Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 27, 2025

Bumps the pub group with 9 updates:

Package From To
background_downloader 9.4.0 9.4.3
file_picker 10.3.7 10.3.8
flutter_secure_storage 10.0.0-beta.5 10.0.0
go_router 17.0.0 17.0.1
golden_screenshot 9.1.1 9.1.2
pdfrx 2.2.16 2.2.18
sentry_flutter 9.8.0 9.9.1
sentry_logging 9.8.0 9.9.1
shared_preferences 2.5.3 2.5.4

Updates background_downloader from 9.4.0 to 9.4.3

Changelog

Sourced from background_downloader's changelog.

9.4.3

  • Improve JSON processing to reduce UI jank
  • Optimize database operations
  • Add database.cleanUp() to simplify and automate database maintenance, and added database clean-up to start() command
  • Fix iOS background callback performance

9.4.2

  • Improve Android notification handling
  • Add local test server to reduce test suite flakiness
  • Improve code documentation

9.4.1

  • Refine TaskQueue pauseAll/resumeAll to support specific tasks and groups. Updated TaskQueue interface to accept optional tasks and group parameters in pauseAll and resumeAll and implemented this for the MemoryTaskQueue
  • Change platform checks from Platform.isAndroid etc to defaultTargetPlatform which should lead to better tree shaking and smaller memory size
Commits
  • ee04da0 V9.4.3 performance improvements
  • 4561019 [feat] add cleanup(maxRecordCount, maxAge, autoClean) to the Database object
  • b42b8a7 Refactor iOS callback retry logic into helper method
  • dbdee11 Fix iOS background callback deadlock and improve reliability
  • 6773693 Optimize database and storage operations using Future.wait
  • 6187570 Parallelize database record fetching and deletion
  • 04f2da0 Small change to RegEx in run_tests.sh script, to properly capture the error b...
  • aa724a3 ⚡ Bolt: Optimize MemoryTaskQueue active task counting
  • ee5e236 Android AGP upgrade to 13.2
  • a59e018 Changed dispatch handler in methodCallHandler to .Default
  • Additional commits viewable in compare view

Updates file_picker from 10.3.7 to 10.3.8

Release notes

Sourced from file_picker's releases.

10.3.8

iOS

  • Rename FileUtils to FilePickerUtils #1921

Android

  • Restores the ms[df] URI handling logic in FileUtils.kt to fix file selection returning null on some devices.
Changelog

Sourced from file_picker's changelog.

10.3.8

iOS

  • Rename FileUtils to FilePickerUtils #1921

Android

  • Restores the ms[df] URI handling logic in FileUtils.kt to fix file selection returning null on some devices.
Commits
  • 7e545fa Merge pull request #1928 from miguelpruivo/feature/rename-FileUtils-iOS
  • 200f08e Revert version to 10.3.8
  • 2b63a88 Merge pull request #1927 from miguelpruivo/feature/rename-FileUtils-iOS
  • 141f86b Merge pull request #1926 from miguelpruivo/feature/update-ci-versions
  • 51245ec refactor(ios): Rename FileUtils to FilePickerUtils
  • 6f3ad8f Add Flutter 3.35.0 to CI test matrix
  • 5988b2c Merge pull request #1925 from miguelpruivo/fix/restore-msf-uri-handling
  • 730a609 Update CHANGELOG.md
  • 0fde627 Update android/src/main/kotlin/com/mr/flutter/plugin/filepicker/FileUtils.kt
  • 993c345 docs(android): Add KDoc and intent rationale to FileUtils
  • Additional commits viewable in compare view

Updates flutter_secure_storage from 10.0.0-beta.5 to 10.0.0

Release notes

Sourced from flutter_secure_storage's releases.

v10.0.0

This major release brings significant security improvements, platform updates, and modernization across all supported platforms.

Android

Due to the deprecation of Jetpack Security library, the Android implementation has been largely rewritten with custom secure ciphers, enhanced biometrics support, and migration tools.

Breaking Changes:

  • AndroidOptions().encryptedSharedPreferences is now deprecated due to Jetpack Crypto package deprecation
    • Migration will automatically happen due to migrateOnAlgorithmChange: true, which can also be set to false if not wanted.
  • ResetOnError will now automatically be true, because most errors are unrecoverable due to key storage problems. It can still be disabled with resetOnError: false
  • Default key cipher changed to RSA_ECB_OAEPwithSHA_256andMGF1Padding
  • Default storage cipher changed to AES_GCM_NoPadding
  • Minimum Android SDK changed from 19 to 23
  • Target SDK updated to 36
  • Migrated from deprecated Jetpack Crypto library to custom cipher implementation (Tink doesn't support biometrics)
  • Migrated to Java Version 17

New Features:

  • New named constructors: AndroidOptions(), AndroidOptions.biometric()
  • AndroidOptions().migrateOnAlgorithmChange automatically migrates data to new ciphers when enabled
  • Improved biometric authentication with graceful degradation when device has no security setup
  • Migration tools for transitioning from deprecated encryptedSharedPreferences
  • Enhanced error handling with proper exception messages for biometric unavailability

Fixes:

  • Fixed biometric authentication on devices without security (PIN/pattern/password) - now gracefully degrades when enforceBiometrics=false
  • Fixed storage cipher and key cipher pairing validation
  • Fixed migration checks for encrypted shared preferences
  • Fixed biometric permission handling
  • Fixed exception when reading data after boot

Other Changes:

  • Updated Gradle, Kotlin, and Tink dependencies
  • Refactored custom cipher implementations for better maintainability
  • Added delete key functions for proper reset handling
  • Migrated to new analyzer and code cleanup

iOS / macOS (darwin)

  • Merged iOS and macOS implementations into unified flutter_secure_storage_darwin package
  • Added support for Swift Package Manager
  • Remove keys regardless of synchronizable state or accessibility constraints
  • Change minimum iOS version from 9 to 12
  • Change minimum macOS version to 10.14
  • Use serial queue for execution of keychain operations
  • Added privacy manifest
  • Refactored code and added missing options to IOSOptions and MacOSOptions
  • Fixed warnings with Privacy Manifest
  • Fixed delete and deleteAll when synchronizable is set
  • Fixed migration when value is saved while key already exists with different accessibility option
  • Use accessibility option for all operations

... (truncated)

Commits

Updates go_router from 17.0.0 to 17.0.1

Commits
  • 2fb88d6 [go_router] Fixes an issue where onEnter blocking causes navigation stack l...
  • 72f24a7 [file_selector] Update Linux example for deprecations (#10542)
  • bd44398 [rfw] Add Flexible widget support to core widgets (#9750)
  • 2f44ca2 [camera_android_camerax] Updates pigeon generation to prevent crash when obje...
  • 338ecd3 [shared_preferences_tool] Update dependencies and fix deprecation (#10560)
  • 3546b8f [dependabot]: Bump camerax_version from 1.5.1 to 1.5.2 in /packages/camera/ca...
  • e5f8325 [camera_android_camerax] Removes internal native library Dart proxy (#10536)
  • 33a9a81 [dependabot]: Bump the test-dependencies group across 2 directories with 1 up...
  • b17d3ff [interactive_media_ads] Removes internal native library Dart proxy (#10537)
  • 54b49e1 [webview_flutter_wkwebview] Removes internal native library Dart proxy (#10528)
  • Additional commits viewable in compare view

Updates golden_screenshot from 9.1.1 to 9.1.2

Changelog

Sourced from golden_screenshot's changelog.

9.1.2

  • Fixed an issue where SelectableText and EditableText widgets would not be found when looking for fonts in the widget tree.
Commits

Updates pdfrx from 2.2.16 to 2.2.18

Release notes

Sourced from pdfrx's releases.

