build: advance TestFlight hotfix to 2026.7.28

Author: takemiyamakoto

Jenkinsfile

@@ -134,7 +134,7 @@ try {
           echo "Exact Release gate requires dispatch to an arm64 macOS agent." >&2
           exit 78
         }
-        IOS_EXPECTED_BUILD_NUMBER=2026.7.27 \
+        IOS_EXPECTED_BUILD_NUMBER=2026.7.28 \
           IOS_RELEASE_SOURCE_PACKAGES_DIR="$PWD/SourcePackages" \
           bash scripts/ci/audit-ios-release-identity.sh
         bash scripts/storage/audit-user-storage-compatibility-models.sh

fearless.xcodeproj/project.pbxproj

@@ -19547,7 +19547,7 @@
 				CODE_SIGN_ENTITLEMENTS = fearless/WalletConnect.entitlements;
 				CODE_SIGN_IDENTITY = "Apple Distribution: Soramitsu Co., Ltd. (YLWWUD25VZ)";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 2026.7.27;
+				CURRENT_PROJECT_VERSION = 2026.7.28;
 				DEVELOPMENT_TEAM = YLWWUD25VZ;
 				ENABLE_BITCODE = NO;
 				INFOPLIST_FILE = fearless/Info.plist;

scripts/ci/audit-ios-release-identity.sh

@@ -103,7 +103,6 @@ if [[ -z "$settings_json" ]]; then
     -destination "generic/platform=iOS"
     -showBuildSettings
     -json
-    "CURRENT_PROJECT_VERSION=$EXPECTED_BUILD"
   )
 
   if [[ -n "${IOS_RELEASE_SOURCE_PACKAGES_DIR:-}" ]]; then

scripts/ci/build-audited-ios-release-archive.sh

@@ -13,9 +13,9 @@ readonly EXPECTED_SIGNING_IDENTITY="Apple Distribution: Soramitsu Co., Ltd. (YLW
 readonly EXPECTED_SIGNING_CERTIFICATE_SHA1="84AB95335BE14CAE9B050A353910F86FF2F9539B"
 readonly EXPECTED_PROFILE_NAME="Fearless App Store 2026.7.26"
 readonly EXPECTED_PROFILE_UUID="0d51265e-4b53-4a1f-814a-436dc9ca087b"
-# Read-only App Store Connect inspection on 2026-07-26 found 2026.7.26 as the
+# Read-only App Store Connect inspection on 2026-07-26 found 2026.7.27 as the
 # newest 4.2.0 build. This candidate number was unused at inspection time.
-readonly EXPECTED_BUILD="2026.7.27"
+readonly EXPECTED_BUILD="2026.7.28"
 readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
 readonly REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
 
@@ -33,7 +33,7 @@ Usage:
 
 Preconditions:
   - exact clean git HEAD, including no untracked files;
-  - App Store Connect read-only uniqueness check for 4.2.0 (2026.7.27);
+  - App Store Connect read-only uniqueness check for 4.2.0 (2026.7.28);
   - App Store distribution profile for the production App ID, with
     group.jp.co.soramitsu.fearlesswallet and Apple default keychain groups.
 

scripts/test-coredata-simulator-rehearsal.sh

@@ -230,7 +230,7 @@ prepare_case() {
   <key>CFBundleShortVersionString</key>
   <string>4.2.0</string>
   <key>CFBundleVersion</key>
-  <string>2026.7.27</string>
+  <string>2026.7.28</string>
   <key>FearlessBuildConfiguration</key>
   <string>Release</string>
   <key>FearlessSwiftOptimizationLevel</key>
@@ -294,7 +294,7 @@ APP
     --app "$APP_DIR"
     --bundle-id "$BUNDLE_ID"
     --expected-git-sha 7a819cb01e92920e5444151392df54245acdd4c8
-    --expected-build 2026.7.27
+    --expected-build 2026.7.28
     --expected-executable-sha256 "$executable_sha"
     --fixture-dir "$FIXTURE_DIR"
     --artifacts-dir "$ARTIFACTS_DIR"
@@ -604,7 +604,7 @@ CASE_ARGS=(
   --app "$APP_DIR"
   --bundle-id "$BUNDLE_ID"
   --expected-git-sha 7a819cb01e92920e5444151392df54245acdd4c8
-  --expected-build 2026.7.27
+  --expected-build 2026.7.28
   --expected-executable-sha256 "$(shasum -a 256 "$APP_DIR/fearless" | awk '{print $1}')"
   --fixture-dir "$FIXTURE_DIR"
   --artifacts-dir "$ARTIFACTS_DIR"
@@ -722,7 +722,7 @@ CASE_ARGS=(
   --app "$APP_DIR"
   --bundle-id "$BUNDLE_ID"
   --expected-git-sha 7a819cb01e92920e5444151392df54245acdd4c8
-  --expected-build 2026.7.27
+  --expected-build 2026.7.28
   --expected-executable-sha256 "$(shasum -a 256 "$APP_DIR/fearless" | awk '{print $1}')"
   --fixture-dir "$FIXTURE_DIR"
   --artifacts-dir "$ARTIFACTS_DIR"

