[dependabot]

Bumps the example group in /example with 5 updates:

Package	From	To
cupertino_icons	1.0.9	2.0.0
file_picker	12.3.0	13.1.0
file_saver	0.4.0	0.7.0
flutter_chat_ui	2.11.1	2.12.0
open_filex	4.7.0	5.0.0

Updates cupertino_icons from 1.0.9 to 2.0.0

Commits

• 3c6ce59 [cupertino_icons] Migrate to cupertino_ui (#12649)
• 000643a Enable Built-in Kotlin in all Flutter Android Plugin Example Apps (#12883)
• d8933fd Plugin example apps to 9.3.1 (#13019)
• a207941 [ci] Update repo for 3.47 stable release (#12959)
• 18fe786 [path_parsing] Fix deprecation lints (#12704)
• ad9840e Update All Flutter Android Example Apps to 3.47 Template Versions (#12195)
• 522f0ca [various] Remove moved packages (#11850)
• bd297cf [AGP 9] Migrate Remaining Plugin Example Apps to Built-in Kotlin (#11806)
• 24a3833 Updated analysis_options line width from flutter/flutter (#11692)
• 1dfbada [ci] Update repo for 3.44 stable release (#11741)
• Additional commits viewable in compare view

Updates file_picker from 12.3.0 to 13.1.0

Commits

• c44057c Bump file_picker version to 13.1.0
• ae3c145 migrate to UIScene on iOS
• aa08dd0 docs: prepare documentation, changelogs, and security policy for v13.0.0
• f19e5b0 Merge branch 'main' into fix/web-read-sequential-noop
• 12a8dbf Simplify runIndexedTasks per review
• 4d188fd Fix FilePickerWebOptions.readSequential having no effect
• bea56d9 Remove the withData native code paths, dead since file_picker 12.0.0
• 18ea28b Revert "Remove the withData native code paths, dead since file_picker 12.0.0"
• 36aaf0e Remove the withData native code paths, dead since file_picker 12.0.0
• e9963b3 Merge remote-tracking branch 'origin/main' into feat/scope-v13-length-nullabl...
• Additional commits viewable in compare view

Updates file_saver from 0.4.0 to 0.7.0

Release notes

Sourced from file_saver's releases.

v0.7.0

• Added saveAs on Linux. It uses GtkFileChooserNative, so sandboxed apps (Flatpak, Snap) get the XDG desktop portal and everything else gets the GTK dialog. initialDirectory and dialogTitle are supported, and the file is written with GIO's async API so large files never block the UI thread.
  • Fixes #157.
• The Linux plugin now uses the Pigeon-generated API like every other platform. tool/pigeon.sh also formats the generated Dart file, so regenerating no longer produces a formatting-only diff.
• Native errors no longer include raw exception text (CWE-209). Platform exception messages are now fixed strings per failure, and details carries only a non-sensitive identifier: the exception class name on Android (FileNotFoundException), "<domain> <code>" on iOS, macOS and Linux. Previously the message could contain file paths, content URIs, or a process's pid/uid, and Android also logged it. Error codes are unchanged. If you matched on PlatformException.message, match on code instead.
  • Fixes #159.
• Android: a missing WRITE_EXTERNAL_STORAGE grant on Android 9 and below now reports code PermissionDenied, and a non-media mime type passed to saveToGallery reports InvalidMimeType, instead of the generic gallery/Downloads error.
• saveAs on an unsupported platform throws UnsupportedError naming the platform, instead of UnimplementedError('Unimplemented Error').

v0.6.0

• Added saveToDownloads for writing into the shared Downloads folder without a dialog, with an optional subfolder. Android uses MediaStore (no permission on Android 10+); macOS, Windows and Linux write to the user's Downloads directory; web triggers a browser download; iOS throws UnsupportedError.
  • Fixes #108 and the "save into Download/<folder>" half of #47.
• Desktop saves now honour a sourcePath, so saveToDownloads(filePath:) copies without loading the file into memory.

