chore(deps): bump the flutter-dependencies group across 1 directory with 15 updates

[dependabot]

Bumps the flutter-dependencies group with 13 updates in the / directory:

Package	From	To
connectivity_plus	7.1.1	7.3.1
emoji_picker_flutter	4.4.0	4.5.3
flutter_native_splash	2.4.7	2.4.8
flutter_riverpod	3.3.1	3.4.2
flutter_secure_storage	10.2.0	10.3.1
flutter_secure_storage_platform_interface	2.0.1	2.0.2
go_router	17.2.3	17.3.0
image_picker	1.2.2	1.2.3
mobile_scanner	7.2.0	7.4.0
path_provider	2.1.5	2.1.6
video_player	2.11.1	2.13.0
widgetbook	3.23.0	3.25.0
widgetbook_generator	3.23.0	3.24.0

Updates connectivity_plus from 7.1.1 to 7.3.1

Commits

• 13e1704 chore(release): prepare for release (#3939)
• eedc414 ci(connectivity_plus): fix macOS/iOS example build with Swift Package Manager...
• bab4cd3 fix(connectivity_plus): prevent Linux client leaks (#3929)
• 9336187 chore(release): prepare for release (#3928)
• a020759 docs(connectivity_plus): Update min iOS and MacOS in README (#3926)
• bf04cdf fix(connectivity_plus): guard eventSink after engine teardown (iOS) (#3797)
• 4c623ae feat(connectivity_plus): add hasConnectivity() utility extension (#3842)
• b3bb72e fix(connectivity_plus): raise Apple platform minimums in SPM manifests to mat...
• c876d41 fix(connectivity_plus): use Windows list manager events (#3829)
• 3e150ba fix(connectivity_plus): improve network callback unregistration handling (#3681)
• Additional commits viewable in compare view

Updates emoji_picker_flutter from 4.4.0 to 4.5.3

Release notes

Sourced from emoji_picker_flutter's releases.

v4.5.3

What's Changed

• Fix memory leaks, race conditions, and regex recompilation by @​Fintasys in Fintasys/emoji_picker_flutter#258
• Bump minimum Flutter version to 3.41.8 by @​Fintasys in Fintasys/emoji_picker_flutter#266
• Clip overflow in DefaultEmojiPickerView Column (#256) by @​Fintasys in Fintasys/emoji_picker_flutter#259
• Persist and re-apply a chosen skin tone in the grid, recents and search by @​Fintasys in Fintasys/emoji_picker_flutter#263
• Add overflow-clip regression test for DefaultEmojiPickerView (#256) by @​Fintasys in Fintasys/emoji_picker_flutter#267
• Fix recent-emoji list leaking into UI on unrelated parent rebuild by @​Fintasys in Fintasys/emoji_picker_flutter#269
• Cache supported and recent emojis to speed up EmojiPicker rebuilds by @​Fintasys in Fintasys/emoji_picker_flutter#268

Full Changelog: Fintasys/emoji_picker_flutter@v4.4.0...v4.5.3

Changelog

Sourced from emoji_picker_flutter's changelog.

4.5.3

• Fix Android build failure (Could not find method kotlin()) on AGP 9 when android.builtInKotlin=false, the default written by Flutter's AGP 9 migrator. The Kotlin Gradle Plugin (KGP) is now applied whenever Built-in Kotlin is disabled, not just on AGP versions prior to 9 (#270)
• Minor lint fixes

4.5.2

• Fix README

4.5.1

• Fix README

4.5.0

• Bump minimum Flutter version to 3.41.8 (Dart 3.11.5)
• Fix recent-emoji list changing on an unrelated parent rebuild; updates with refresh: false no longer mutate the displayed list until the next explicit refresh (#238)
• Cache platform-supported and recent emojis so a rebuilt EmojiPicker skips redundant native getSupportedEmojis calls and SharedPreferences reads. Support is cached per glyph, so results stay correct across locale switches and custom emoji sets; the public EmojiPickerUtils API is unchanged. (based on #252)
• Fix memory leaks, race conditions, and regex recompilation
• Clip picker overflow so it renders cleanly when constrained to a smaller height (#256)
• Add rememberSkinTone to SkinToneConfig to persist the last selected skin tone and re-apply it as the default in the grid, recents and search
• Fix applySkinTone producing invalid double-modifier sequences when applied to an already toned glyph (existing tone is now stripped first)
• Skin tone long-press picker now always applies the new tone to the base glyph
• Migrate Android plugin to Flutter's Built-in Kotlin. The Kotlin Gradle Plugin (KGP) is now only applied on Android Gradle Plugin (AGP) versions prior to 9, preventing future build failures when Flutter removes its KGP compatibility shim while remaining backward compatible with older Flutter/AGP versions (#260)

Commits

• 0b766b1 Update CHANGELOG.md
• 4d6aebf Version 4.5.3
• 70c8840 Version 4.5.2
• 98c208a Version 4.5.1
• f557bf0 Version 4.5.0
• e2827e7 Bump flutter_lints to ^6.0.0
• 44241f2 Regenerate lockfiles and plugin registrants from iOS/Android build
• 2f60587 Drop redundant custom-font screenshot entry
• 6e97aba Remove unused default emoji screenshot
• 3085c08 Update screenshots: default appearance now renders all emoji
• Additional commits viewable in compare view

Updates flutter_native_splash from 2.4.7 to 2.4.8

Release notes

Sourced from flutter_native_splash's releases.

v2.4.8

[2.4.8] - (2026-May-29)

• Introduce android_min_sdk parameter. Thanks Nico for [PR #820](jonbhanson/flutter_native_splash#820).
• Remove unnecessary native code. Thanks Nico for [PR #828](jonbhanson/flutter_native_splash#828).
• Fix remove command always showing help instead of executing. Thanks ersanKolay for [PR #823](jonbhanson/flutter_native_splash#823). Fixes #822, #804, #786.
• Updated dependencies.

Changelog

Sourced from flutter_native_splash's changelog.

[2.4.8] - (2026-May-29)

• Introduce android_min_sdk parameter. Thanks Nico for [PR #820](jonbhanson/flutter_native_splash#820).
• Remove unnecessary native code. Thanks Nico for [PR #828](jonbhanson/flutter_native_splash#828).
• Fix remove command always showing help instead of executing. Thanks ersanKolay for [PR #823](jonbhanson/flutter_native_splash#823). Fixes #822, #804, #786.
• Updated dependencies.

Commits

• 3de495d Introduce android_min_sdk parameter. Thanks Nico for PR #820. Remove unnecess...
• fd38fae Introduce min Android SDK parameter (#820)
• fb3dc86 Remove unnecessary native code (#828)
• 3e1619e Update dependencies (#829)
• e1b94e3 chore: minor housekeeping - format, ci update, more tests (#824)
• 5f338b0 fix: remove command always showing help instead of executing (#823)
• See full diff in compare view

Updates flutter_riverpod from 3.3.1 to 3.4.2

Commits

• b79c65c riverpod : 3.4.1 -> 3.4.2
• 0553489 Fix markNeedsBuild issue (#4837)
• 049a6c2 riverpod_analyzer_utils : 1.0.0-dev.10 -> 1.0.0-dev.11
• 9d7487a Move nvmrc
• 8d55c5e Set node version
• c9ceff5 Format
• a226c78 The following packages have been updated:
• 123d8a8 The following packages have been updated:
• a00b597 Changelogs
• 39616e7 Mention devtool
• Additional commits viewable in compare view

Updates flutter_secure_storage from 10.2.0 to 10.3.1

Release notes

Sourced from flutter_secure_storage's releases.

