gowalk-cicd 1.0.201 → 1.0.202

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.201",
+  "version": "1.0.202",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/src/config/build-steps.mjs

@@ -1,5 +1,8 @@
 // Reviewed build-only recipes. Names alone never authorize candidate execution.
-const RUBY = 'ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b';
+const RUBY = new Set([
+  'ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b',
+  'ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8',
+]);
 // The optional grep drops beta and release-candidate Xcodes, whose builds App Store Connect refuses.
 const XCODE = /^XCODE_PATH=\$\(ls -d \/Applications\/Xcode_\d+\*\.app (?:\| grep -viE 'beta\|release_candidate\|_rc' )?\| sort -V \| tail -1\)\n/;
 const XCODE_END = 'sudo xcode-select -s "$XCODE_PATH/Contents/Developer"\nxcodebuild -version\nswift --version\n';
@@ -13,9 +16,10 @@ const SDK = /^\s*"\$ANDROID_HOME\/cmdline-tools\/latest\/bin\/sdkmanager" 'platf
 export function reviewedBuildStep(step) {
   const allowed = ['name', 'id', 'uses', 'with', 'run', 'if', 'shell'];
   if (!step || Object.keys(step).some(key => !allowed.includes(key))) return false;
-  if (step.uses === RUBY && !step.run) {
+  if (RUBY.has(step.uses) && !step.run) {
     return Object.entries(step.with || {}).every(([key, value]) =>
-      ['ruby-version', 'bundler'].includes(key) && /^\d+(?:\.\d+){0,2}$/.test(String(value)));
+      key === 'bundler-cache' ? value === false
+        : ['ruby-version', 'bundler'].includes(key) && /^\d+(?:\.\d+){0,2}$/.test(String(value)));
   }
   if (step.uses || step.with || step.shell && step.shell !== 'bash' || typeof step.run !== 'string') return false;
   return XCODE.test(step.run) && step.run.replace(XCODE, '') === XCODE_END