scripts/test-ios-release-identity-audit.sh

@@ -41,7 +41,7 @@ jq -n '[
     buildSettings: {
       PRODUCT_BUNDLE_IDENTIFIER: "jp.co.soramitsu.fearlesswallet",
       MARKETING_VERSION: "4.2.0",
-      CURRENT_PROJECT_VERSION: "2026.7.27",
+      CURRENT_PROJECT_VERSION: "2026.7.28",
       CODE_SIGN_ENTITLEMENTS: "fearless/WalletConnect.entitlements",
       CODE_SIGN_IDENTITY: "Apple Distribution: Soramitsu Co., Ltd. (YLWWUD25VZ)",
       CODE_SIGN_STYLE: "Manual",
@@ -75,7 +75,7 @@ run_audit() {
   local debug_entitlements_file="${7:-$dev_entitlements}"
 
   IOS_RELEASE_AUDIT_TEST_HARNESS=1 \
-  IOS_EXPECTED_BUILD_NUMBER=2026.7.27 \
+  IOS_EXPECTED_BUILD_NUMBER=2026.7.28 \
   IOS_RELEASE_SETTINGS_JSON="$1" \
   IOS_DEBUG_SETTINGS_JSON="$debug_settings_file" \
   IOS_RELEASE_SCHEME_FILE="$2" \

scripts/test-ios-signed-release-artifact-audit.sh

@@ -116,7 +116,7 @@ app = {
     "CFBundleExecutable": "fearless",
     "CFBundleIdentifier": bundle,
     "CFBundleShortVersionString": "4.2.0",
-    "CFBundleVersion": "2026.7.27",
+    "CFBundleVersion": "2026.7.28",
     "FearlessBuildConfiguration": "Release",
     "FearlessEnableTestability": "NO",
     "FearlessGitCommit": git_sha,
@@ -172,7 +172,7 @@ run_audit() {
     bash "$AUDIT" \
       --archive "$ARCHIVE" \
       --expected-git-sha "${EXPECTED_GIT_OVERRIDE:-$EXPECTED_GIT_SHA}" \
-      --expected-build 2026.7.27 \
+      --expected-build 2026.7.28 \
       --expected-executable-sha256 "${EXPECTED_EXECUTABLE_SHA_OVERRIDE:-$executable_sha}" \
       --expected-archive-sha256 "${EXPECTED_ARCHIVE_SHA_OVERRIDE:-$archive_sha}" \
       --expected-signing-certificate-sha1 "${EXPECTED_SIGNING_CERTIFICATE_SHA_OVERRIDE:-$signing_certificate_sha1}" \
@@ -239,6 +239,11 @@ assert_contains '"archiveTreeSHA256"' "$CASE_DIR/output/receipt.json"
 assert_contains '"distributionProfile": "valid-app-store"' "$CASE_DIR/output/receipt.json"
 printf '%s\n' "[ios-signed-release-audit-test] PASS: canonical signed archive"
 
+prepare_case wrong-build
+mutate_plist "$APP/Info.plist" \
+  'value["CFBundleVersion"] = "2026.7.27"'
+expect_failure wrong-build "archived build number is not the expected fresh build"
+
 prepare_case wrong-commit
 EXPECTED_GIT_OVERRIDE="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 expect_failure wrong-commit "embedded git commit"
@@ -402,4 +407,4 @@ assert_contains "only in the explicit test harness" "$CASE_DIR/stderr"
 printf '%s\n' "[ios-signed-release-audit-test] PASS (rejected): override without harness"
 
 printf '%s\n' \
-  "[ios-signed-release-audit-test] PASS: 1 positive + 32 negative/adversarial contracts"
+  "[ios-signed-release-audit-test] PASS: 1 positive + 33 negative/adversarial contracts"