fastlane-plugin-stream_actions 0.4.7 → 0.4.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '055284ce7665f25768ac9f5fae0b7e09c35b971f9dd7b1b15f54eb90d257d638'
-  data.tar.gz: bf845ed3db8e5b1cff88acc700190ab9735e0349dbde1bc1f2d31fc31644c3d1
+  metadata.gz: b1cd47c9cf9078fdada6a7022e053bfcd562f02d4c1a75cc2ede14a018c8f769
+  data.tar.gz: 9b044e1fe97cf5bf7bdcda612592e54eba35ffe9041779562858e07e71aefb46
 SHA512:
-  metadata.gz: 38f2c907628a4ea73b7150f91106f1f89eb5e2d9913ba7fefc4c2f61116a48356556c708e6a2ce107196b422cd8f1ad7d8f6f175e969bd9d052bd51cf600e5d2
-  data.tar.gz: 3c902fe10e1676a649653ae6e35f91b1c22665fb06a0f9744a8e4e37f48aaf2dc0e06fe2107e1b830c7e9b362b6f4051e6c5574769125ab9dca4a858b689f0ac
+  metadata.gz: 56517c6f3dd4534e62c7112b8873b41efb3b1134e9d150773745c9c36438e5ec963c0a9394ef6d6e9da6394bc18afa3705c177e1494a074640263578e1b53870
+  data.tar.gz: af2df2c639cc922e2fdadb265243017be271201b2e4c592acd64bf1b96157697c2150abbbaa1c83aec6653525da30a148ced86139ce89dc5702e2f96f109b93f

data/lib/fastlane/plugin/stream_actions/actions/lint_swift_package.rb

@@ -0,0 +1,122 @@
+module Fastlane
+  module Actions
+    class LintSwiftPackageAction < Action
+      def self.run(params)
+        path = params[:swift_package_path]
+        UI.user_error!("Package.swift not found at path: #{path}") unless File.exist?(path)
+
+        dependencies = package_declarations(File.read(path))
+        violations = dependencies.flat_map { |dependency| dependency_violations(dependency) }
+        violations += duplicate_violations(dependencies)
+
+        if violations.any?
+          UI.user_error!("Package.swift contains #{violations.size} dependency issue(s):\n#{violations.join("\n")}")
+        end
+
+        UI.success("Package.swift dependencies look good 🚀")
+      end
+
+      def self.dependency_violations(dependency)
+        body = dependency[:body]
+        violations = []
+        if body =~ /\bbranch:/ || body.include?('.branch(')
+          violations << violation(dependency, 'branch-based dependency — pin it with `from:` or `exact:` instead')
+        end
+        if body =~ /\brevision:/ || body.include?('.revision(')
+          violations << violation(dependency, 'revision-pinned dependency — pin it with `from:` or `exact:` instead')
+        end
+        if body.include?('..<') || body =~ /"\s*\.\.\.\s*"/ || body.include?('.upToNextMinor(')
+          violations << violation(dependency, 'version-range dependency — pin it with `from:` or `exact:` instead')
+        end
+        if body =~ /\bpath:/
+          violations << violation(dependency, 'local path dependency — it will not resolve for package consumers')
+        end
+        if dependency[:url] && dependency[:url] !~ %r{\Ahttps://}
+          violations << violation(dependency, 'insecure or non-https url — use `https://`')
+        end
+        if violations.empty? && body !~ /\b(from|exact):/ && !body.include?('.exact(') && !body.include?('.upToNextMajor(')
+          violations << violation(dependency, 'missing version requirement — pin it with `from:` or `exact:`')
+        end
+        violations
+      end
+
+      def self.duplicate_violations(dependencies)
+        dependencies
+          .select { |dependency| dependency[:url] }
+          .group_by { |dependency| dependency[:url].downcase.sub(/\.git\z/, '') }
+          .values
+          .select { |group| group.size > 1 }
+          .map do |group|
+            lines = group.map { |dependency| dependency[:line] }.join(', ')
+            "- #{group.first[:url]} (lines #{lines}): duplicate dependency"
+          end
+      end
+
+      def self.violation(dependency, message)
+        location = dependency[:url] ? "#{dependency[:url]} (line #{dependency[:line]})" : "line #{dependency[:line]}"
+        "- #{location}: #{message}"
+      end
+
+      def self.package_declarations(content)
+        declarations = []
+        offset = 0
+        while (start = content.index('.package(', offset))
+          body_start = start + 9 # '.package('.length
+          index = body_start
+          depth = 1
+          in_string = false
+          while index < content.length && depth > 0
+            char = content[index]
+            if in_string
+              in_string = false if char == '"' && content[index - 1] != '\\'
+            else
+              case char
+              when '"' then in_string = true
+              when '(' then depth += 1
+              when ')' then depth -= 1
+              end
+            end
+            index += 1
+          end
+          body = content[body_start...(index - 1)]
+          declarations << {
+            body: body,
+            url: body[/url:\s*"([^"]+)"/, 1],
+            line: content[0..start].count("\n") + 1
+          }
+          offset = index
+        end
+        declarations
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        'Scans Package.swift for common mistakes in dependency declarations'
+      end
+
+      def self.details
+        'Fails if any dependency is declared via branch, revision, version range, local path, ' \
+          'insecure url, or is duplicated. All dependencies should be pinned with `from:` or `exact:`.'
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(
+            key: :swift_package_path,
+            description: 'The path to your project Package.swift',
+            is_string: true,
+            default_value: './Package.swift',
+            optional: false
+          )
+        ]
+      end
+
+      def self.is_supported?(platform)
+        true
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/stream_actions/actions/read_changelog.rb

@@ -18,8 +18,12 @@ module Fastlane
           changes << line
         end
 
-        UI.user_error!("No changelog found for #{params[:version]}") unless changes.length > 0
-        UI.success("Changelog for #{params[:version]}: \n#{changes}")
+        if changes.strip.empty?
+          changes = params[:default_changes]
+          UI.important("No changelog found for #{params[:version]}, using default: \n#{changes}")
+        else
+          UI.success("Changelog for #{params[:version]}: \n#{changes}")
+        end
         changes
       end
 
@@ -47,6 +51,13 @@ module Fastlane
             is_string: true,
             default_value: './CHANGELOG.md',
             optional: true
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :default_changes,
+            description: 'The default changelog entry if no changes provided',
+            is_string: true,
+            default_value: '- Bug fixes and improvements',
+            optional: true
           )
         ]
       end

data/lib/fastlane/plugin/stream_actions/actions/testflight_build.rb

@@ -43,14 +43,12 @@ module Fastlane
         changelog =
           if params[:use_changelog]
             version = params[:is_manual_upload] ? 'Upcoming' : params[:app_version]
-            # Strip variation selectors and ZWJ: pilot removes emoji from the changelog, but leaves
-            # these invisible companions behind, and App Store Connect rejects them in whatsNew
-            other_action.read_changelog(
-              version: version,
-              changelog_path: params[:changelog_path]
-            ).gsub(/^### (.+)$/) { $1.upcase }
-                        .gsub(%r{\[(#\d+)\]\(https?://[^)]+\)}, '(\1)')
-                        .gsub(/[\u{FE0E}\u{FE0F}\u{200D}]/, '')
+            sanitize_changelog(
+              other_action.read_changelog(
+                version: version,
+                changelog_path: params[:changelog_path]
+              )
+            )
           else
             testflight_instructions(params)
           end
@@ -76,6 +74,15 @@ module Fastlane
         end
       end
 
+      # Strip all pictographs and their companions (skin tones, flags, variation selectors,
+      # ZWJ, keycaps, tag chars): pilot's own emoji stripper misses text-presentation symbols
+      # like U+26A0 and leaves companions behind, and App Store Connect rejects them in whatsNew
+      def self.sanitize_changelog(changelog)
+        changelog.gsub(/^### (.+)$/) { $1.upcase }
+                 .gsub(%r{\[(#\d+)\]\(https?://[^)]+\)}, '(\1)')
+                 .gsub(/[\p{Extended_Pictographic}\u{1F3FB}-\u{1F3FF}\u{1F1E6}-\u{1F1FF}\u{FE00}-\u{FE0F}\u{200D}\u{20E3}\u{E0020}-\u{E007F}]/, '')
+      end
+
       def self.testflight_instructions(params)
         return "This is the official #{params[:app_target]} sample app" unless params[:sdk_target]
 

data/lib/fastlane/plugin/stream_actions/version.rb

@@ -1,5 +1,5 @@
 module Fastlane
   module StreamActions
-    VERSION = '0.4.7'
+    VERSION = '0.4.9'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fastlane-plugin-stream_actions
 version: !ruby/object:Gem::Version
-  version: 0.4.7
+  version: 0.4.9
 platform: ruby
 authors:
 - GetStream
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-10 00:00:00.000000000 Z
+date: 2026-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: xctest_list
@@ -240,6 +240,7 @@ files:
 - lib/fastlane/plugin/stream_actions/actions/git_status.rb
 - lib/fastlane/plugin/stream_actions/actions/install_ios_runtime.rb
 - lib/fastlane/plugin/stream_actions/actions/is_check_required.rb
+- lib/fastlane/plugin/stream_actions/actions/lint_swift_package.rb
 - lib/fastlane/plugin/stream_actions/actions/merge_main_to_develop.rb
 - lib/fastlane/plugin/stream_actions/actions/merge_release_to_main.rb
 - lib/fastlane/plugin/stream_actions/actions/next_pr_number.rb