Prebuilt iOS/macOS pdfium binary

iOS/macOS pdfium prebuilt binary distribution only for pdfrx. The highlights are;

  • xcframeworks that supports the following platforms
    • iOS arm64
    • iPhoneSimulator arm64/x64
    • macOS arm64/x64
  • xcframeworks contains static library but FPDF_* functions made exported
  • Additional FILEACCESS helper functions pdfrx_*
Commits
  • 64a4960 Release pdfrx v2.2.18
  • 534cf26 Intentionally leave flutter_lints version open.
  • 9d6fcf9 #563, #570 dart_pubspec_licenses 3.0.15 to make it compatible with Flutter 3....
  • 91bd9f5 Release pdfrx v2.2.17
  • 1d2ed9e Release pdfrx_engine v0.3.6
  • de1a3b8 Move dart_pubspec_licenses to dev_dependencies (#561).
  • a51894e PdfDateTime is now an extension type.
  • c08e022 fix trackpad & wheel boundary issues on web
  • 606b39a #538: Ctrl+wheel logic can be enabled on Web
  • 624fcd4 #547
  • Additional commits viewable in compare view

Updates sentry_flutter from 9.8.0 to 9.9.1

Release notes

Sourced from sentry_flutter's releases.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

9.9.0-beta.3

Features

... (truncated)

Changelog

Sourced from sentry_flutter's changelog.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

... (truncated)

Commits
  • 4c2e79f release: 9.9.1
  • 114239b fix(jni): ensure that the ScopesAdapter instance is released after use (#3411)
  • cba2765 fix(app-start): Fixes cold/warm start spans not attaching if TTFD takes more ...
  • 7bf0e72 Fix Supabase analysis CI (#3405)
  • ebccb5b Merge branch 'release/9.9.0'
  • 0230ac1 Update CHANGELOG (#3401)
  • 01d32fc release: 9.9.0
  • 6287dc4 Merge branch 'release/9.9.0-beta.4'
  • 825fae7 release: 9.9.0-beta.4
  • 3659b91 Pin prepare action release to specific commit
  • Additional commits viewable in compare view

Updates sentry_logging from 9.8.0 to 9.9.1

Release notes

Sourced from sentry_logging's releases.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

9.9.0-beta.3

Features

... (truncated)

Changelog

Sourced from sentry_logging's changelog.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

... (truncated)

Commits
  • 4c2e79f release: 9.9.1
  • 114239b fix(jni): ensure that the ScopesAdapter instance is released after use (#3411)
  • cba2765 fix(app-start): Fixes cold/warm start spans not attaching if TTFD takes more ...
  • 7bf0e72 Fix Supabase analysis CI (#3405)
  • ebccb5b Merge branch 'release/9.9.0'
  • 0230ac1 Update CHANGELOG (#3401)
  • 01d32fc release: 9.9.0
  • 6287dc4 Merge branch 'release/9.9.0-beta.4'
  • 825fae7 release: 9.9.0-beta.4
  • 3659b91 Pin prepare action release to specific commit
  • Additional commits viewable in compare view

Updates shared_preferences from 2.5.3 to 2.5.4

Commits
  • 338ecd3 [shared_preferences_tool] Update dependencies and fix deprecation (#10560)
  • 33a9a81 [dependabot]: Bump the test-dependencies group across 2 directories with 1 up...
  • 2d9ddab [dependabot]: Bump the kotlin-gradle-plugin group across 7 directories with 1...
  • 8168d9c [various] Update READMEs to reflect current OS support (#10470)
  • cc3dca6 [all] Omit obvious local types (#10511)
  • 061eedc [dependabot]: Bump the gradle-plugin group across 19 directories with 1 updat...
  • 41df27d [dependabot]: Bump the test-dependencies group across 10 directories with 3 u...
  • 18b9cc5 [various] Update all packages to Pigeon 26 (#10450)
  • ae20377 Update repo for 3.38 (#10405)
  • 2f25693 [shared_preferences] Remove use of Pigeon's Dart test generator (#10325)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pub group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [background_downloader](https://github.com/781flyingdutchman/background_downloader) | `9.4.0` | `9.4.3` |
| [file_picker](https://github.com/miguelpruivo/flutter_file_picker) | `10.3.7` | `10.3.8` |
| [flutter_secure_storage](https://github.com/mogol/flutter_secure_storage) | `10.0.0-beta.5` | `10.0.0` |
| [go_router](https://github.com/flutter/packages/tree/main/packages) | `17.0.0` | `17.0.1` |
| [golden_screenshot](https://github.com/adil192/golden_screenshot) | `9.1.1` | `9.1.2` |
| [pdfrx](https://github.com/espresso3389/pdfrx/tree/master/packages) | `2.2.16` | `2.2.18` |
| [sentry_flutter](https://github.com/getsentry/sentry-dart) | `9.8.0` | `9.9.1` |
| [sentry_logging](https://github.com/getsentry/sentry-dart) | `9.8.0` | `9.9.1` |
| [shared_preferences](https://github.com/flutter/packages/tree/main/packages/shared_preferences) | `2.5.3` | `2.5.4` |


Updates `background_downloader` from 9.4.0 to 9.4.3
- [Changelog](https://github.com/781flyingdutchman/background_downloader/blob/main/CHANGELOG.md)
- [Commits](781flyingdutchman/background_downloader@V9.4.0...V9.4.3)

Updates `file_picker` from 10.3.7 to 10.3.8
- [Release notes](https://github.com/miguelpruivo/flutter_file_picker/releases)
- [Changelog](https://github.com/miguelpruivo/flutter_file_picker/blob/master/CHANGELOG.md)
- [Commits](miguelpruivo/flutter_file_picker@v10.3.7...v10.3.8)

Updates `flutter_secure_storage` from 10.0.0-beta.5 to 10.0.0
- [Release notes](https://github.com/mogol/flutter_secure_storage/releases)
- [Commits](juliansteenbakker/flutter_secure_storage@v10.0.0-beta.5...v10.0.0)

Updates `go_router` from 17.0.0 to 17.0.1
- [Commits](https://github.com/flutter/packages/commits/go_router-v17.0.1/packages)

Updates `golden_screenshot` from 9.1.1 to 9.1.2
- [Changelog](https://github.com/adil192/golden_screenshot/blob/main/CHANGELOG.md)
- [Commits](https://github.com/adil192/golden_screenshot/commits)

Updates `pdfrx` from 2.2.16 to 2.2.18
- [Release notes](https://github.com/espresso3389/pdfrx/releases)
- [Commits](https://github.com/espresso3389/pdfrx/commits/pdfrx-v2.2.18/packages)

Updates `sentry_flutter` from 9.8.0 to 9.9.1
- [Release notes](https://github.com/getsentry/sentry-dart/releases)
- [Changelog](https://github.com/getsentry/sentry-dart/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-dart@9.8.0...9.9.1)

Updates `sentry_logging` from 9.8.0 to 9.9.1
- [Release notes](https://github.com/getsentry/sentry-dart/releases)
- [Changelog](https://github.com/getsentry/sentry-dart/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-dart@9.8.0...9.9.1)

Updates `shared_preferences` from 2.5.3 to 2.5.4
- [Commits](https://github.com/flutter/packages/commits/shared_preferences-v2.5.4/packages/shared_preferences)

---
updated-dependencies:
- dependency-name: background_downloader
  dependency-version: 9.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: file_picker
  dependency-version: 10.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: flutter_secure_storage
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: go_router
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: golden_screenshot
  dependency-version: 9.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: pdfrx
  dependency-version: 2.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
- dependency-name: sentry_flutter
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pub
- dependency-name: sentry_logging
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pub
- dependency-name: shared_preferences
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pub
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dart Pull requests that update Dart code dependencies Pull requests that update a dependency file labels Dec 27, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 27, 2025

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Dec 27, 2025
@dependabot dependabot bot deleted the dependabot/pub/pub-d6bed1cae0 branch December 27, 2025 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dart Pull requests that update Dart code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant