deps: Bump dio from 5.9.2 to 5.11.1 #55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| pull_request: | |
| # Read-only token: these checks never write to the repo. On a public | |
| # repository this keeps fork PRs to the narrowest grant that still lets | |
| # actions/checkout fetch the merge ref. | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - uses: ./.github/actions/setup-flutter | |
| - run: flutter pub get | |
| - run: dart format --set-exit-if-changed . | |
| - run: flutter analyze | |
| - run: flutter test | |
| # The release gate is Python, so it is not covered by `flutter test`. | |
| # It decides whether a versionCode may ship, and a regression there | |
| # either blocks every release or lets a non-increasing code through — | |
| # which Android then refuses on install. uv pins the interpreter so this | |
| # behaves the same locally and on the runner. | |
| - name: Set up uv | |
| uses: astral-sh/setup-uv@v7 | |
| with: | |
| python-version: '3.12' | |
| - name: Test the release versionCode gate | |
| run: uv run --python 3.12 scripts/ci/check_release_version_test.py | |
| # Hex-literal audit. Fails the PR if any 0x[0-9a-fA-F]{4,} that | |
| # looks like a feature ID lives outside the bundled dispatch | |
| # table (android/app/src/main/assets/offline/car_table.textproto). Color literals, | |
| # ADB protocol opcodes, Unicode codepoints, and bitmasks are | |
| # allowlisted by context in tool/audit_hex.dart. | |
| - name: Audit stray feature-ID hex | |
| run: dart run tool/audit_hex.dart | |
| # Every PR re-validates the standalone prod | |
| # dart-define file. Catches a future regression where someone | |
| # (a) breaks the JSON shape, (b) drops a key | |
| # `lib/kernel/config/app_config.dart` reads, or (c) renames the | |
| # file path away from what `release-build.yml` expects. | |
| # | |
| # Originally tried ``flutter analyze --dart-define-from-file=…`` | |
| # but that flag is only honored by ``flutter build``/``run``; | |
| # ``analyze`` exits 64 on it. The validator script JSON-parses | |
| # prod.json and asserts the required keys are present + correctly | |
| # typed — same intent, ~1s vs the 4-min APK build alternative. | |
| # No backend connection or backend secret is required. | |
| - name: Validate prod dart-define config loads | |
| run: dart run tool/validate_prod_config.dart |