Skip to content

deps(flutter): bump the flutter-dependencies group with 3 updates - #331

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pub/develop/flutter-dependencies-cb5a663667
Open

deps(flutter): bump the flutter-dependencies group with 3 updates#331
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pub/develop/flutter-dependencies-cb5a663667

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the flutter-dependencies group with 3 updates: html, pdfrx and pdfrx_engine.

Updates html from 0.15.6 to 0.15.7

Release notes

Sourced from html's releases.

package:html v0.15.7

  • writeTextNodeAsHtml: Escape text inside <script> and <style>-like tags in foreign namespaces.
  • Fix the tokenizer failing to close CDATA blocks when encountering extra brackets
  • Require Dart 3.6
  • Limit "Noah's Ark" clause to avoid degenerate O(N^2) when parsing deeply nested formatting elements with unique attributes.
  • Added new textContent method to Node class that returns the text content of the node.
  • Fix XSS vulnerability in htmlToCodeMarkup() by escaping DOCTYPE, element, and attribute names.
Commits
  • c7f7a63 Prepare to publish packages (#2562)
  • 3b3b22c [extension_discovery] Fixup review comments (#2557)
  • 441ff29 [unified_analytics]Add an 'is_external' const to indicate external builds (#2...
  • 5f02a37 Fix trailing comma when adding to flow collections in yaml_edit (#2533)
  • 7a3be9a [unified_analytics] Prepare for 8.0.18 release (#2559)
  • 59c163c [unified_analytics] Add hostArch parameter to Event.flutterCommandResult (#2558)
  • 8108a7c [extension_discovery] Prevent config.yaml symlinks from escaping package boun...
  • 3de16a5 fix(coverage): reject file: URIs outside known roots in Resolver (#2534)
  • 1723b1e [html]: add minimal differential testing framework (#2554)
  • 7dc3279 fix: reconcile version mismatches in process and stack_trace (#2546)
  • Additional commits viewable in compare view

Updates pdfrx from 2.4.7 to 2.4.8

Release notes

Sourced from pdfrx's releases.

Prebuilt iOS/macOS pdfium binary

iOS/macOS pdfium prebuilt binary distribution only for pdfrx. The highlights are;

  • xcframeworks that supports the following platforms
    • iOS arm64
    • iPhoneSimulator arm64/x64
    • macOS arm64/x64
  • xcframeworks contains static library but FPDF_* functions made exported
  • Additional FILEACCESS helper functions pdfrx_*
Commits
  • faf9d5c Release pdfrx 2.4.8 and pdfrx_engine 0.4.7
  • 9142d77 Merge pull request #693 from pandeyshivam10/fix/background-worker-async-callback
  • 098a342 fix(createImage): surface decode failures instead of hanging forever
  • 8d13b9d fix(PdfPageView): dispose the previous image before replacing it
  • d3729a1 Merge pull request #694 from Guesub/fix/pages-setter-linear-scan
  • b891075 Keep text selection alive during progressive page loading
  • 8148dd1 Fix O(N^2) page list update in _PdfDocumentPdfium.pages setter
  • e16a956 fix: BackgroundWorker.compute silently breaks on a genuinely async callback
  • 9470279 Work around ARM64 Linux jni plugin build failure
  • 623dfeb Return only the bytes written from encodePdf on the WASM backend
  • Additional commits viewable in compare view

Updates pdfrx_engine from 0.4.6 to 0.4.7

Release notes

Sourced from pdfrx_engine's releases.

Prebuilt iOS/macOS pdfium binary

iOS/macOS pdfium prebuilt binary distribution only for pdfrx. The highlights are;

  • xcframeworks that supports the following platforms
    • iOS arm64
    • iPhoneSimulator arm64/x64
    • macOS arm64/x64
  • xcframeworks contains static library but FPDF_* functions made exported
  • Additional FILEACCESS helper functions pdfrx_*
Commits
  • faf9d5c Release pdfrx 2.4.8 and pdfrx_engine 0.4.7
  • 9142d77 Merge pull request #693 from pandeyshivam10/fix/background-worker-async-callback
  • 098a342 fix(createImage): surface decode failures instead of hanging forever
  • 8d13b9d fix(PdfPageView): dispose the previous image before replacing it
  • d3729a1 Merge pull request #694 from Guesub/fix/pages-setter-linear-scan
  • b891075 Keep text selection alive during progressive page loading
  • 8148dd1 Fix O(N^2) page list update in _PdfDocumentPdfium.pages setter
  • e16a956 fix: BackgroundWorker.compute silently breaks on a genuinely async callback
  • 9470279 Work around ARM64 Linux jni plugin build failure
  • 623dfeb Return only the bytes written from encodePdf on the WASM backend
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

关联 Issue

Refs #2
Refs #693
Refs #694
Refs #2533
Refs #2534
Refs #2546
Refs #2554
Refs #2557
Refs #2558
Refs #2559
Refs #2562

Bumps the flutter-dependencies group with 3 updates: [html](https://github.com/dart-lang/tools/tree/main/pkgs), [pdfrx](https://github.com/espresso3389/pdfrx/tree/master/packages) and [pdfrx_engine](https://github.com/espresso3389/pdfrx/tree/master/packages).


Updates `html` from 0.15.6 to 0.15.7
- [Release notes](https://github.com/dart-lang/tools/releases)
- [Commits](https://github.com/dart-lang/tools/commits/html-v0.15.7/pkgs)

Updates `pdfrx` from 2.4.7 to 2.4.8
- [Release notes](https://github.com/espresso3389/pdfrx/releases)
- [Commits](https://github.com/espresso3389/pdfrx/commits/pdfrx-v2.4.8/packages)

Updates `pdfrx_engine` from 0.4.6 to 0.4.7
- [Release notes](https://github.com/espresso3389/pdfrx/releases)
- [Commits](https://github.com/espresso3389/pdfrx/commits/pdfrx_engine-v0.4.7/packages)

---
updated-dependencies:
- dependency-name: html
  dependency-version: 0.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: flutter-dependencies
- dependency-name: pdfrx
  dependency-version: 2.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: flutter-dependencies
- dependency-name: pdfrx_engine
  dependency-version: 0.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: flutter-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies 依赖升级、锁文件、SDK 或第三方库相关 P2 中优先级:排入计划并按节奏处理 labels Aug 31, 2026
@dependabot
dependabot Bot requested a review from Qintsg as a code owner August 31, 2026 23:46
@dependabot dependabot Bot added dependencies 依赖升级、锁文件、SDK 或第三方库相关 P2 中优先级:排入计划并按节奏处理 labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies 依赖升级、锁文件、SDK 或第三方库相关 P2 中优先级:排入计划并按节奏处理

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants