chore(deps): Bump the pub group in /sdk/flutter with 3 updates

[dependabot]

Bumps the pub group in /sdk/flutter with 3 updates: flutter_lints, flutter_secure_storage and flutter_web_auth_2.

Updates flutter_lints from 5.0.0 to 6.0.0

Commits

• 6eebe72 [flutter_lints] Bump lints dependency to 6.0.0 and bump package to 6.0.0 (#9108)
• 0093e2e [video_player_android] Add note about Android platform views known issue (#9312)
• 62f38a1 [camera_android_camerax] Implement enableAudio for video recording (#9264)
• 9c11e9b [video_player_android] isBuffering flag always return true after calling seek...
• 6efa04b [camera,video_player] replace onSurfaceDestroyed with onSurfaceCleanup (#9316)
• c33fa39 [camera,video_player] Update Android to 3.29 minimum (#9317)
• 5a7d40f Update repo for 3.32 stable (#9311)
• 2a847d7 [camera_avfoundation] Correct pigeon configuration output paths (#9313)
• d692e43 [process] Remove from the repository (#9310)
• fe5dd86 Ensure Example Packages Work on Android API 36 (#9241)
• Additional commits viewable in compare view

Updates flutter_secure_storage from 9.2.4 to 10.3.1

Release notes

Sourced from flutter_secure_storage's releases.

v10.3.1

Android

• Fixed AEADBadTagException when biometric authentication is cancelled on first launch: a stale IV is now cleared and the cipher re-initialised in encrypt mode so the next authentication attempt succeeds.
• Fixed NullPointerException when retrying an operation after a cancelled biometric prompt: preferences is now only assigned once cipher initialisation completes successfully, allowing a clean retry.

v10.3.0

Android

• Added AndroidBiometricType enum and biometricType option to AndroidOptions to control which authentication methods are accepted during biometric prompts (requires KeyCipherAlgorithm.AES_GCM_NoPadding).
  • AndroidBiometricType.biometricOrDeviceCredential (default) accepts Class 3 biometrics or device credentials (PIN/pattern/password), preserving previous behaviour.
  • AndroidBiometricType.strongBiometricOnly restricts authentication to Class 3 (strong) biometrics only; device credentials are explicitly rejected.
• Fully enforced on Android 11+ (API 30+) via setAllowedAuthenticators on BiometricPrompt and setUserAuthenticationParameters on the KeyStore key. On earlier API levels the system may still permit device credentials.
• Added biometricPromptNegativeButton option to AndroidOptions to customise the dismiss button label on the biometric prompt. Required when using strongBiometricOnly or on Android 10 and lower.

iOS / macOS

• Fixed secStoreAvailabilitySink not being called when protected data availability changes.
• Fixed kSecUseDataProtectionKeychain being added to Keychain queries unconditionally; it is now only set when useDataProtectionKeychain is explicitly enabled.

Windows

• Fixed deleteAll and containsKey not acquiring the mutex lock, which could cause data races under concurrent access. If you are on Dart >=3.10.0, this fix is applied automatically. Otherwise, pin flutter_secure_storage_windows: ^4.2.2 in your pubspec.yaml to opt in and make sure your constraint is set for minimum of Dart >=3.10.0.

Linux

• Fixed deleteKeyring storing the string "null" instead of an empty JSON object {}.
• Fixed non-UTF-8 error messages from libsecret causing a FormatException on the Dart side; messages are now sanitised before being sent through the method channel.
• Fixed locked or unavailable keyring now surfacing as a catchable PlatformException with code KeyringLocked.
• Fixed JSON parse errors and other C++ exceptions now surfacing as a PlatformException with code StorageError instead of sending malformed bytes through the channel.

v10.2.0

Android

• Deprecated KeyCipherAlgorithm.RSA_ECB_PKCS1Padding. Existing data is automatically migrated to the default RSA_ECB_OAEPwithSHA_256andMGF1Padding when migrateOnAlgorithmChange is true.
• Deprecated StorageCipherAlgorithm.AES_CBC_PKCS7Padding. Existing data is automatically migrated to the default AES_GCM_NoPadding when migrateOnAlgorithmChange is true.
• Fixed Gradle space-assignment warnings in build.gradle.

iOS / macOS

• Fixed iOS build by updating availability annotation for Secure Enclave methods from iOS 11.3 to iOS 13.0.

Windows

• Fixed compatibility with win32 6.0.0 in flutter_secure_storage_windows 4.2.0. If you are on Dart >=3.10.0, this fix is applied automatically. Otherwise, pin flutter_secure_storage_windows: ^4.2.0 in your pubspec.yaml to opt in and make sure your constraint is set for minimum of Dart >=3.10.0.

v10.1.0

Android

• Added storageNamespace option to AndroidOptions for full namespace isolation across storage instances (SharedPreferences, KeyStore aliases, config/key storage). Use this instead of sharedPreferencesName when running multiple FlutterSecureStorage instances with different cipher configurations.
• Deprecated sharedPreferencesName in favor of storageNamespace, which provides complete isolation rather than data-only isolation.
• Added migrateWithBackup option to AndroidOptions for crash-resistant migration. When enabled, backup copies of encrypted data are created before migration starts, allowing recovery if migration fails or the app crashes mid-migration. Works in conjunction with migrateOnAlgorithmChange.
• Made KeyCipherAlgorithm and StorageCipherAlgorithm public enums.

Fixes:

• Fixed crash on biometric failure (not error).
• Fixed null safety issue in MethodRunner that could cause a crash on Android.

... (truncated)

Commits

• 3fc4c53 fix: revert updated darwin package for backwards compatibility
• 6b9e8f4 fix: added changelog entries
• 0b9ed95 Merge pull request #1148 from CORDEA/fix/defer-preferences-until-cipher-initi...
• c557a53 Merge pull request #1147 from CORDEA/fix/reset-stale-cipher-iv-on-biometric-f...
• be0674a Use a single SharedPreferences.Editor when resetting stale IV
• 5817b55 Reset stale cipher IV when biometric auth fails before completion
• 635013b Defer setting preferences until storageCipher is initialized
• 35da5ae fix: badge
• a86a1ef release of v10.3.0
• 9d09d99 release of v0.3.2
• Additional commits viewable in compare view

Updates flutter_web_auth_2 from 4.1.0 to 5.0.3

Release notes

Sourced from flutter_web_auth_2's releases.

5.0.3: Bump desktop_webview_window

5.0.3

• 🌹 Bump desktop_webview_window to 0.3.0

5.0.2: Android and Web fix

5.0.2

• 🐛 Fix possible NPE on Android (Thanks to @​henry11996 in #196)
• 🌹 Dummy implementation for cleanUpDanglingCalls on web to prevent unneeded crashes

5.0.1: Android fixes

5.0.1

• 🐛 Fix crash on Android and implement proper feedback if no browser is installed (Thanks to @​Mino5531 in #190)

5.0.0: Stable!

5.0.0

No changes - just the official version release!

5.0.0-alpha.7: Ephemeral auth on Android

5.0.0-alpha.7

• 🌹 Update Android intricacies
• 🐛 Revert to CustomTabsIntent when needed (Thanks to @​StevenSorial in #181)

5.0.0-alpha.6: Ephemeral Android

5.0.0-alpha.6

• 🌹 Fix ephemeral web views on Android; re-introduces preferEphemeral on Android for more iOS/Android parity (Thanks to @​ApofisXII in #180, related to #169)

5.0.0-alpha.5: iOS error details

5.0.0-alpha.5

• 🌹 Include more error details on iOS (Thanks to @​PawlikMichal25 in #179, related to #178)

5.0.0-alpha.4: Maintenance

5.0.0-alpha.4

• 🌹 Update melos to regular 7.x releases
• 🌹 Update linter to 6.x
• 🌹 Fix a few Android warnings (Gradle 9.x complaints)

5.0.0-alpha.3: SwiftPM migration

5.0.0-alpha.3

• 💥 Migrate to Swift Package Manager - see here for more info (Thanks to @​lishaduck in #165)

5.0.0-alpha.2: Android improvements

... (truncated)

Commits

• e3a79ab Bump version and add changelog
• deffed2 Update desktop_webview_window to 0.3.0
• 017ddc5 Bump version and add changelog
• c290087 Dummy implementation for cleanUpDanglingCalls on web
• 32360a5 Add JNI to example plugins
• 1cace34 fix(android): handle null resultUri in handleAuthResult to prevent NullPointe...
• e6b65d2 Bump version and add changelog
• d17d284 Cleanup Android code
• d678848 Update example
• 5643ac6 [Android] Fix crash regression and no browser crash (#190)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, native-sdk. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[StringKe]

Superseded by #56 which batches dependency upgrades and related security fixes on current main.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml