What changed, and why it matters
This commit updates the Dart/Flutter programming framework and a few supporting library versions used to build the Skylight Wallet app. It is a routine dependency bump with no code changes and no explicit security fix mentioned by the project.
Treat as a routine maintenance update. Verify the new Flutter/Dart SDK and transitive package versions against upstream release notes for any security fixes, run the existing test suite, and perform a normal build before release. No immediate security response is indicated by this commit alone.
Security signals we found
Dependency version bump for Flutter/Dart SDK and transitive packages
No application code changes
No vendor security disclosure or advisory referenced
No CVE identifier present in commit or supplied references
Evidence from the diff
The patch bumps the Flutter SDK from 3.38.8 to 3.41.0, the Dart SDK from 3.10.8 to 3.11.0, and refreshes transitive package hashes in pubspec.lock for characters, matcher, material_color_utilities, and test_api. No application source code is modified. No CVE, advisory, or security note is provided in the commit or by the project.
Changed components
Dockerfile.builder (Flutter SDK version)pubspec.yaml (Dart SDK constraint)pubspec.lock (transitive package versions)Inspect captured patch +11 / −11
diff --git a/Dockerfile.builder b/Dockerfile.builder
index a813967..1c1b9aa 100644
--- a/Dockerfile.builder
+++ b/Dockerfile.builder
@@ -3,7 +3,7 @@ FROM debian:bullseye-20251117@sha256:ee239c601913c0d3962208299eef70dcffcb7aac178
ARG TARGETARCH
-ARG FLUTTER_VERSION=3.38.8
+ARG FLUTTER_VERSION=3.41.0
ARG RUST_VERSION=1.83.0
ARG ANDROID_CMDLINE_TOOLS_VERSION=11076708
ARG ANDROID_BUILD_TOOLS_VERSION=36.0.0
diff --git a/pubspec.lock b/pubspec.lock
index a4547c7..48dbc36 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -61,10 +61,10 @@ packages:
dependency: transitive
description:
name: characters
- sha256: f71061c654a3380576a52b451dd5532377954cf9dbd272a78fc8479606670803
+ sha256: faf38497bda5ead2a8c7615f4f7939df04333478bf32e4173fcb06d428b5716b
url: "https://pub.dev"
source: hosted
- version: "1.4.0"
+ version: "1.4.1"
checked_yaml:
dependency: transitive
description:
@@ -481,18 +481,18 @@ packages:
dependency: transitive
description:
name: matcher
- sha256: dc58c723c3c24bf8d3e2d3ad3f2f9d7bd9cf43ec6feaa64181775e60190153f2
+ sha256: "12956d0ad8390bbcc63ca2e1469c0619946ccb52809807067a7020d57e647aa6"
url: "https://pub.dev"
source: hosted
- version: "0.12.17"
+ version: "0.12.18"
material_color_utilities:
dependency: transitive
description:
name: material_color_utilities
- sha256: f7142bb1154231d7ea5f96bc7bde4bda2a0945d2806bb11670e30b850d56bdec
+ sha256: "9c337007e82b1889149c82ed242ed1cb24a66044e30979c44912381e9be4c48b"
url: "https://pub.dev"
source: hosted
- version: "0.11.1"
+ version: "0.13.0"
meta:
dependency: transitive
description:
@@ -935,10 +935,10 @@ packages:
dependency: transitive
description:
name: test_api
- sha256: ab2726c1a94d3176a45960b6234466ec367179b87dd74f1611adb1f3b5fb9d55
+ sha256: "19a78f63e83d3a61f00826d09bc2f60e191bf3504183c001262be6ac75589fb8"
url: "https://pub.dev"
source: hosted
- version: "0.7.7"
+ version: "0.7.8"
timeago:
dependency: "direct main"
description:
@@ -1141,5 +1141,5 @@ packages:
source: hosted
version: "3.1.3"
sdks:
- dart: "3.10.8"
+ dart: "3.11.0"
flutter: ">=3.35.0"
diff --git a/pubspec.yaml b/pubspec.yaml
index 881b9bb..23113bd 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -19,7 +19,7 @@ publish_to: "none" # Remove this line if you wish to publish to pub.dev
version: 1.0.7+12
environment:
- sdk: 3.10.8
+ sdk: 3.11.0
flutter_launcher_icons:
android: true
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.