Update dependency fastlane to v2.239.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
fastlane (source, changelog)	2.238.0 → 2.239.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

fastlane/fastlane (fastlane)

v2.239.0: Improvements

Compare Source

• [supply] list google play releases (#​30000) via Tim Shedor (@​tshedor)
• [sigh] Fix duplicate prefix in application-identifier entitlement during resign (#​30169) via Shubhransh Gupta (@​shubhransh-gupta)
• [Ruby] Ruby 3.1 is now the minimum (dropping Ruby 3.0) (#​30120) via Connor Tumbleson (@​iBotPeaches)
• [deliver/pilot] support app coverage files (#​30153) via Connor Tumbleson (@​iBotPeaches)
• [match] prevent leaking keys if invalid usage (#​30161) via Connor Tumbleson (@​iBotPeaches)
• [meta] set pr template to drop reference to CircleCI (#​30162) via Connor Tumbleson (@​iBotPeaches)
• [deliver] prevent duplicate image uploads (#​30150) via Connor Tumbleson (@​iBotPeaches)
• [match] Remove command on failure to prevent secret exposure for git storage. (#​30165) via Aleksandr B (@​sozzjilly)
• [pem] Add support for VoIP Services push certificates (#​30166) via Rafael da Rosa Ferreira (@​Rafinha-rf)
• harden: detected non-static command inside system in... (#​30147) via Anupam Mediratta (@​anupamme)
• [changelog_from_git_commits] Add optional argument to filter commits. (#​14441) via Juan A. Romero (@​rukano)
• [sh_helper] fix output stripping - invalid byte sequence in UTF-8 (ArgumentError) (#​20539) via Wendy Liga (@​wendyliga)
• [ci] move release workflows to Ruby 3.4 (#​30155) via Connor Tumbleson (@​iBotPeaches)
• [gems] move to json 2.21.x (#​30156) via Connor Tumbleson (@​iBotPeaches)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile

Artifact update for fastlane resolved to version 2.240.1, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 2.239.0
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

[github-actions]

Codacy

SpotBugs

Category	Base	New
Bad practice	32	32
Correctness	58	58
Dodgy code	186	186
Experimental	1	1
Malicious code vulnerability	2	2
Multithreaded correctness	26	26
Performance	37	37
Security	18	18
Total	360	360

[github-actions]

📱 QA build

Download	app-qa-debug.apk (76M)
QR code	Open the QR code for this download
Commit	7abce00
Version	17648
Available until	7 days after this build

The QA build installs alongside a released Nextcloud app, so you can keep
using your existing install while testing.

Downloading the file requires a GitHub account, so open this link on the
device you want to test on, or transfer the APK to it.