build(deps): Bump fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.10.0 in the ruby-minor-and-patch group across 1 directory

[dependabot]

Bumps the ruby-minor-and-patch group with 1 update in the / directory: fastlane-plugin-wpmreleasetoolkit.

Updates fastlane-plugin-wpmreleasetoolkit from 14.6.0 to 14.10.0

Release notes

Sourced from fastlane-plugin-wpmreleasetoolkit's releases.

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Changelog

Sourced from fastlane-plugin-wpmreleasetoolkit's changelog.

14.10.0

New Features

• android_prune_orphaned_translations action: removes <string>, <string-array> and <plurals> entries from values-*/strings.xml whose keys are not declared in the source values/strings.xml optionally unioned with additional_source_strings_paths. #734

Bug Fixes

• Bump faraday and nokogiri to address security vulnerabilities. #749
• Bump concurrent-ruby to address CVE-2026-54904 / GHSA-h8w8-99g7-qmvj. #751

14.9.0

New Features

• upload_github_release_assets action: uploads assets on an existing GitHub release without disturbing unrelated assets. If assets exists already, it replaces them. #743

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Commits

• 93464af Release 14.10.0 into trunk (#752)
• 7105ca1 Bumped to version 14.10.0
• 28272d7 Add android_prune_orphaned_translations action (#734)
• f6c78ff Skip Android UI-mode values-* qualifier dirs (e.g. values-car) when pruni...
• 56dd66d Skip Android UI-mode qualifier dirs (e.g. values-car) when pruning
• 88bfb27 Bump concurrent-ruby for CVE-2026-54904 (#751)
• 109d55a Add PR no. for concurrent-ruby to changelog
• 4d4568f Bump concurrent-ruby for CVE-2026-54904
• f62d68e Update vulnerable Ruby gems (#749)
• 0a194dc Update vulnerable Ruby gems
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[wpmobilebot]

XCFramework Build

This PR's XCFramework is available for testing. Add the following to your Package.swift:

.package(url: "https://github.com/wordpress-mobile/GutenbergKit", branch: "pr-build/548")

_{Built from dbaf93e}