips default experience metadata and review info across spaceship, deliver, pilot. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Enables Slack thread_ts parameter for slack messages. Enables Slack thread_ts parameter for slack messages. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Prevents crash in supply when no release is on track. Prevents crash in supply when no release is on track. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Corrects screenshot copy count and path probe output in screengrab. Corrects screenshot copy count and path probe output in screengrab. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Strips non‑breaking space from phone 2FA return value in match. Strips non‑breaking space from phone 2FA return value in match. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Keeps 'stderr' during simulator configuration and launch in snapshot. Keeps 'stderr' during simulator configuration and launch in snapshot. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Resolves FrozenError when whats_new is a frozen string in pilot. Resolves FrozenError when whats_new is a frozen string in pilot. Source: llm_adapter@2026-05-26 Confidence: high |
— |
Full changelog
- [docs] allow deletion of no longer existing docs (#30020) via Connor Tumbleson (@iBotPeaches)
- [increment_version_number] update MARKETING_VERSION build setting (#30031) via André Destro (@andredestro)
- [match] nuke respects "skip_confirmation" (#30023) via Connor Tumbleson (@iBotPeaches)
- [screengrab] Fix screenshot copy count and path probe output (#30038) via Nakshatra Singh (@nakshatrasinghh)
- [chore] remove top level dirs of "rakelib" and "rubocop" (#30045) via Connor Tumbleson (@iBotPeaches)
- [ci] fix flaky test due to time shift (#30030) via Connor Tumbleson (@iBotPeaches)
- [supply] fix crash if no release on track (#30029) via Connor Tumbleson (@iBotPeaches)
- [frameit] add sanitized device name to error message (#30028) via Connor Tumbleson (@iBotPeaches)
- [match] strip nbsp; from return of phone 2fa (#30004) via Connor Tumbleson (@iBotPeaches)
- [snapshot] fix: keep 'stderr' during simulator configuration/launch (#29839) via Connor Tumbleson (@iBotPeaches)
- [ci] test on Xcode 26.5 (#30044) via Connor Tumbleson (@iBotPeaches)
- [notarize] Remove legacy altool flow (#29896) via Hasancan Akgündüz (@hasancanakgunduz)
- [supply] add google play endpoint for track meta (#29999) via Tim Shedor (@tshedor)
- [core] Upgraded jwt gem dependency range to include v3 series (#30042) via Siddharth Bhatt (@sidbhatt11)
- [pilot] Fix FrozenError when whats_new is a frozen string (#30039) via Eyüp Can Akman (@eyupcanakman)
- [match] Expand range of valid characters in app name (#30036) via Michal Mazur (@michalm-st)
- [spaceship][deliver][pilot] Add support for App Clips default experience metadata and review information (#30010) via Krystian Łabanowski (@Krych)
- [test] skip VisionOS test if sdk not installed (#30032) via Connor Tumbleson (@iBotPeaches)
- [Ruby] Ruby 3.0 is now the minimum (dropping Ruby 2.7) (#29942) via Connor Tumbleson (@iBotPeaches)
- [slack] support thread_ts for slack messages (#29904) via Tim Shedor (@tshedor)
Breaking Changes
- Minimum required Ruby version raised to 3.0 (drops support for Ruby 2.7)
- [docs] Allow deletion of no longer existing documentation files
- [match] 'nuke' respects the "skip_confirmation" flag
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About fastlane
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]