Pin faraday >= 1.10.5 for security fix (#689)

Author: mokagio

.gitignore

@@ -26,3 +26,6 @@ vendor/swiftgen
 
 # Build Products
 *.gem
+
+# AI Agents
+.claude/settings.local.json

CHANGELOG.md

@@ -18,7 +18,7 @@ _None_
 
 ### Internal Changes
 
-_None_
+- Bumped `faraday` to address security vulnerability [#689]
 
 ## 14.0.0
 

Gemfile

@@ -9,3 +9,7 @@ gem 'codecov', require: false
 gem 'danger-dangermattic', '~> 1.0'
 gem 'webmock', require: false
 gem 'yard'
+
+# Security: https://github.com/lostisland/faraday/pull/1665
+# Faraday 2.0 is not compatible with Fastlane
+gem 'faraday', '~> 1.10', '>= 1.10.5'

Gemfile.lock

@@ -171,7 +171,7 @@ GEM
     ethon (0.16.0)
       ffi (>= 1.15.0)
     excon (0.112.0)
-    faraday (1.10.4)
+    faraday (1.10.5)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
       faraday-excon (~> 1.1)
@@ -187,12 +187,12 @@ GEM
       faraday (>= 0.8.0)
       http-cookie (~> 1.0.0)
     faraday-em_http (1.0.0)
-    faraday-em_synchrony (1.0.0)
+    faraday-em_synchrony (1.0.1)
     faraday-excon (1.1.0)
     faraday-http-cache (2.5.1)
       faraday (>= 0.8)
     faraday-httpclient (1.0.1)
-    faraday-multipart (1.1.0)
+    faraday-multipart (1.2.0)
       multipart-post (~> 2.0)
     faraday-net_http (1.0.2)
     faraday-net_http_persistent (1.2.0)
@@ -478,6 +478,7 @@ DEPENDENCIES
   cocoapods (~> 1.10)
   codecov
   danger-dangermattic (~> 1.0)
+  faraday (~> 1.10, >= 1.10.5)
   fastlane (~> 2.210)
   fastlane-plugin-wpmreleasetoolkit!
   pry (~> 0.12.2)