Skip to content

Bump the minor-and-patch group across 1 directory with 9 updates #2750

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Bump the minor-and-patch group across 1 directory with 9 updates #2750

dependabot wants to merge 2 commits into from
+47 −55

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the minor-and-patch group with 7 updates in the /frontend directory:

Package From To
crypto 3.0.6 3.0.7
flutter_svg 2.2.1 2.2.3
maplibre_gl 0.22.0 0.24.1
flutter_secure_storage 9.2.4 10.0.0
sentry_flutter 9.7.0 9.9.1
shared_preferences 2.5.3 2.5.4
slang 4.9.0 4.11.1

Updates crypto from 3.0.6 to 3.0.7

Release notes

Sourced from crypto's releases.

package:crypto v3.0.7

  • Run dart format with the new style.
  • Performance improvements.
  • Updated web conditional import to use js_interop to support WebAssembly.
Commits
  • e6c3810 [crypto] remove the -wip to release new version (#921)
  • 018e1dc fix(crypto): update conditional import for js interop library (#915)
  • 9fefb52 Make Int64 default constructor non-const in native mode (#916)
  • 7fee9c0 Fix Int64.operator == (#911)
  • a4dc873 Implement Int64 as a wrapper for int when targeting native and Wasm (#905)
  • 1aa58ef [fixnum] update the min. required dart sdk (#907)
  • b59ecf4 Optimize surrogate decoding. (#894)
  • dc97530 Speedup package:crypto (with a focus on md5) (#892)
  • 816cea7 [path] Fix test race condition caused by changing Directory.current (#890)
  • de09be6 update the issue templates for package:lints (#887)
  • Additional commits viewable in compare view

Updates flutter_svg from 2.2.1 to 2.2.3

Commits

Updates maplibre_gl from 0.22.0 to 0.24.1

Release notes

Sourced from maplibre_gl's releases.

v0.24.1

What's Changed

Added

  • Added onCameraMove callback in the controller and in MapLibreMap class. (#643)

Changed

  • Rollback maplibre-gl to 4.7.1 version. (#660)

Fixed

  • Annotation tap call callbacks twice. (#652)
  • Annotation APIs: use null-aware access for manager-backed collections (symbols, lines, circles, fills) to avoid null errors before style load. (#657)
  • Add methods enforce explicit manager initialization with clear exceptions when style is not loaded. (#657)
  • Calling add* before style load now fails fast with a clear Exception instead of risking null dereferences or silent failures. (#657)

A big thank you to everyone who contributed to this update!

Contributors: @​andynewman10, @​andrea689, @​gabbopalma Full Changelog: maplibre/flutter-maplibre-gl@v0.24.0...v0.24.1

v0.24.0

What's Changed

[!NOTE] This release has breaking changes.
We apologize for the quick change in 0.24.0: this version definitively stabilizes the signatures of feature interaction callbacks.

This release restores the feature id and makes the Annotation parameter nullable for all feature interaction callbacks (tap / drag / hover).
This unblocks interaction with style-layer features not managed by annotation managers (i.e. added via addLayer* / style APIs).

[!WARNING]

Breaking Changes

  • Tap: OnFeatureInteractionCallback → (Point<double> point, LatLng coordinates, String id, String layerId, Annotation? annotation).

  • Drag: OnFeatureDragCallback → (Point<double> point, LatLng origin, LatLng current, LatLng delta, String id, Annotation? annotation, DragEventType eventType).

  • Hover: OnFeatureHoverCallback → Point<double> point, LatLng coordinates, String id, Annotation? annotation, HoverEventType eventType).

  • Update existing listeners: The short‑lived 0.23.0-only signatures (without id) are removed.

    • For unmanaged style layer features annotation is null (unmanaged means sources/layers you add via style APIs like addGeoJsonSource + addSymbolLayer).
    • For managed annotations it is the Annotation object.

Reasoning

In 0.23.0 the move to annotation objects inadvertently dropped interaction for unmanaged style features. Reintroducing id (and making annotation nullable) normalizes all three interaction paths without creating phantom annotation wrappers.

Migration Example

Before (0.23.0):

controller.onFeatureTapped.add((p, latLng, annotation, layerId) {
  print(annotation.id);
});
</tr></table>

... (truncated)

Changelog

Sourced from maplibre_gl's changelog.

0.24.1

Fixed

  • Annotation tap call callbacks twice. (#652)
  • Annotation APIs: use null-aware access for manager-backed collections (symbols, lines, circles, fills) to avoid null errors before style load. (#657)
  • Add methods enforce explicit manager initialization with clear exceptions when style is not loaded. (#657)
  • Calling add* before style load now fails fast with a clear Exception instead of risking null dereferences or silent failures. (#657)

Changed

  • Rollback maplibre-gl to 4.7.1 version. (#660)

Added

  • Added onCameraMove callback in the controller and in MapLibreMap class. (#643)

0.24.0

Note: This release has breaking changes.
We apologize for the quick change in 0.24.0: this version definitively stabilizes the signatures of feature interaction callbacks.

This release restores the feature id and makes the Annotation parameter nullable for all feature interaction callbacks (tap / drag / hover).
This unblocks interaction with style-layer features not managed by annotation managers (i.e. added via addLayer* / style APIs).

Breaking Changes

  • Tap: OnFeatureInteractionCallback → (Point<double> point, LatLng coordinates, String id, String layerId, Annotation? annotation).

  • Drag: OnFeatureDragCallback → (Point<double> point, LatLng origin, LatLng current, LatLng delta, String id, Annotation? annotation, DragEventType eventType).

  • Hover: OnFeatureHoverCallback → Point<double> point, LatLng coordinates, String id, Annotation? annotation, HoverEventType eventType).

  • Update existing listeners: The short‑lived 0.23.0-only signatures (without id) are removed.

    • For unmanaged style layer features annotation is null (unmanaged means sources/layers you add via style APIs like addGeoJsonSource + addSymbolLayer).
    • For managed annotations it is the Annotation object.

Reasoning

In 0.23.0 the move to annotation objects inadvertently dropped interaction for unmanaged style features. Reintroducing id (and making annotation nullable) normalizes all three interaction paths without creating phantom annotation wrappers.

Migration Example

Before (0.23.0):

controller.onFeatureTapped.add((p, latLng, annotation, layerId) {
  print(annotation.id);
});

After (>=0.24.0):

controller.onFeatureTapped.add((p, latLng, id, layerId, annotation) {
  print('feature id=$id managed=${annotation != null}');
});

Refactor / Quality

... (truncated)

Commits

Updates flutter_secure_storage from 9.2.4 to 10.0.0

Release notes

Sourced from flutter_secure_storage's releases.

v10.0.0

This major release brings significant security improvements, platform updates, and modernization across all supported platforms.

Android

Due to the deprecation of Jetpack Security library, the Android implementation has been largely rewritten with custom secure ciphers, enhanced biometrics support, and migration tools.

Breaking Changes:

  • AndroidOptions().encryptedSharedPreferences is now deprecated due to Jetpack Crypto package deprecation
    • Migration will automatically happen due to migrateOnAlgorithmChange: true, which can also be set to false if not wanted.
  • ResetOnError will now automatically be true, because most errors are unrecoverable due to key storage problems. It can still be disabled with resetOnError: false
  • Default key cipher changed to RSA_ECB_OAEPwithSHA_256andMGF1Padding
  • Default storage cipher changed to AES_GCM_NoPadding
  • Minimum Android SDK changed from 19 to 23
  • Target SDK updated to 36
  • Migrated from deprecated Jetpack Crypto library to custom cipher implementation (Tink doesn't support biometrics)
  • Migrated to Java Version 17

New Features:

  • New named constructors: AndroidOptions(), AndroidOptions.biometric()
  • AndroidOptions().migrateOnAlgorithmChange automatically migrates data to new ciphers when enabled
  • Improved biometric authentication with graceful degradation when device has no security setup
  • Migration tools for transitioning from deprecated encryptedSharedPreferences
  • Enhanced error handling with proper exception messages for biometric unavailability

Fixes:

  • Fixed biometric authentication on devices without security (PIN/pattern/password) - now gracefully degrades when enforceBiometrics=false
  • Fixed storage cipher and key cipher pairing validation
  • Fixed migration checks for encrypted shared preferences
  • Fixed biometric permission handling
  • Fixed exception when reading data after boot

Other Changes:

  • Updated Gradle, Kotlin, and Tink dependencies
  • Refactored custom cipher implementations for better maintainability
  • Added delete key functions for proper reset handling
  • Migrated to new analyzer and code cleanup

iOS / macOS (darwin)

  • Merged iOS and macOS implementations into unified flutter_secure_storage_darwin package
  • Added support for Swift Package Manager
  • Remove keys regardless of synchronizable state or accessibility constraints
  • Change minimum iOS version from 9 to 12
  • Change minimum macOS version to 10.14
  • Use serial queue for execution of keychain operations
  • Added privacy manifest
  • Refactored code and added missing options to IOSOptions and MacOSOptions
  • Fixed warnings with Privacy Manifest
  • Fixed delete and deleteAll when synchronizable is set
  • Fixed migration when value is saved while key already exists with different accessibility option
  • Use accessibility option for all operations

... (truncated)

Commits

Updates sentry_flutter from 9.7.0 to 9.9.1

Release notes

Sourced from sentry_flutter's releases.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

9.9.0-beta.3

Features

... (truncated)

Changelog

Sourced from sentry_flutter's changelog.

9.9.1

Fixes

  • Cold/warm start spans not attaching if TTFD takes more than 3 seconds to report (#3404)
  • Ensure that the JNI ScopesAdapter instance is released after use (#3411)

9.9.0

Features

  • Add Sentry.setAttributes and Sentry.removeAttribute (#3352)
    • These attributes are set at the scope level and apply to all logs (and later to metrics and spans).
    • When a scope attribute conflicts with a log-level attribute, the log-level attribute always takes precedence.
  • Sentry Supabase Integration (#2913)
    • Adds the sentry_supabase package to instrument supabase with Sentry breadcrumbs, traces and errors.

Fixes

  • Added consumerProguardFiles 'proguard-rules.pro' to the debug build configuration to ensure ProGuard rules are consistently applied across both release and debug variants. (#3339)
  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)
  • Android app crashing on hot-restart in debug mode (#3358)
  • Dont use Companion in JNI calls and properly release JNI refs (#3354)
    • This potentially fixes segfault crashes related to JNI

Enhancements

  • Refactor captureReplay and setReplayConfig to use JNI (#3318)
  • Refactor init to use JNI (#3324)
  • Flush logs if client/hub/sdk is closed (#3335

Dependencies

9.9.0-beta.4

Fixes

  • Dart to native type conversion (#3372)
  • Revert FFI usage on iOS/macOS due to symbol stripping issues (#3379)

Dependencies

... (truncated)

Commits
  • 4c2e79f release: 9.9.1
  • 114239b fix(jni): ensure that the ScopesAdapter instance is released after use (#3411)
  • cba2765 fix(app-start): Fixes cold/warm start spans not attaching if TTFD takes more ...
  • 7bf0e72 Fix Supabase analysis CI (#3405)
  • ebccb5b Merge branch 'release/9.9.0'
  • 0230ac1 Update CHANGELOG (#3401)
  • 01d32fc release: 9.9.0
  • 6287dc4 Merge branch 'release/9.9.0-beta.4'
  • 825fae7 release: 9.9.0-beta.4
  • 3659b91 Pin prepare action release to specific commit
  • Additional commits viewable in compare view

Updates shared_preferences from 2.5.3 to 2.5.4

Commits
  • 338ecd3 [shared_preferences_tool] Update dependencies and fix deprecation (#10560)
  • 33a9a81 [dependabot]: Bump the test-dependencies group across 2 directories with 1 up...
  • 2d9ddab [dependabot]: Bump the kotlin-gradle-plugin group across 7 directories with 1...
  • 8168d9c [various] Update READMEs to reflect current OS support (#10470)
  • cc3dca6 [all] Omit obvious local types (#10511)
  • 061eedc [dependabot]: Bump the gradle-plugin group across 19 directories with 1 updat...
  • 41df27d [dependabot]: Bump the test-dependencies group across 10 directories with 3 u...
  • 18b9cc5 [various] Update all packages to Pigeon 26 (#10450)
  • ae20377 Update repo for 3.38 (#10405)
  • 2f25693 [shared_preferences] Remove use of Pigeon's Dart test generator (#10325)
  • Additional commits viewable in compare view

Updates slang from 4.9.0 to 4.11.1

Release notes

Sourced from slang's releases.

v4.11.0

  • feat: add t.$wip('Welcome $name') or t.$wip.welcome.title('Welcome $name') for key-less prototyping without code generation
  • feat: add dart run slang wip apply to add the translations to resources and update the Dart code accordingly
  • feat: generate the flat map in a single function (#325) @​mrgnhnt96

v4.10.0

Commits

Updates slang_build_runner from 4.9.0 to 4.11.0

Release notes

Sourced from slang_build_runner's releases.

v4.11.0

  • feat: add t.$wip('Welcome $name') or t.$wip.welcome.title('Welcome $name') for key-less prototyping without code generation
  • feat: add dart run slang wip apply to add the translations to resources and update the Dart code accordingly
  • feat: generate the flat map in a single function (#325) @​mrgnhnt96

v4.10.0

Commits

Updates slang_flutter from 4.9.0 to 4.11.0

Release notes

Sourced from slang_flutter's releases.

