Repository navigation

Patch rubyzip CVE, repair CI Ruby, and rewrite the README - #50

Merged

erickdronski merged 7 commits into

mainfrom

polish/readme-security-2026-10

Oct 6, 2026

Merged

Patch rubyzip CVE, repair CI Ruby, and rewrite the README#50
erickdronski merged 7 commits into
mainfrom
polish/readme-security-2026-10

Commits on Oct 6, 2026
- Bump ruby/setup-ruby to v1.323.0 to stay on a maintained pin
  
  erickdronski
  and
  claude
  committed
  00c149a
- Run CI on Ruby 3.4 so the patched fastlane bundle can install
  
  erickdronski
  and
  claude
  committed
  b5ce6f4
- Upgrade fastlane to 2.240.1 to patch rubyzip path traversal
  
  erickdronski
  and
  claude
  committed
  d8f5695
- Read release-tooling fixtures as UTF-8 regardless of locale
  
  erickdronski
  and
  claude
  committed
  949ad84
- Ignore signing assets, env files and local tool state
  
  erickdronski
  and
  claude
  committed
  5438a63
- Correct stale statements in the release runbooks
  
  erickdronski
  and
  claude
  committed
  5b2b659
- Rewrite the README around the shipped app and verified facts
  
  erickdronski
  and
  claude
  committed
  c31cab2