v10.3.1

Android

• Fixed AEADBadTagException when biometric authentication is cancelled on first launch: a stale IV is now cleared and the cipher re-initialised in encrypt mode so the next authentication attempt succeeds.
• Fixed NullPointerException when retrying an operation after a cancelled biometric prompt: preferences is now only assigned once cipher initialisation completes successfully, allowing a clean retry.

v10.3.0

Android

• Added AndroidBiometricType enum and biometricType option to AndroidOptions to control which authentication methods are accepted during biometric prompts (requires KeyCipherAlgorithm.AES_GCM_NoPadding).
  • AndroidBiometricType.biometricOrDeviceCredential (default) accepts Class 3 biometrics or device credentials (PIN/pattern/password), preserving previous behaviour.
  • AndroidBiometricType.strongBiometricOnly restricts authentication to Class 3 (strong) biometrics only; device credentials are explicitly rejected.
• Fully enforced on Android 11+ (API 30+) via setAllowedAuthenticators on BiometricPrompt and setUserAuthenticationParameters on the KeyStore key. On earlier API levels the system may still permit device credentials.
• Added biometricPromptNegativeButton option to AndroidOptions to customise the dismiss button label on the biometric prompt. Required when using strongBiometricOnly or on Android 10 and lower.

iOS / macOS

• Fixed secStoreAvailabilitySink not being called when protected data availability changes.
• Fixed kSecUseDataProtectionKeychain being added to Keychain queries unconditionally; it is now only set when useDataProtectionKeychain is explicitly enabled.

Windows

• Fixed deleteAll and containsKey not acquiring the mutex lock, which could cause data races under concurrent access. If you are on Dart >=3.10.0, this fix is applied automatically. Otherwise, pin flutter_secure_storage_windows: ^4.2.2 in your pubspec.yaml to opt in and make sure your constraint is set for minimum of Dart >=3.10.0.

Linux

• Fixed deleteKeyring storing the string "null" instead of an empty JSON object {}.
• Fixed non-UTF-8 error messages from libsecret causing a FormatException on the Dart side; messages are now sanitised before being sent through the method channel.
• Fixed locked or unavailable keyring now surfacing as a catchable PlatformException with code KeyringLocked.
• Fixed JSON parse errors and other C++ exceptions now surfacing as a PlatformException with code StorageError instead of sending malformed bytes through the channel.

Commits

• 3fc4c53 fix: revert updated darwin package for backwards compatibility
• 6b9e8f4 fix: added changelog entries
• 0b9ed95 Merge pull request #1148 from CORDEA/fix/defer-preferences-until-cipher-initi...
• c557a53 Merge pull request #1147 from CORDEA/fix/reset-stale-cipher-iv-on-biometric-f...
• be0674a Use a single SharedPreferences.Editor when resetting stale IV
• 5817b55 Reset stale cipher IV when biometric auth fails before completion
• 635013b Defer setting preferences until storageCipher is initialized
• 35da5ae fix: badge
• a86a1ef release of v10.3.0
• 9d09d99 release of v0.3.2
• Additional commits viewable in compare view

Updates flutter_secure_storage_platform_interface from 2.0.1 to 2.0.2

Commits

• See full diff in compare view

Updates go_router from 17.2.3 to 17.3.0

Commits

• 40733eb [go_router] Batch release (#11813)
• 6246800 [vector_graphics_compiler] Support xml 7 (#11804)
• 0bceb64 Migrated video_player_android to Built-in Kotlin (#11798)
• e930ced [vector_graphics_compiler]: Fix Stack Overflow and CPU/Memory DoS on SVGs wit...
• 10cbdc5 [in_app_purchase_android] Update Play Billing library to 8.0.0 (#10816)
• b74a269 [google_maps_flutter] Federate READMEs (#11790)
• c19a48d [google_maps_flutter] Remove duplicated privacy manifest entries (#11791)
• db270b4 [go_router] Allow users to specify onExit as optional (#11150)
• 6da2737 [google_maps_flutter] Add Android and iOS attribution ID (#11731)
• 874b823 [dependabot]: Bump org.json:json from 20251224 to 20260522 in /packages/in_ap...
• Additional commits viewable in compare view

Updates hooks_riverpod from 3.3.1 to 3.4.2

Commits

• b79c65c riverpod : 3.4.1 -> 3.4.2
• 0553489 Fix markNeedsBuild issue (#4837)
• 049a6c2 riverpod_analyzer_utils : 1.0.0-dev.10 -> 1.0.0-dev.11
• 9d7487a Move nvmrc
• 8d55c5e Set node version
• c9ceff5 Format
• a226c78 The following packages have been updated:
• 123d8a8 The following packages have been updated:
• a00b597 Changelogs
• 39616e7 Mention devtool
• Additional commits viewable in compare view

Updates image_picker from 1.2.2 to 1.2.3

Commits

• 2900bc9 [image_picker] Handle limit: 1 in pickMultiImage and pickMultipleMedia gracef...
• bd297cf [AGP 9] Migrate Remaining Plugin Example Apps to Built-in Kotlin (#11806)
• c869a5d Sync analysis_options.yaml with flutter/flutter (#11823)
• 24a3833 Updated analysis_options line width from flutter/flutter (#11692)
• a89dc58 [dependabot]: Bump the androidx group across 10 directories with 1 update (#1...
• 6441245 [AGP 9] Migrate plugins to support AGP 9 (#11802)
• 1dfbada [ci] Update repo for 3.44 stable release (#11741)
• 0ffbde8 Roll Flutter from 707dbc0420a3 to 23f6f5853f50 (149 revisions) (#11700)
• 5f14a80 [image_picker] Switch to Kotlin Pigeon (#11504)
• See full diff in compare view

Updates mobile_scanner from 7.2.0 to 7.4.0

Release notes

Sourced from mobile_scanner's releases.

v7.4.0

7.4.0 (2026-07-19)

New features

• Added getBestCloseRangeScanningLens() to determine which camera lens is best suited for scanning barcodes at close range (e.g. the ultra-wide/macro lens on newer iPhones). Returns null if no camera is available for the requested facing direction.

Improvements

• Added an optional facing filter to getSupportedLenses, to restrict results to front or back cameras.

Bug Fixes

• [Android] Fixed getSupportedLenses reporting physical sub-cameras that CameraX can't actually select, which caused a crash when switching to one.
• [Android] Starting the scanner with an unavailable lensType now reports an error instead of silently falling back to the default camera.

v7.3.1

7.3.1

Bug Fixes

• Bumped the minimum required version of the web package to 1.0.0.

v7.3.0

New features

• [Web] Added support for multiple barcode detection backends, selectable via MobileScannerPlatform.instance.setWebBarcodeReader(WebBarcodeReader reader):
  • WebBarcodeReader.auto (default), uses the native BarcodeDetector API when available, and falls back to zxing-wasm otherwise.
  • WebBarcodeReader.barcodeDetector, uses the W3C Shape Detection API (Chrome 83+, Edge 83+, Safari 17+). No external library is loaded.
  • WebBarcodeReader.zxingWasm, uses zxing-wasm (ZXing C++ compiled to WebAssembly), which works in all modern browsers including Firefox.
  • WebBarcodeReader.zxingJs, the legacy ZXing JavaScript backend, retained for backward compatibility.
• [Web] Added MobileScannerPlatform.instance.activeWebReader to query which backend is currently active.
• Added BarcodeFormat.maxiCode and BarcodeFormat.microQrCode, supported by the WebBarcodeReader.zxingJs and WebBarcodeReader.zxingWasm backends.
• Added BarcodeFormat.dataBar, BarcodeFormat.dataBarExpanded and BarcodeFormat.dataBarLimited (GS1 DataBar / RSS-14), supported by the WebBarcodeReader.zxingJs and WebBarcodeReader.zxingWasm backends (DataBar and DataBar Expanded only for zxingJs), and by Apple Vision on iOS 15+ / macOS 12+.

Improvements

• [Web] Bumped @zxing/library (the WebBarcodeReader.zxingJs backend) from 0.21.3 to 0.23.0.

Bug Fixes

• Fixed disposing a MobileScannerController also disposing the platform resources of a different controller. Disposing a controller that does not hold the active camera session no longer tears down the camera of the controller that does. (#1631)
• Fixed a subscription leak where a controller that was disposed without being stopped kept its internal event stream subscriptions alive.
• Fixed an issue when running the plugin using AGP 9.

v7.2.1

Improvements

• [Web] The preferred camera device ID is now persisted in localStorage and reused on the next start.
• [Web] Focus, exposure, and white-balance constraints are now applied automatically when supported by the browser (Image Capture API).

... (truncated)

Changelog

Sourced from mobile_scanner's changelog.

7.4.0

New features

• Added getBestCloseRangeScanningLens() to determine which camera lens is best suited for scanning barcodes at close range (e.g. the ultra-wide/macro lens on newer iPhones). Returns null if no camera is available for the requested facing direction.

Improvements

• Added an optional facing filter to getSupportedLenses, to restrict results to front or back cameras.

Bug Fixes

• [Android] Fixed getSupportedLenses reporting physical sub-cameras that CameraX can't actually select, which caused a crash when switching to one.
• [Android] Starting the scanner with an unavailable lensType now reports an error instead of silently falling back to the default camera.

7.3.1

Bug Fixes

• Bumped the minimum required version of the web package to 1.0.0.

7.3.0

New features

• [Web] Added support for multiple barcode detection backends, selectable via MobileScannerPlatform.instance.setWebBarcodeReader(WebBarcodeReader reader):
  • WebBarcodeReader.auto (default), uses the native BarcodeDetector API when available, and falls back to zxing-wasm otherwise.
  • WebBarcodeReader.barcodeDetector, uses the W3C Shape Detection API (Chrome 83+, Edge 83+, Safari 17+). No external library is loaded.
  • WebBarcodeReader.zxingWasm, uses zxing-wasm (ZXing C++ compiled to WebAssembly), which works in all modern browsers including Firefox.
  • WebBarcodeReader.zxingJs, the legacy ZXing JavaScript backend, retained for backward compatibility.
• [Web] Added MobileScannerPlatform.instance.activeWebReader to query which backend is currently active.
• Added BarcodeFormat.maxiCode and BarcodeFormat.microQrCode, supported by the WebBarcodeReader.zxingJs and WebBarcodeReader.zxingWasm backends.
• Added BarcodeFormat.dataBar, BarcodeFormat.dataBarExpanded and BarcodeFormat.dataBarLimited (GS1 DataBar / RSS-14), supported by the WebBarcodeReader.zxingJs and WebBarcodeReader.zxingWasm backends (DataBar and DataBar Expanded only for zxingJs), and by Apple Vision on iOS 15+ / macOS 12+.

Improvements

• [Web] Bumped @zxing/library (the WebBarcodeReader.zxingJs backend) from 0.21.3 to 0.23.0.

Bug Fixes

• Fixed disposing a MobileScannerController also disposing the platform resources of a different controller. Disposing a controller that does not hold the active camera session no longer tears down the camera of the controller that does. (#1631)
• Fixed a subscription leak where a controller that was disposed without being stopped kept its internal event stream subscriptions alive.
• Fixed an issue when running the plugin using AGP 9.

7.2.1

Improvements

• [Web] The preferred camera device ID is now persisted in localStorage and reused on the next start.
• [Web] Focus, exposure, and white-balance constraints are now applied automatically when supported by the browser (Image Capture API).