v4.11.0

  • feat: add t.$wip('Welcome $name') or t.$wip.welcome.title('Welcome $name') for key-less prototyping without code generation
  • feat: add dart run slang wip apply to add the translations to resources and update the Dart code accordingly
  • feat: generate the flat map in a single function (#325) @​mrgnhnt96

v4.10.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group across 1 directory with 9 updates
f218702 
Bumps the minor-and-patch group with 7 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [crypto](https://github.com/dart-lang/core/tree/main/pkgs) | `3.0.6` | `3.0.7` |
| [flutter_svg](https://github.com/flutter/packages/tree/main/third_party/packages) | `2.2.1` | `2.2.3` |
| [maplibre_gl](https://github.com/maplibre/flutter-maplibre-gl) | `0.22.0` | `0.24.1` |
| [flutter_secure_storage](https://github.com/mogol/flutter_secure_storage) | `9.2.4` | `10.0.0` |
| [sentry_flutter](https://github.com/getsentry/sentry-dart) | `9.7.0` | `9.9.1` |
| [shared_preferences](https://github.com/flutter/packages/tree/main/packages/shared_preferences) | `2.5.3` | `2.5.4` |
| [slang](https://github.com/slang-i18n/slang) | `4.9.0` | `4.11.1` |



Updates `crypto` from 3.0.6 to 3.0.7
- [Release notes](https://github.com/dart-lang/core/releases)
- [Commits](https://github.com/dart-lang/core/commits/crypto-v3.0.7/pkgs)

Updates `flutter_svg` from 2.2.1 to 2.2.3
- [Commits](https://github.com/flutter/packages/commits/flutter_svg-v2.2.3/third_party/packages)

Updates `maplibre_gl` from 0.22.0 to 0.24.1
- [Release notes](https://github.com/maplibre/flutter-maplibre-gl/releases)
- [Changelog](https://github.com/maplibre/flutter-maplibre-gl/blob/main/CHANGELOG.md)
- [Commits](maplibre/flutter-maplibre-gl@v0.22.0...v0.24.1)

Updates `flutter_secure_storage` from 9.2.4 to 10.0.0
- [Release notes](https://github.com/mogol/flutter_secure_storage/releases)
- [Commits](juliansteenbakker/flutter_secure_storage@v9.2.4...v10.0.0)

Updates `sentry_flutter` from 9.7.0 to 9.9.1
- [Release notes](https://github.com/getsentry/sentry-dart/releases)
- [Changelog](https://github.com/getsentry/sentry-dart/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-dart@9.7.0...9.9.1)

Updates `shared_preferences` from 2.5.3 to 2.5.4
- [Commits](https://github.com/flutter/packages/commits/shared_preferences-v2.5.4/packages/shared_preferences)

Updates `slang` from 4.9.0 to 4.11.1
- [Release notes](https://github.com/slang-i18n/slang/releases)
- [Commits](https://github.com/slang-i18n/slang/commits)

Updates `slang_build_runner` from 4.9.0 to 4.11.0
- [Release notes](https://github.com/slang-i18n/slang/releases)
- [Commits](slang-i18n/slang@v4.9.0...v4.11.0)

Updates `slang_flutter` from 4.9.0 to 4.11.0
- [Release notes](https://github.com/slang-i18n/slang/releases)
- [Commits](slang-i18n/slang@v4.9.0...v4.11.0)

---
updated-dependencies:
- dependency-name: crypto
  dependency-version: 3.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: flutter_svg
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: maplibre_gl
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: flutter_secure_storage
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: sentry_flutter
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: shared_preferences
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: slang
  dependency-version: 4.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: slang_build_runner
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: slang_flutter
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file not-testable For end users labels Jan 1, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file not-testable For end users labels Jan 1, 2026
@f1sh1918
Copy link
Contributor

f1sh1918 commented Jan 8, 2026

@seluianova and @andrew8er i'm not pretty sure if we should update flutter_secure_storage already to next major version.
There were some major issues in the past and maybe its better to wait a little bit more?
Even i tested that the update didn't result in any data los

I had to do a fvm flutter clean to get new flutter_sentry version running

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@f1sh1918 f1sh1918 Awaiting requested review from f1sh1918 f1sh1918 is a code owner

@andrew8er andrew8er Awaiting requested review from andrew8er andrew8er is a code owner

@seluianova seluianova Awaiting requested review from seluianova seluianova is a code owner

@bahaaTuffaha bahaaTuffaha Awaiting requested review from bahaaTuffaha bahaaTuffaha is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file not-testable For end users

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@f1sh1918