chore: update Bitrise Xcode stack to 26.2.x for iOS SDK 26 (#25136)

## **Description**

Update the Xcode stack from osx-xcode-16.3.x to osx-xcode-26.2.x to
enable building with iOS SDK 26. This prepares for the April 2026 App
Store requirement that apps must be built with Xcode 26 or later.

This PR updates the ruby version to 3.2.9 according to the [Bitrise
stack
availability](https://bitrise.io/stacks/stack_reports/osx-xcode-26.2.x/).
It also updates the Ruby Version source for the `ci/docker` step.

It also requires an update to the .github-tools repo here:
https://github.com/MetaMask/github-tools/pull/220/commits

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?

AI agent: Be specific about what you changed and why. Include context
about the fix/feature, not generic descriptions.
-->

## **Changelog**

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)

AI agent: Use format `CHANGELOG entry: [fix/feat/chore]: [User-facing
description in past tense]`.
Examples: `fix: resolved token name display issue`, `feat: added dark
mode toggle`, `chore: updated dependencies`.
For non-user-facing changes, use `CHANGELOG entry: null`.
-->

CHANGELOG entry: null

## **Related issues**

<!--
AI agent: Replace with `Fixes: #[ISSUE_NUMBER]` using the actual issue
number you're implementing.
-->

Fixes: https://consensyssoftware.atlassian.net/browse/MCWP-329

## **Manual testing steps**

<!--
AI agent: Write specific, contextual Gherkin steps based on what you
actually implemented.
Do NOT use generic placeholders like "my feature name". Be concrete
about the feature, scenario, and steps.
-->

```gherkin
Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]
```

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**
Successful Bitrise:
https://app.bitrise.io/build/d8ffdf86-23f8-4476-afef-1b4dda76a554
Successful CI (note there a some flaky flask tests):
https://github.com/MetaMask/metamask-mobile/actions/runs/22237789978?pr=25136
Successful build.yml:
https://github.com/MetaMask/metamask-mobile/actions/runs/22241562536

## **Pre-merge author checklist**

<!--
AI agent: Check ALL boxes in this section (mark all as [x]).
-->

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I've included tests if applicable
- [ ] I've documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I've applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

<!--
AI agent: Leave ALL boxes unchecked ([ ]) - these are for reviewers to
check, not the author.
-->

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.


<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Medium risk because it changes core CI/build infrastructure (Bitrise
Xcode stack, Ruby toolchain, and shared `setup-e2e-env` action), which
can break iOS/Android build and E2E workflows if the new environment has
compatibility issues.
> 
> **Overview**
> Updates CI and Bitrise build environments to support iOS SDK 26 by
moving Bitrise stacks to `osx-xcode-26.2.x` and aligning the Ruby
toolchain to `3.2.9` (including `.ruby-version`, `ios/Gemfile`,
`Gemfile.lock`, and GitHub Actions `ruby/setup-ruby`).
> 
> Refreshes GitHub Actions workflows to use `MetaMask/github-tools`
`setup-e2e-env@v1.7` across build and E2E pipelines, and updates the
Docker CI image’s ruby-build pin used to install the newer Ruby.
> 
> Bumps iOS/Bitrise build numbers from `3607` to `3821` (including
`bitrise.yml` envs and `CURRENT_PROJECT_VERSION` in the Xcode project).
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
01116b4. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: tommasini <46944231+tommasini@users.noreply.github.com>
Co-authored-by: tommasini <tommasini15@gmail.com>
Co-authored-by: metamaskbot <metamaskbot@users.noreply.github.com>

Author: 3 people

.github/workflows/build-android-e2e.yml

@@ -53,13 +53,13 @@ jobs:
 
       - name: Setup Android Build Environment
         timeout-minutes: 15
-        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1
+        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1.7
         with:
           platform: android
           setup-simulator: false
           configure-keystores: true
           target: ${{ inputs.keystore_target }} # qa for taget=main and flask for target=flask
-
+          
       - name: Setup project dependencies with retry
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 #v3.0.2
         with:

.github/workflows/build-ios-e2e.yml

@@ -100,7 +100,7 @@ jobs:
       # Install Node.js, Xcode tools, and other iOS development dependencies
       - name: Installing iOS Environment Setup
         timeout-minutes: 15
-        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1
+        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1.7
         with:
           platform: ios
           setup-simulator: false

.github/workflows/build.yml

@@ -174,12 +174,11 @@ jobs:
       - name: Installing iOS Environment Setup
         if: matrix.platform == 'ios'
         timeout-minutes: 15
-        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1
+        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1.7
         with:
           platform: ios
           configure-keystores: false
           setup-simulator: false
-          ruby-version: '3.1.6'
 
       - name: Setup project dependencies with retry
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 #v3.0.2

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
           cache: yarn
       - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb #v1
         with:
-          ruby-version: '3.1.6'
+          ruby-version: '3.2.9'
         env:
           BUNDLE_GEMFILE: ios/Gemfile
       - name: Install Yarn dependencies with retry

.github/workflows/run-e2e-smoke-tests-ios-flask.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Setup iOS Environment
         timeout-minutes: 15
-        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1
+        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1.7
         with:
           platform: ios
           setup-simulator: false

.github/workflows/run-e2e-workflow.yml

@@ -112,7 +112,7 @@ jobs:
 
       - name: Set up E2E environment
         timeout-minutes: 15
-        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1
+        uses: MetaMask/github-tools/.github/actions/setup-e2e-env@v1.7
         with:
           platform: ${{ inputs.platform }}
           setup-simulator: ${{ inputs.platform == 'ios' }}

.ruby-version

@@ -1 +1 @@
-3.1.6
+3.2.9

bitrise.yml

@@ -3076,7 +3076,7 @@ workflows:
             - paths: /tmp/last-build-commit
     meta:
       bitrise.io:
-        stack: osx-xcode-16.3.x
+        stack: osx-xcode-26.2.x
         machine_type_id: g2.mac.4large
   # TODO: Remove this workflow once new build configuration is consolidated
   build_ios_release:
@@ -3432,7 +3432,7 @@ workflows:
                 echo "🧹 Cleaned up API key file"
     meta:
       bitrise.io:
-        stack: osx-xcode-16.3.x
+        stack: osx-xcode-26.2.x
         machine_type_id: g2.mac.4large
   set_main_target_workflow:
     steps:
@@ -3519,13 +3519,13 @@ app:
       VERSION_NAME: 7.69.0
     - opts:
         is_expand: false
-      VERSION_NUMBER: 3607
+      VERSION_NUMBER: 3821
     - opts:
         is_expand: false
       FLASK_VERSION_NAME: 7.69.0
     - opts:
         is_expand: false
-      FLASK_VERSION_NUMBER: 3607
+      FLASK_VERSION_NUMBER: 3821
     - opts:
         is_expand: false
       ANDROID_APK_LINK: ''
@@ -3555,7 +3555,7 @@ app:
       SEEDLESS_ONBOARDING_ENABLED: true
 meta:
   bitrise.io:
-    stack: osx-xcode-16.3.x
+    stack: osx-xcode-26.2.x
     machine_type_id: g2.mac.4large
 trigger_map:
   # Disable auto RC generation

ios/Gemfile

@@ -1,7 +1,7 @@
 source 'https://rubygems.org'
 
 # Recommended to use http://rbenv.org/ to install and use this version
-ruby '>= 3.1.6'
+ruby '>= 3.2.9'
 
 # Allow minor version updates up to but excluding 2.0.0
 gem 'cocoapods', '1.16.2'

ios/Gemfile.lock

@@ -301,7 +301,7 @@ DEPENDENCIES
   fastlane (>= 2.220.0)
 
 RUBY VERSION
-   ruby 3.1.6p260
+   ruby 3.2.9
 
 BUNDLED WITH
    2.5.8