fix: Add dart-lang/setup-dart for OIDC pub.dev publishing

[rmi22186]

Background

• The Release – Publish workflow fails at the flutter pub publish step because the OIDC token exchange with pub.dev is not being handled automatically. The workflow prompts for interactive Google OAuth instead of using the GitHub Actions OIDC token.

What Has Changed

• Added dart-lang/setup-dart action before Flutter setup — this action configures the OIDC token exchange with pub.dev when id-token: write permission is present
• Added explicit permissions: id-token: write on the release job level to ensure the OIDC token is available
• Kept flutter pub publish --force (required for Flutter SDK packages)

Screenshots/Video

• N/A

Checklist

• I have performed a self-review of my own code.
• I have made corresponding changes to the documentation.
• I have added tests that prove my fix is effective or that my feature works.
• I have tested this locally.

Additional Notes

• The pub.dev trusted publisher is already configured for mParticle/mparticle-flutter-sdk with tag pattern v{{version}}
• This needs to be merged and the v1.1.2 tag re-pushed to test the full flow

Reference Issue (For employees only. Ignore if you are an outside contributor)

• N/A

[cursor]

PR Summary

Medium Risk
Changes the tag-triggered release workflow’s permissions and toolchain setup, which can affect publishing/release automation if misconfigured, but does not touch application/runtime code.

Overview
Updates the Release – Publish GitHub Actions workflow to grant the release job explicit contents: write and id-token: write permissions and to install the Dart SDK via dart-lang/setup-dart before Flutter setup.

This adjusts the release pipeline’s authentication/toolchain preparation for the flutter pub publish step (intended to support OIDC-based publishing).

^{Written by Cursor Bugbot for commit ae0ce6b. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

[nickolas-dimitrakas]

Go for it