[deps]: Lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every 2nd week starting on the 2 week of the year before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-38040
• Link: https://bitwarden.atlassian.net/browse/PM-38040

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.35%. Comparing base (562d2e8) to head (d72397f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6974   +/-   ##
=======================================
  Coverage   86.35%   86.35%           
=======================================
  Files         912      912           
  Lines       65751    65751           
  Branches     9640     9640           
=======================================
  Hits        56778    56778           
  Misses       5518     5518           
  Partials     3455     3455           

Flag	Coverage Δ
app-data	17.52% <ø> (ø)
app-ui-auth-tools	18.73% <ø> (ø)
app-ui-platform	16.85% <ø> (ø)
app-ui-vault	27.99% <ø> (ø)
authenticator	6.16% <ø> (ø)
lib-core-network-bridge	4.05% <ø> (ø)
lib-data-ui	1.14% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

Automated Renovate lockFileMaintenance PR that refreshes Gemfile.lock to the latest dependency versions within the existing Gemfile constraints. Changes are confined to the Ruby build/deploy tooling chain (fastlane and its transitive dependencies) — no application runtime code, manifest, or version-constraint changes. This is routine Stage 5 monitoring activity.

Code Review Details

No blocking findings.

Dependency Changes

Package	Change	Ecosystem
jwt	2.10.3 → 3.2.0 (major)	RubyGems
xcodeproj	1.27.0 → 1.28.1	RubyGems
json	2.19.9 → 2.20.0	RubyGems
google-cloud-storage	1.61.0 → 1.62.0	RubyGems
google-apis-*	minor bumps	RubyGems
faraday	1.10.5 → 1.10.6	RubyGems
aws-partitions	1.1261.0 → 1.1265.0	RubyGems

Notes:

• These are all transitive dependencies of the fastlane build/deploy tooling, resolved by Renovate within unchanged Gemfile constraints (lock-file-only change). This is the expected pattern for lock file maintenance.
• jwt crosses a major version (2.x → 3.x), but as a transitive dev/CI-tooling dependency with no manifest constraint change and passing CI, it does not warrant blocking review. Worth a quick confirmation that fastlane lanes still run green on CI before merge.
• base64 and nkf appear as new sub-dependencies of the xcodeproj 1.28.1 bump; these are transitive, not net-new direct dependencies.