Bump fastlane-plugin-wpmreleasetoolkit from 13.8.1 to 14.11.1

[dependabot]

Bumps fastlane-plugin-wpmreleasetoolkit from 13.8.1 to 14.11.1.

Release notes

Sourced from fastlane-plugin-wpmreleasetoolkit's releases.

14.11.1

Bug Fixes

• create_github_release no longer crashes with FrozenError when the optional release_notes_file_path is omitted. #759

14.11.0

New Features

• New macos_verify_code_signing action, asserting that macOS artifacts are signed, signed by the expected authority, accepted by Gatekeeper, and have a notarization ticket stapled to them. Handles .app bundles and .dmg disk images, picking the checks that apply to each. #757

Bug Fixes

• StringsFileValidationHelper.find_duplicated_keys now parses unquoted keys/values and inter-token comments, matching the grammar plutil accepts, instead of raising Invalid character. This lets ios_lint_localizations' check_duplicate_keys work on InfoPlist.strings-style files. #741
• ios_lint_localizations' check_duplicate_keys now warns and skips, rather than crashing, on a file that parses as a property list but isn't a tokenizable flat .strings. #741
• L10nHelper.merge_strings now prefixes keys via a comment-aware tokenizer, so unquoted keys, unquoted values, and keys behind an inter-token comment are prefixed in the output consistently with the reported keys. #741
• Bump fastlane to ~> 2.237 to pull in excon >= 1.5.0, fixing CVE-2026-54171 / GHSA-48rx-c7pg-q66r. #754
• upload_github_release_assets: make release lookup more resilient by falling back to GitHub's direct release-by-tag lookup when the releases list does not include the requested release. #753

Internal Changes

• Added regression coverage for upload_github_release_assets direct release lookup errors. #755
• Centralized .strings duplicate-key detection behind StringsFileValidationHelper.scan_for_duplicate_keys, returning a [:scanned | :unsupported_format | :unscannable, payload] tri-state that callers can map to their own warn-and-skip vs fail-closed policy. #741
• L10nHelper.strings_file_type and StringsFileValidationHelper.scan_for_duplicate_keys accept assume_valid: to skip a redundant plutil -lint when the caller has already parsed the file. #741
• Bumped development Ruby version to 3.4.9 #729

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

... (truncated)

Changelog

Sourced from fastlane-plugin-wpmreleasetoolkit's changelog.

14.11.1

Bug Fixes

• create_github_release no longer crashes with FrozenError when the optional release_notes_file_path is omitted. #759

14.11.0

New Features

• New macos_verify_code_signing action, asserting that macOS artifacts are signed, signed by the expected authority, accepted by Gatekeeper, and have a notarization ticket stapled to them. Handles .app bundles and .dmg disk images, picking the checks that apply to each. #757

Bug Fixes

• StringsFileValidationHelper.find_duplicated_keys now parses unquoted keys/values and inter-token comments, matching the grammar plutil accepts, instead of raising Invalid character. This lets ios_lint_localizations' check_duplicate_keys work on InfoPlist.strings-style files. #741
• ios_lint_localizations' check_duplicate_keys now warns and skips, rather than crashing, on a file that parses as a property list but isn't a tokenizable flat .strings. #741
• L10nHelper.merge_strings now prefixes keys via a comment-aware tokenizer, so unquoted keys, unquoted values, and keys behind an inter-token comment are prefixed in the output consistently with the reported keys. #741
• Bump fastlane to ~> 2.237 to pull in excon >= 1.5.0, fixing CVE-2026-54171 / GHSA-48rx-c7pg-q66r. #754
• upload_github_release_assets: make release lookup more resilient by falling back to GitHub's direct release-by-tag lookup when the releases list does not include the requested release. #753

Internal Changes

• Added regression coverage for upload_github_release_assets direct release lookup errors. #755
• Centralized .strings duplicate-key detection behind StringsFileValidationHelper.scan_for_duplicate_keys, returning a [:scanned | :unsupported_format | :unscannable, payload] tri-state that callers can map to their own warn-and-skip vs fail-closed policy. #741
• L10nHelper.strings_file_type and StringsFileValidationHelper.scan_for_duplicate_keys accept assume_valid: to skip a redundant plutil -lint when the caller has already parsed the file. #741
• Bumped development Ruby version to 3.4.9 #729

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

... (truncated)

Commits

• 545bcca Release 14.11.1 into trunk (#760)
• d703c05 Bumped to version 14.11.1
• 3ac393d Fix create_github_release crashing when no release notes are given (#759)
• 8fdd882 Use allow instead of expect when stubbing create_release
• 042879b Add CHANGELOG entry
• aa033ac Fix create_github_release crashing when no release notes are given
• 64a0694 Release 14.11.0 into trunk (#758)
• 04e6e26 Bumped to version 14.11.0
• a5c8412 Use Ruby 3.4.9 and re-bundle (#729)
• d43af2d Fix faraday regression to >= 1.10.5 instead of >=1.10.6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dangermattic]

	1 Warning
⚠️	PR is not assigned to a milestone.

Generated by 🚫 Danger

[wpmobilebot]

📲 You can test the changes from this Pull Request in Simplenote Android by scanning the QR code below to install the corresponding build.

	App Name	Simplenote Android
	Build Type	Debug
	Commit	fbcd623
	Direct Download	simplenote-android-prototype-build-pr1855-fbcd623-019facb9-4149-4180-ad9f-a2560705b5cd.apk

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.