Packaging for release v18.0.3

[NabeelAhsen]

What this PR does

This is a patch release that includes the following bug fixes:

• Change regexp to match standard ngrok URLs. #1311
• Make EnsureAuthenticatedLinks compatible with AppBridge 2.0. #1277
  • Includes the host parameter when redirecting to the splash page in an unauthenticated state.

Checklist

Before submitting the PR, please consider if any of the following are needed:

• Update CHANGELOG.md if the changes would impact users
• Update README.md, if appropriate.
• Update any relevant pages in /docs, if necessary
• For security fixes, the Disclosure Policy must be followed.

[NabeelAhsen]

cc @kirillplatonov

[kirillplatonov]

@NabeelAhsen I have one more important bugfix for AppBridge 2. Preparing the PR now.

[NabeelAhsen]

I'll leave this release as a draft for now

[kirillplatonov]

@NabeelAhsen In my fork, I also have ShopifyApp::ShopHost concern (kirillplatonov@b46ccc1) which handles host fetching and stores it in cookies. This allows avoiding passing host param manually to every link. I found this concern very convenient and use it in all of my apps. I think it would be great to backport it to this repo too. What do you think?

[NabeelAhsen]

@kirillplatonov I saw that as well, and thought it would be neat to have something like this! Although I would rethink the long-term costs of relying on cookies, especially for embedded apps.

This gem has a lot of tech debt to pay regarding an over-reliance on cookies. We can't rely on 3p cookies set by embedded apps in the near future, and so the gem's been slowly trying to phase out any more writes performed on cookies within the gem.

For example, I don't know how ShopHost will behave in browsers like Brave or Safari. What does it try to do if it can't find a host param at all?

In any case, I don't think it's a blocker to getting this patch released. Thank you for your contributions 🎉 !

What do you think about this release? Is it ready to deploy?

[kirillplatonov]

@NabeelAhsen Yeah, let's publish this patch. I will open a PR for ShopHost concern so we can discuss all details there.