Merge branch 'trunk' into iangmaia/enhance-agents-md

Author: iangmaia

.buildkite/pipeline.yml

@@ -61,7 +61,7 @@ steps:
 
   - group: "Linters"
     steps:
-      - label: ☢️ Danger - PR Check
+      - label: ":danger: Danger - PR Check"
         command: danger
         key: danger
         if: build.pull_request.id != null

.gitignore

@@ -26,3 +26,6 @@ vendor/swiftgen
 
 # Build Products
 *.gem
+
+# AI Agents
+.claude/settings.local.json

CHANGELOG.md

@@ -19,6 +19,8 @@ _None_
 ### Internal Changes
 
 - Enhance `AGENTS.md` with comprehensive project guidance for AI agents. [#692]
+- Bumped `faraday` to address security vulnerability. [#689]
+- Bumped `nokogiri` to address security vulnerability. [#693]
 
 ## 14.0.0
 

Gemfile

@@ -9,3 +9,7 @@ gem 'codecov', require: false
 gem 'danger-dangermattic', '~> 1.0'
 gem 'webmock', require: false
 gem 'yard'
+
+# Security: https://github.com/lostisland/faraday/pull/1665
+# Faraday 2.0 is not compatible with Fastlane
+gem 'faraday', '~> 1.10', '>= 1.10.5'

Gemfile.lock

@@ -171,7 +171,7 @@ GEM
     ethon (0.16.0)
       ffi (>= 1.15.0)
     excon (0.112.0)
-    faraday (1.10.4)
+    faraday (1.10.5)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
       faraday-excon (~> 1.1)
@@ -187,12 +187,12 @@ GEM
       faraday (>= 0.8.0)
       http-cookie (~> 1.0.0)
     faraday-em_http (1.0.0)
-    faraday-em_synchrony (1.0.0)
+    faraday-em_synchrony (1.0.1)
     faraday-excon (1.1.0)
     faraday-http-cache (2.5.1)
       faraday (>= 0.8)
     faraday-httpclient (1.0.1)
-    faraday-multipart (1.1.0)
+    faraday-multipart (1.2.0)
       multipart-post (~> 2.0)
     faraday-net_http (1.0.2)
     faraday-net_http_persistent (1.2.0)
@@ -337,7 +337,7 @@ GEM
     naturally (2.2.1)
     netrc (0.11.0)
     nkf (0.2.0)
-    nokogiri (1.18.9)
+    nokogiri (1.19.1)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     observer (0.1.2)
@@ -478,6 +478,7 @@ DEPENDENCIES
   cocoapods (~> 1.10)
   codecov
   danger-dangermattic (~> 1.0)
+  faraday (~> 1.10, >= 1.10.5)
   fastlane (~> 2.210)
   fastlane-plugin-wpmreleasetoolkit!
   pry (~> 0.12.2)