Skip to content

Add section on removing CocoaPods from a project - #13774

Open
sfshaza2 wants to merge 29 commits into
mainfrom
cocoapods
Open

Add section on removing CocoaPods from a project#13774
sfshaza2 wants to merge 29 commits into
mainfrom
cocoapods

Conversation

@sfshaza2

@sfshaza2 sfshaza2 commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

@sfshaza2
sfshaza2 requested a review from a team as a code owner August 20, 2026 23:17

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request adds a new section to the documentation detailing how to remove CocoaPods integration from iOS and macOS Flutter projects once they have migrated to Swift Package Manager. The review feedback suggests updating the configuration file cleanup instructions to include the Profile.xcconfig files (and macOS equivalents) alongside the debug and release configurations to prevent build failures in profile mode.

@flutter-website-bot

flutter-website-bot commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

Staged preview of the updated docs.flutter.dev site (updated for commit d67201d):

https://flutter-docs-prod--docs-pr13774-cocoapods-2kd84rzj.web.app

@sfshaza2
sfshaza2 requested a review from jmagman August 20, 2026 23:36
@jmagman
jmagman requested a review from vashworth August 20, 2026 23:49
@sfshaza2

This comment was marked as outdated.

@flutter-website-bot

flutter-website-bot commented Aug 25, 2026

Copy link
Copy Markdown
Collaborator

Staged preview of the updated flutter.dev site (updated for commit d67201d):

https://flutter-dev-230821--www-pr13774-cocoapods-9wkomtmf.web.app

…ger/for-app-developers.md

Co-authored-by: Victoria Ashworth <15619084+vashworth@users.noreply.github.com>

@lamek lamek left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Quick nits. LGTM

mboetger and others added 11 commits August 31, 2026 12:07
Android 17 adds a new runtime permission that affects dart sockets. This
adds a page explaining how developers should handle this.

Partially addresses: #184859

## Presubmit checklist

- [X] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [X] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [X] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [X] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
## Summary

With PE/COFF AOT snapshots (flutter/flutter#187594), Windows x64 builds
using `--split-debug-info` produce a PDB file (`app.windows-x64.pdb`)
instead of an `app.windows-x64.symbols` DWARF file, and `flutter
symbolize` doesn't support PDB files.

This updates the obfuscation docs to:

- Note that Windows x64 builds generate `app.windows-x64.pdb` instead of
a SYMBOLS file.
- Note that `flutter symbolize` doesn't support PDB files, and that
stack traces from obfuscated Windows x64 builds are read with a Windows
debugger (for example, WinDbg) and the PDB file.

**Do not merge until flutter/flutter#187594 lands and reaches the stable
channel**, since this page documents stable-channel behavior.

Fixes the docs question raised in
flutter/flutter#187594 (comment)
- Rename each blog author image to match their ID in the `authors.yaml`
file.
- Standardize JPEG images to `.jpg` instead of a mix of `.jpg` and
`.jpeg`.
- Convert the one-remaining PNG author image to WebP.
- Remove some unused and duplicate author images.
- Rename the image directory to `author_images` instead of
`authors_images`.
_Description of what this PR is changing or adding, and why:_

The blog post about how Flutter stays ahead of iOS releases

_Issues fixed by this PR (if any):_

The issue of a lack of any posts about how Flutter stays ahead of iOS
releases

_PRs or commits this PR depends on (if any):_

## Presubmit checklist

- [x] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [x] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [x] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [x] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.
Extract generic two-column filterable index layout styles and
sidebar/search components from **learning resources index** into
reusable filterable_index.dart and _filterable-index.scss.

This change anticipates new content for FlutterBench, where I'm adding a
CUJ index #13691

---------

Co-authored-by: Parker Lougheed <parlough@gmail.com>
## Description
Fixes #13530
- Adds a "Ready to start" CTA on the learning pathway landing page
linking to Step 1.
- Adds `/learn/pathway/tutorial` to `tutorial.yml` so next/previous step
navigation flows sequentially through the tutorial introduction.

## Presubmit checklist

- [ ] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [ ] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [ ] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [ ] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
of 80 characters or fewer.
We had a few different set of tags, pills, and chips used across the
site and the Dart site. This PR standardizes on the `Tag` class in
`package:site_shared`, expanding its capabilities and documentation, and
setting up a predefined set of colors.

