Sourced from fastlane-plugin-wpmreleasetoolkit's releases.

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

Sourced from fastlane-plugin-wpmreleasetoolkit's changelog.

14.8.0

New Features

• find_or_create_pull_request action: returns the URL of the open Pull Request for a head branch, creating one only if none exists yet. #733
• ContinuousBuildCodeFormatter: derives an Android Play Store versionCode for a "continuous trunk" release model as (major * 10 + minor) * 10^build_digits + build_number (default build_digits: 6). #735

14.7.0

New Features

• Added new update_apps_cdn_build_metadata action to update metadata (e.g. visibility) of one or more existing builds on the Apps CDN without re-uploading the files, via the dedicated /wpcom/v2/sites/{site_id}/a8c-cdn/builds/{post_id} endpoint. Accepts an array of post_ids. This enables a two-phase release flow: upload builds as Internal first, then flip to External at publish time. #701

Bug Fixes

• openai_ask: avoid logging sensitive tool diagnostics and refuse to execute additional tool calls after max_tool_iterations. #719
• Bump the fastlane floor to ~> 2.235 to pull in jwt >= 3.2.0, fixing GHSA-c32j-vqhx-rx3x (ruby-jwt empty-key HMAC bypass). #728

Internal Changes

• openai_ask: validate named function tools, default to gpt-4.1, use max_completion_tokens, and opt out of OpenAI request storage. #719
• Configure Dependabot to update Ruby dependencies daily, grouping minor/patch bumps under ruby-minor-and-patch. #724

• 380f640 Release 14.8.0 into trunk (#744)
• 61f9118 Make changelog entries shorter than AI-generated ones
• 82d4ca4 Bumped to version 14.8.0
• 2be3704 Add ContinuousBuildCodeFormatter for continuous-trunk Android versionCode...
• 3a5a1cc Guard against non-positive build code in ContinuousBuildCodeFormatter
• 728ec91 Add overflow-boundary ordering specs for ContinuousBuildCodeFormatter
• 25146e6 Add specs for ContinuousBuildCodeFormatter component validation
• a649a64 Validate version components in ContinuousBuildCodeFormatter
• bc7fe9b Fix grammar in ContinuousBuildCodeFormatter class doc
• 4a806ca Clarify why ContinuousBuildCodeFormatter takes primitives over AppVersion
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)