chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.288.0

.gitea/workflows/renovate.yml

@@ -24,7 +24,7 @@ jobs:
     # directly drops the docker-in-docker requirement entirely.
     # Full tag pinned; Renovate's github-actions manager keeps it bumped.
     container:
-      image: ghcr.io/renovatebot/renovate:43.232.0
+      image: ghcr.io/renovatebot/renovate:43.288.0
     steps:
       - name: Run Renovate
         run: renovate

Gemfile

@@ -7,4 +7,4 @@ source "https://rubygems.org"
 # Pinned exactly; Renovate's bundler manager keeps it bumped. No Gemfile.lock is
 # committed on purpose: this resolves an uploader's transitive deps, not the
 # app's, and none of it affects the reproducible release build.
-gem "fastlane", "2.238.0"
+gem "fastlane", "2.237.0"