This will simplify maintainence, improve consistency, and prepare for
upcoming content that also needs tags.
Introduce a new `contribute-blog` skill that acts as an entry point for
agents working on the blog, either directly or importing from a Google
Doc or elsewhere. It helps them create, structure, and format new posts.
It also provides guidance around adding new authors or configuring
existing ones.

It intentionally focuses on maintaining the voice, tone, and preferences
of the original author rather than trying to force it into our
documentation-focused standards.
Updates the Android `build.gradle.kts` release signing example to use
safe casts (`as? String`) instead of unsafe casts (`as String`). This
prevents Gradle configuration from crashing on debug builds when
`key.properties` is absent.

Fixes #11995

## Presubmit checklist

- [ ] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [ ] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [ ] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [ ] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.
…sing see when referring to things. (#13820)

Updated guidance on using "see" to refer to things.

## Presubmit checklist

- [ ] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [ ] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [ ] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [ ] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.
A paragraph got away. Adding it back.

FYI, @loic-sharma
conooi and others added 13 commits August 31, 2026 12:07
Fix broken link in Flutter 3.47 release blog post.
Added go link to flutter pluggable CI design document
Adds the migration guide for migrating to material_ui and cupertino_ui
I believe we'll be adding more docs, or a dedicated page on the site,
but it would be great to have a place to point for now that isn't just
the latest the release blog. :)
We'll be making a bigger call to action to migrate in the Fall release
after we deprecate the original libraries. This should be good in the
meantime for our early adopters. I already incorporated the early
feedback we have received from them.

Fixes flutter/flutter#191448
Related to flutter/flutter#191067

## Presubmit checklist

- [x] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [ ] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [x] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [x] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.
This PR adds the Maxint showcase case study:

- Adds `sites/www/content/showcase/maxint.md` with case study details,
success metrics, and overview of multi-platform deployment and AI
assistant Finsight.
- Adds WebP logo and body screenshots under
`sites/www/content/showcase/images/third_party/case_studies/maxint/`.
As it says. Waiting for header image.
…3778)

## Description

This PR overhauls the content and information architecture of the
Flutter AI documentation (`docs.flutter.dev/ai`), unifying getting
started workflows, consolidating conceptual guides, and removing
outdated / redundant pages.

### Key Changes

1. **Centralize setup in `/ai/get-started`:**
- Multi-agent tabs for **Antigravity** (CLI & IDE), **Claude Code**,
**Cursor**, **GitHub Copilot** (VS Code), **Codex**, and **Other**
(generic MCP clients).
   - High-level primer on how plugins, skills, and MCP work together.
2. **Consolidate tooling concepts in `/ai/tools`:**
- Unified conceptual overview for Agent skills, Dart and Flutter MCP
server, Developer Knowledge MCP server, Package skills, and AI rules.
- Includes progressive disclosure explanations, an architecture
overview, and a "When to use what" comparison guide.
3. **Add Package skills guide in `/ai/package-skills`:**
- Instructions for app developers on discovering skills with `dart run
skills@ get`.
- Guidelines for package authors on bundling skills in
`skills/<package_name>/SKILL.md`.
- Cross-linked from `/packages-and-plugins/using-packages` and
`/packages-and-plugins/developing-packages`.
4. **Deprecations and Removals:**
- Removed redundant / outdated pages: `/ai/create-with-ai`,
`/ai/coding-assistants/*`, `/ai/antigravity*`, `/ai/agent-skills`,
`/ai/mcp-server`, `/ai/ai-rules`,
`/ai/best-practices/developer-experience`, and `/ai/evals`.
- Added permanent 301 redirects in `sites/docs/firebase.json` for all
removed routes.
5. **Navigation & Cross-links:**
- Streamlined the **Develop with AI** sidebar hierarchy in
`sites/docs/src/data/sidenav/default.yml`.
- Updated cross-site links (`index.md`, `llms.txt`, `hot-reload.md`,
etc.).
Oops. Forgot to git add the images directory.
Bumps the example-dependencies group in /examples with 2 updates:
[go_router](https://github.com/flutter/packages/tree/main/packages) and
[googleapis](https://github.com/google/googleapis.dart/tree/master/generated).

Updates `go_router` from 17.5.0 to 18.0.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/flutter/packages/commit/a351d8c05432dd145ac397743b3ea8372b61d81d"><code>a351d8c</code></a>
[go_router] Batch release (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12567">#12567</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/6bb342344ecb29e405f9ce980ea9e65f60adf833"><code>6bb3423</code></a>
[pigeon] add modern concurrency support (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12382">#12382</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/959f062cbec1c21557601ba462110d21594a6760"><code>959f062</code></a>
[material_ui] Remove no-shuffle in scrollbar test (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12527">#12527</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/16fe084c3a298c69a1a12dffa30ff8e72dd1eea9"><code>16fe084</code></a>
[material_ui] Remove no-shuffle from dropdown test (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12528">#12528</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/252bb33ad3666c7d28621c87edccafff86e210fd"><code>252bb33</code></a>
[material_ui] A typo in the README file of the package. (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12526">#12526</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/4856dc0b9c5fb1651858f1525d223e0ba011ffe1"><code>4856dc0</code></a>
[material_ui] Animated theme test from flutter/flutter (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12487">#12487</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/4c34a52685412ec389af8de216fbf0b120e3aafd"><code>4c34a52</code></a>
Sync release-material_ui-1.0.1 to main (<a
href="https://github.com/flutter/packages/tree/main/packages/issues/12513">#12513</a>)</li>
<li><a
href="https://github.com/flutter/packages/commit/59f41451085d2690e28cd9ef81154aff067a8c1f"><code>59f4145</code></a>
[material_ui] [cupertino_ui] Add missing Widget of the Week videos to
widget ...</li>
<li><a
href="https://github.com/flutter/packages/commit/e31dfabbdfb06f05384415715d6730d28d64d08b"><code>e31dfab</code></a>
[camera_android_camerax] Add agentic guidance for adding native unit
tests (#...</li>
<li><a
href="https://github.com/flutter/packages/commit/be0a4e03edea1b1ba6e346b953b8b9b1e73b9057"><code>be0a4e0</code></a>
[material_ui] SearchAnchor overlay expands to full screen when viewport
size ...</li>
<li>Additional commits viewable in <a
href="https://github.com/flutter/packages/commits/go_router-v18.0.0/packages">compare
view</a></li>
</ul>
</details>
<br />

Updates `googleapis` from 16.0.0 to 17.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/googleapis.dart/releases">googleapis's
releases</a>.</em></p>
<blockquote>
<h2>package:googleapis v17.0.0</h2>
<h3>Mark APIs as <code>@deprecated</code> with references to
replacement</h3>
<p><code>package:google_cloud_*</code> packages:</p>
<ul>
<li><code>cloudfunctions</code> (<code>v1</code>, <code>v2</code>) -&gt;
<code>package:google_cloud_functions_v2</code></li>
<li><code>firestore</code> (<code>v1</code>) -&gt;
<code>package:google_cloud_firestore_v1</code></li>
<li><code>iam</code> (<code>v1</code>, <code>v2</code>),
<code>iamcredentials</code> (<code>v1</code>) -&gt;
<code>package:google_cloud_iam_v1</code></li>
<li><code>language</code> (<code>v1</code>, <code>v2</code>) -&gt;
<code>package:google_cloud_language_v2</code></li>
<li><code>logging</code> (<code>v2</code>) -&gt;
<code>package:google_cloud_logging_v2</code></li>
<li><code>secretmanager</code> (<code>v1</code>) -&gt;
<code>package:google_cloud_secretmanager_v1</code></li>
<li><code>storage</code> (<code>v1</code>) -&gt;
<code>package:google_cloud_storage</code></li>
</ul>
<h3>APIs</h3>
<ul>
<li><code>agentidentity</code> - new!</li>
<li><code>agentidentitycredentials</code> - new!</li>
<li><code>agentregistry</code> - new!</li>
<li><code>analytics</code> - removed</li>
<li><code>androiddeveloperidstatus</code> - new!</li>
<li><code>apigeeregistry</code> - removed</li>
<li><code>ces</code> - new!</li>
<li><code>cloudproductregistry</code> - new!</li>
<li><code>developerknowledge</code> - new!</li>
<li><code>dfareporting</code> - removed <code>v4</code></li>
<li><code>ftp</code> - new!</li>
<li><code>gmailpostmastertools</code> - added <code>v2</code></li>
<li><code>health</code> - new!</li>
<li><code>integrations</code> - removed</li>
<li><code>merchantapi</code> - added
<code>loyaltycustomers_v1</code></li>
<li><code>mybusinessqanda</code> - removed</li>
<li><code>saasservicemgmt</code> - new!</li>
<li><code>searchads360</code> - new!</li>
<li><code>webcontentpublisher</code> - new!</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/googleapis.dart/commit/11161f5a1503ddcae08a0465097c1a84cad2caaa"><code>11161f5</code></a>
feat: update APIs to latest discovery definitions (<a
href="https://github.com/google/googleapis.dart/tree/master/generated/issues/755">#755</a>)</li>
<li><a
href="https://github.com/google/googleapis.dart/commit/995ff9d66b0f9e8dd3f38dfb03421e45e9a29842"><code>995ff9d</code></a>
Mark a number of libraries deprecated (<a
href="https://github.com/google/googleapis.dart/tree/master/generated/issues/743">#743</a>)</li>
<li><a
href="https://github.com/google/googleapis.dart/commit/ba8ad6aa61bc678585a8304dc88d4892ad5ae6bf"><code>ba8ad6a</code></a>
chore: update to latest pre-v3.13 dart style changes (<a
href="https://github.com/google/googleapis.dart/tree/master/generated/issues/745">#745</a>)</li>
<li><a
href="https://github.com/google/googleapis.dart/commit/de252e68517832d106e2521c33c884cfa43edea7"><code>de252e6</code></a>
5 new APIs! (<a
href="https://github.com/google/googleapis.dart/tree/master/generated/issues/741">#741</a>)</li>
<li><a
href="https://github.com/google/googleapis.dart/commit/cad632f20b089f0b20e82f4815c4593119c15b68"><code>cad632f</code></a>
chore: update copyright header to Google LLC BSD format (<a
href="https://github.com/google/googleapis.dart/tree/master/generated/issues/725">#725</a>)</li>
<li>See full diff in <a
href="https://github.com/google/googleapis.dart/commits/googleapis-v17.0.0/generated">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This PR replaces the showcase body images in the Maxint case study with
high-resolution WebP versions.

- Converted and added high-resolution WebP images under
`sites/www/content/showcase/images/third_party/case_studies/maxint/`
- Removed obsolete low-resolution WebP images
- Updated image paths in `sites/www/content/showcase/maxint.md`
Bumps the github-actions group with 4 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action),
[github/codeql-action/analyze](https://github.com/github/codeql-action)
and [dart-lang/setup-dart](https://github.com/dart-lang/setup-dart).

Updates `github/codeql-action/init` from 4.37.8 to 4.37.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.9</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/cdf488f595d80d6e07e03d4674febd5ab45fa938"><code>cdf488f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a>
from github/update-v4.37.9-920ba7cd1</li>
<li><a
href="https://github.com/github/codeql-action/commit/7243f38558d187dde99730d224bb47aa26a95306"><code>7243f38</code></a>
Update changelog for v4.37.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/920ba7cd1596037e042122c00381eb16b397d68e"><code>920ba7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a>
from github/update-bundle/codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecfa6e16817b8f490bc9a59baa391baf4fa3e3c2"><code>ecfa6e1</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/adcdf4a70d247343cf9c29e0f7a6658b51c3a2b1"><code>adcdf4a</code></a>
Update default bundle to codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/486fec2a3ea2626afcd8c7e9208b4f515078dd7e"><code>486fec2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/134624c67b20869c2aaa36dafa726375b78a5d76"><code>134624c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a>
from github/dependabot/npm_and_yarn/npm-minor-457d82...</li>
<li><a
href="https://github.com/github/codeql-action/commit/ff43db8f982a368288f117354fb8d046e937124c"><code>ff43db8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a>
from github/mergeback/v4.37.8-to-main-db488dde</li>
<li><a
href="https://github.com/github/codeql-action/commit/4605e03a74cf891614c4d76f82384a16c1c11816"><code>4605e03</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/099c869cad6bf3b88657154d4ae47ffed27e632d"><code>099c869</code></a>
Update changelog and version after v4.37.8</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.37.8 to 4.37.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.9</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/cdf488f595d80d6e07e03d4674febd5ab45fa938"><code>cdf488f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a>
from github/update-v4.37.9-920ba7cd1</li>
<li><a
href="https://github.com/github/codeql-action/commit/7243f38558d187dde99730d224bb47aa26a95306"><code>7243f38</code></a>
Update changelog for v4.37.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/920ba7cd1596037e042122c00381eb16b397d68e"><code>920ba7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a>
from github/update-bundle/codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecfa6e16817b8f490bc9a59baa391baf4fa3e3c2"><code>ecfa6e1</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/adcdf4a70d247343cf9c29e0f7a6658b51c3a2b1"><code>adcdf4a</code></a>
Update default bundle to codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/486fec2a3ea2626afcd8c7e9208b4f515078dd7e"><code>486fec2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/134624c67b20869c2aaa36dafa726375b78a5d76"><code>134624c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a>
from github/dependabot/npm_and_yarn/npm-minor-457d82...</li>
<li><a
href="https://github.com/github/codeql-action/commit/ff43db8f982a368288f117354fb8d046e937124c"><code>ff43db8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a>
from github/mergeback/v4.37.8-to-main-db488dde</li>
<li><a
href="https://github.com/github/codeql-action/commit/4605e03a74cf891614c4d76f82384a16c1c11816"><code>4605e03</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/099c869cad6bf3b88657154d4ae47ffed27e632d"><code>099c869</code></a>
Update changelog and version after v4.37.8</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.37.8 to 4.37.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.9</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/cdf488f595d80d6e07e03d4674febd5ab45fa938"><code>cdf488f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a>
from github/update-v4.37.9-920ba7cd1</li>
<li><a
href="https://github.com/github/codeql-action/commit/7243f38558d187dde99730d224bb47aa26a95306"><code>7243f38</code></a>
Update changelog for v4.37.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/920ba7cd1596037e042122c00381eb16b397d68e"><code>920ba7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a>
from github/update-bundle/codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecfa6e16817b8f490bc9a59baa391baf4fa3e3c2"><code>ecfa6e1</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/adcdf4a70d247343cf9c29e0f7a6658b51c3a2b1"><code>adcdf4a</code></a>
Update default bundle to codeql-bundle-v2.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/486fec2a3ea2626afcd8c7e9208b4f515078dd7e"><code>486fec2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/134624c67b20869c2aaa36dafa726375b78a5d76"><code>134624c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a>
from github/dependabot/npm_and_yarn/npm-minor-457d82...</li>
<li><a
href="https://github.com/github/codeql-action/commit/ff43db8f982a368288f117354fb8d046e937124c"><code>ff43db8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a>
from github/mergeback/v4.37.8-to-main-db488dde</li>
<li><a
href="https://github.com/github/codeql-action/commit/4605e03a74cf891614c4d76f82384a16c1c11816"><code>4605e03</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/099c869cad6bf3b88657154d4ae47ffed27e632d"><code>099c869</code></a>
Update changelog and version after v4.37.8</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938">compare
view</a></li>
</ul>
</details>
<br />

Updates `dart-lang/setup-dart` from 1.8.0 to 1.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dart-lang/setup-dart/releases">dart-lang/setup-dart's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<ul>
<li>Update workflows to pin <code>actions/checkout</code> to a commit
SHA.</li>
<li>Harden workflow permissions to <code>contents: read</code>.</li>
<li>Update <code>publish.yml</code> reusable workflow to reference
<code>setup-dart@v1.8.0</code> and latest
<code>setup-flutter</code>.</li>
<li>Bump <code>undici</code> to <code>6.28.0</code> and
<code>@vercel/ncc</code> to <code>0.44.1</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md">dart-lang/setup-dart's
changelog</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<ul>
<li>Update workflows to pin <code>actions/checkout</code> to a commit
SHA.</li>
<li>Harden workflow permissions to <code>contents: read</code>.</li>
<li>Update <code>publish.yml</code> reusable workflow to reference
<code>setup-dart@v1.8.0</code> and latest
<code>setup-flutter</code>.</li>
<li>Bump <code>undici</code> to <code>6.28.0</code> and
<code>@vercel/ncc</code> to <code>0.44.1</code>.</li>
</ul>
<h2>v1.8.0</h2>
<ul>
<li>Add a problem matcher for <code>dart analyze</code> to automatically
create inline annotations on GitHub pull requests.</li>
<li>Update <code>publish.yml</code> reusable workflow to reference
<code>setup-dart@v1.7.2</code> (running on Node 24) (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/188">#188</a>[]).</li>
<li>Update GitHub Action dependencies (<code>actions/checkout</code>
v7).</li>
<li>Bump <code>undici</code> to <code>6.27.0</code> and update npm
dependencies.</li>
</ul>
<p><a
href="https://redirect.github.com/dart-lang/setup-dart/issues/188">#188</a>:
<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/188">dart-lang/setup-dart#188</a></p>
<h2>v1.7.2</h2>
<ul>
<li>Update Node.js requirement to Node 24.</li>
<li>Fix open Dependabot alerts by bumping <code>undici</code> to
<code>&gt;=6.24.0</code>.</li>
<li>Update GitHub Action dependencies (<code>@actions/core</code>,
<code>@actions/exec</code>, <code>@actions/tool-cache</code>,
<code>@actions/http-client</code>).</li>
<li>Update workflow actions to their latest versions
(<code>actions/checkout</code> v6, <code>setup-flutter</code>).</li>
</ul>
<h2>v1.7.1</h2>
<ul>
<li>Roll <code>undici</code> dependency to address <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975">CVE-2025-22150</a>.</li>
<li>Update to the latest npm dependencies.</li>
<li>Recompile the action using the new Dart / JavaScript interop.</li>
</ul>
<h2>v1.7.0</h2>
<ul>
<li>
<p>Install flutter sdk in publishing step, allowing Flutter packages to
be
published (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/68">#68</a>[])</p>
<p><a
href="https://redirect.github.com/dart-lang/setup-dart/issues/68">#68</a>:
<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/68">dart-lang/setup-dart#68</a></p>
</li>
</ul>
<h2>v1.6.5</h2>
<ul>
<li>Fix zip path handling on Windows 11 (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/118">#118</a>[])</li>
</ul>
<p><a
href="https://redirect.github.com/dart-lang/setup-dart/issues/118">#118</a>:
<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/118">dart-lang/setup-dart#118</a></p>
<h2>v1.6.4</h2>
<ul>
<li>Rebuild JS code.</li>
</ul>
<h2>v1.6.3</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/6afc89df92d6eb3834022f73cd65adc8cdfcb92d"><code>6afc89d</code></a>
Pin actions/checkout to a commit SHA and harden workflow permissions (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/196">#196</a>)</li>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/b653b3cfefb8a28264680eac1d50028789184290"><code>b653b3c</code></a>
Prepare v1.8.1 release (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/195">#195</a>)</li>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/45165d2ee1360cec3b96db808cfed1ac276dd71a"><code>45165d2</code></a>
Bump the github-actions group across 1 directory with 2 updates (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/194">#194</a>)</li>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/9af6bba6fc903c8d3427e54f6bef88b1cb519a77"><code>9af6bba</code></a>
Pin actions/checkout to a commit SHA in publish.yml (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/193">#193</a>)</li>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/ddca5d2081d05961010a263feb54fba5a01e4fb8"><code>ddca5d2</code></a>
Bump <code>@​vercel/ncc</code> in the npm-dependencies group across 1
directory (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/185">#185</a>)</li>
<li><a
href="https://github.com/dart-lang/setup-dart/commit/5c116a34f6a4c3b222192b56c5440d03fc813d96"><code>5c116a3</code></a>
Bump undici from 6.27.0 to 6.28.0 (<a
href="https://redirect.github.com/dart-lang/setup-dart/issues/190">#190</a>)</li>
<li>See full diff in <a
href="https://github.com/dart-lang/setup-dart/compare/7654d458321ee25acccccfdb86cd48bd95768ff1...6afc89df92d6eb3834022f73cd65adc8cdfcb92d">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…elease mode (#13796)

_Description of what this PR is changing or adding, and why:_
Adds breaking change docs for restricting setting engine configuration
flags on the command line when running a Flutter Android app in release
mode with a prebuilt binary, i.e. `flutter run --release
--use-application-binary`.

_Issues fixed by this PR (if any):_
Part of flutter/flutter#190461

_PRs or commits this PR depends on (if any):_
flutter/flutter#190870

## Presubmit checklist

- [ ] If you are unwilling, or unable, to sign the CLA, even for a
_tiny_, one-word PR, please file an issue instead of a PR.
- [ ] If this PR is not meant to land until a future stable release,
mark it as draft with an explanation.
- [ ] This PR follows the [Google Developer Documentation Style
Guidelines](https://developers.google.com/style)—for example, it doesn't
use _i.e._ or _e.g._, and it avoids _I_ and _we_ (first-person
pronouns).
- [ ] This PR uses [semantic line
breaks](https://github.com/dart-lang/site-shared/blob/main/doc/writing-for-dart-and-flutter-websites.md#semantic-line-breaks)
  of 80 characters or fewer.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

How to remove Cocoapods after SPM upgrade?