v0.5.0

• Breaking: replaced the dio dependency with package:http.
  • dioClient is now httpClient (http.Client?) on saveFile, saveAs and saveLinkAsStream.
  • transformDioResponse is removed; responses are always bytes. Fetch and transform yourself, then pass bytes:.
  • LinkDetails.responseType is removed. LinkDetails.uri exposes the link with queryParameters merged.
  • HTTP 4xx/5xx responses now throw http.ClientException instead of writing the error body to disk.
  • Fixes #102.
• macOS: sandbox failures now say which entitlement is missing — com.apple.security.files.downloads.read-write when the Downloads write fails, com.apple.security.network.client when the download fails.
  • Fixes #143.
• Migrated Android to built-in Kotlin / AGP 9 compatibility. Requires Flutter 3.44+.
  • Fixes #145, #148.
• Added initialDirectory to saveAs, saveAsStream and saveLinkAsStream so the save dialog can open in a chosen folder (macOS, Windows, iOS, Android).
  • Fixes #134, #147.
• Added saveToGallery for saving images and videos to the photo library — MediaStore on Android, Photos on iOS — with an optional album.
  • Fixes #64.
• Added dialogTitle to saveAs, saveAsStream and saveLinkAsStream (macOS, Windows).
  • Fixes #146.
• Windows saveAs converts initialDirectory and dialogTitle from UTF-8 with MultiByteToWideChar.
• Breaking: Android saveFile now throws a PlatformException on failure instead of returning an error message as the path.
• Threading and streaming hardening across platforms:
  • Android: file copies run on a supervised IO scope and reply exactly once; saveAs survives rotation while the picker is open, fails cleanly when the Activity is destroyed or no app can show the picker, and rejects a second saveAs while one is open instead of silently dropping the first. Error details no longer carry a Throwable the channel codec cannot encode.
  • iOS: temp-file writes and copies run off the main thread, payloads are no longer copied into [UInt8], the picker is presented on the top-most controller, and a second saveAs while one is open is rejected.
  • macOS: copies stream in 1 MiB chunks off the main thread and failures throw instead of returning "Failed to save file" as the path.
  • Windows: the dialog is owned by the app window, uses heap buffers instead of a 1 MiB stack array and fixed MAX_PATH statics (a long file name aborted the process), builds the filter correctly, converts names and paths from UTF-8, and reports dialog errors instead of treating them as cancel.
  • Web: cancelling the File System Access picker resolves to null like other platforms; a failed stream is aborted without masking the original error.
  • saveAsStream deletes its temp file when the stream fails.
• Platform channels are now generated with Pigeon from pigeons/messages.dart (regenerate with tool/pigeon.sh), so argument mismatches fail at compile time. Windows saveAs returns the path as a UTF-8 string. macOS deployment target is now 10.15.
• Removed the unused FileUtils.kt and the duplicate macos/Classes sources — macOS builds from macos/file_saver/Sources for both CocoaPods and Swift Package Manager.
• Documented macOS entitlement file naming and Windows SDK requirements.

Changelog

Sourced from file_saver's changelog.

[0.7.0]

• Added saveAs on Linux. It uses GtkFileChooserNative, so sandboxed apps (Flatpak, Snap) get the XDG desktop portal and everything else gets the GTK dialog. initialDirectory and dialogTitle are supported, and the file is written with GIO's async API so large files never block the UI thread.
  • Fixes #157.
• The Linux plugin now uses the Pigeon-generated API like every other platform. tool/pigeon.sh also formats the generated Dart file, so regenerating no longer produces a formatting-only diff.
• Native errors no longer include raw exception text (CWE-209). Platform exception messages are now fixed strings per failure, and details carries only a non-sensitive identifier: the exception class name on Android (FileNotFoundException), "<domain> <code>" on iOS, macOS and Linux. Previously the message could contain file paths, content URIs, or a process's pid/uid, and Android also logged it. Error codes are unchanged. If you matched on PlatformException.message, match on code instead.
  • Fixes #159.
• Android: a missing WRITE_EXTERNAL_STORAGE grant on Android 9 and below now reports code PermissionDenied, and a non-media mime type passed to saveToGallery reports InvalidMimeType, instead of the generic gallery/Downloads error.
• saveAs on an unsupported platform throws UnsupportedError naming the platform, instead of UnimplementedError('Unimplemented Error').

[0.6.0]

• Added saveToDownloads for writing into the shared Downloads folder without a dialog, with an optional subfolder. Android uses MediaStore (no permission on Android 10+); macOS, Windows and Linux write to the user's Downloads directory; web triggers a browser download; iOS throws UnsupportedError.
  • Fixes #108 and the "save into Download/<folder>" half of #47.
• Desktop saves now honour a sourcePath, so saveToDownloads(filePath:) copies without loading the file into memory.

[0.5.0]

• Breaking: replaced the dio dependency with package:http.
  • dioClient is now httpClient (http.Client?) on saveFile, saveAs and saveLinkAsStream.
  • transformDioResponse is removed; responses are always bytes. Fetch and transform yourself, then pass bytes:.
  • LinkDetails.responseType is removed. LinkDetails.uri exposes the link with queryParameters merged.
  • HTTP 4xx/5xx responses now throw http.ClientException instead of writing the error body to disk.
  • Fixes #102.
• macOS: sandbox failures now say which entitlement is missing — com.apple.security.files.downloads.read-write when the Downloads write fails, com.apple.security.network.client when the download fails.
  • Fixes #143.
• Migrated Android to built-in Kotlin / AGP 9 compatibility. Requires Flutter 3.44+.
  • Fixes #145, #148.
• Added initialDirectory to saveAs, saveAsStream and saveLinkAsStream so the save dialog can open in a chosen folder (macOS, Windows, iOS, Android).
  • Fixes #134, #147.
• Added saveToGallery for saving images and videos to the photo library — MediaStore on Android, Photos on iOS — with an optional album.
  • Fixes #64.
• Added dialogTitle to saveAs, saveAsStream and saveLinkAsStream (macOS, Windows).
  • Fixes #146.
• Windows saveAs converts initialDirectory and dialogTitle from UTF-8 with MultiByteToWideChar.
• Breaking: Android saveFile now throws a PlatformException on failure instead of returning an error message as the path.
• Threading and streaming hardening across platforms:
  • Android: file copies run on a supervised IO scope and reply exactly once; saveAs survives rotation while the picker is open, fails cleanly when the Activity is destroyed or no app can show the picker, and rejects a second saveAs while one is open instead of silently dropping the first. Error details no longer carry a Throwable the channel codec cannot encode.
  • iOS: temp-file writes and copies run off the main thread, payloads are no longer copied into [UInt8], the picker is presented on the top-most controller, and a second saveAs while one is open is rejected.
  • macOS: copies stream in 1 MiB chunks off the main thread and failures throw instead of returning "Failed to save file" as the path.
  • Windows: the dialog is owned by the app window, uses heap buffers instead of a 1 MiB stack array and fixed MAX_PATH statics (a long file name aborted the process), builds the filter correctly, converts names and paths from UTF-8, and reports dialog errors instead of treating them as cancel.
  • Web: cancelling the File System Access picker resolves to null like other platforms; a failed stream is aborted without masking the original error.
  • saveAsStream deletes its temp file when the stream fails.
• Platform channels are now generated with Pigeon from pigeons/messages.dart (regenerate with tool/pigeon.sh), so argument mismatches fail at compile time. Windows saveAs returns the path as a UTF-8 string. macOS deployment target is now 10.15.
• Removed the unused FileUtils.kt and the duplicate macos/Classes sources — macOS builds from macos/file_saver/Sources for both CocoaPods and Swift Package Manager.
• Documented macOS entitlement file naming and Windows SDK requirements.

Commits

• 16c5d63 Stop sending raw exception text out of native code (CWE-209)
• 916c6aa Merge pull request #158 from incrediblezayed/fix/linux-save-as
• 4654ae4 Prepare 0.7.0
• 8eeb2f9 Route saveAs to the native API on Linux
• 61b9ffe Linux: implement saveAs with GtkFileChooserNative
• 13751d2 Generate the Pigeon API for Linux
• 7a322fa Merge pull request #156 from incrediblezayed/ci/remove-add-contributors
• 71fc1c5 ci: remove the add-contributors job
• 868fb5e Merge pull request #155 from incrediblezayed/ci/windows-consumer-app
• ca1ed1c ci: run the Windows consumer-app steps under bash
• Additional commits viewable in compare view

Updates flutter_chat_ui from 2.11.1 to 2.12.0

Commits

• See full diff in compare view

Updates open_filex from 4.7.0 to 5.0.0

Changelog

Sourced from open_filex's changelog.

5.0.0

• BREAKING Raise the minimum iOS deployment target from 8.0 to 13.0. Apps targeting an earlier iOS version must bump platform :ios, '13.0' in their Podfile and the iOS Deployment Target build setting before upgrading.
• Add Swift Package Manager support for iOS. The plugin now ships a Package.swift alongside the existing podspec, so both SPM and CocoaPods builds keep working (Thanks to Eli Geller, PR#28, and arahimli, PR#30)
• Migrate the example app's iOS runner to the UIScene lifecycle (FlutterSceneDelegate / FlutterImplicitEngineDelegate), required by Xcode 27 and the iOS 27 SDK. The example now requires Flutter 3.38 or later; the plugin itself is unaffected.
• Commit the example's iOS and macOS Podfiles so flutter build ios / flutter build macos work from a fresh clone (the auto-generated ones referenced a RunnerTests target that the example project does not define).

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions