• [spec] Fix the Windows test job (#30475) via Jerome Lacoste (@lacostej)
• [spaceship] Fix GHSA-m67f-ghvw-j7qp via Jerome Lacoste (@lacostej)
• [Fastlane.Swift] Fix GHSA-gqqf-9mh3-3578 via Jerome Lacoste (@lacostej)
• [match] Fix GHSA-hqmj-jmgc-wmwp via Jerome Lacoste (@lacostej)
• Bump ruby/setup-ruby from 1.329.0 to 1.331.0 (#30473) via dependabot[bot] (@dependabot[bot])
• Bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 (#30472) via dependabot[bot] (@dependabot[bot])
• [sigh] Skip installing provisioning profiles when not on macOS (#30463) via John Szumski (@jszumski)
• [spaceship] prevent frozen error when logging response (#30460) via Connor Tumbleson (@iBotPeaches)
• Bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#30449) via dependabot[bot] (@dependabot[bot])
• Bump ruby/setup-ruby from 1.327.0 to 1.329.0 (#30450) via dependabot[bot] (@dependabot[bot])
• Bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3 (#30453) via dependabot[bot] (@dependabot[bot])
• Bump actions/download-artifact from 8.0.1 to 8.0.2 (#30452) via dependabot[bot] (@dependabot[bot])
• Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#30451) via dependabot[bot] (@dependabot[bot])