... (truncated)

Commits

• 19587b3 ci: add dart-lang/setup-dart step to fix pub.dev OIDC publishing
• d2ab64b ci: use fine-grained PAT for release-please-action
• 22af90e chore: merge master into develop to resolve promotion conflicts
• 01ece66 Merge pull request #1754 from juliansteenbakker/release-please--branches--dev...
• 1f56df8 docs: rewrite 7.4.0 changelog entry in house style
• adae410 chore(develop): release 7.4.0
• 799c639 Merge pull request #1755 from juliansteenbakker/rename/best-close-range-scann...
• c5f06b5 refactor: rename getBestQrScanningLens to getBestCloseRangeScanningLens
• 81e6954 docs: fix changelog entries misfiled under already-shipped 7.3.0
• 4cef959 Merge pull request #1742 from juliansteenbakker/feat/best-qr-scanning-lens
• Additional commits viewable in compare view

Updates path_provider from 2.1.5 to 2.1.6

Commits

• aa964a3 [path_provider] Document null vs UnsupportedError return semantics (#11793)
• bd297cf [AGP 9] Migrate Remaining Plugin Example Apps to Built-in Kotlin (#11806)
• 2e006b2 [path_provider] Create temp dir in tests if needed (#11841)
• 24a3833 Updated analysis_options line width from flutter/flutter (#11692)
• 1dfbada [ci] Update repo for 3.44 stable release (#11741)
• 0ffbde8 Roll Flutter from 707dbc0420a3 to 23f6f5853f50 (149 revisions) (#11700)
• f52df41 [path_provider] Remove dependency on engine PathUtils (#11467)
• e37fa8f [various] Convert remaining Groovy files to Kotlin (#11443)
• 0e0a032 [various] Ignore generated plugin files (#11455)
• c7d680f [path_provider_android] Changes internal implementation to use JNI (#9770)
• Additional commits viewable in compare view

Updates video_player from 2.11.1 to 2.13.0

Commits

• e8903cb [video_player] Implement screen auto-lock control for video playback (#11225)
• 523ad9e [video_player] Improve seek performance on Android (#11810)
• 16a275b [video_player_avfoundation] Implement preventsDisplaySleepDuringVideoPlayback...
• 20928d5 [video_player_android] Implement backBufferDurationMs in ExoPlayer (#12124)
• fc00ceb [video_player_platform_interface] Improve seek performance on Android (#11932)
• 274ed3e [video_player_android] Add video track selection support (#11475)
• b290ae0 [video_player_platform_interface] Add preventsDisplaySleepDuringVideoPlayback...
• 06ed8de [video_player_avfoundation] Add video track selection support (#11476)
• 7ff3e1f [video_player_android] Fix rendering freeze after full-screen transit… (#11416)
• 4fd05e6 [video_player_web] Remove stale package:web tweaks (#11820)
• Additional commits viewable in compare view

Updates video_player_platform_interface from 6.7.0 to 6.9.0

Commits

• fc00ceb [video_player_platform_interface] Improve seek performance on Android (#11932)
• 274ed3e [video_player_android] Add video track selection support (#11475)
• b290ae0 [video_player_platform_interface] Add preventsDisplaySleepDuringVideoPlayback...
• 06ed8de [video_player_avfoundation] Add video track selection support (#11476)
• 7ff3e1f [video_player_android] Fix rendering freeze after full-screen transit… (#11416)
• 4fd05e6 [video_player_web] Remove stale package:web tweaks (#11820)
• bd297cf [AGP 9] Migrate Remaining Plugin Example Apps to Built-in Kotlin (#11806)
• 24a3833 Updated analysis_options line width from flutter/flutter (#11692)
• 0bceb64 Migrated video_player_android to Built-in Kotlin (#11798)
• 1dfbada [ci] Update repo for 3.44 stable release (#11741)
• Additional commits viewable in compare view

Updates widgetbook from 3.23.0 to 3.25.0

Commits

• 66c1eb2 chore(widgetbook): release v3.25.0 (#1949)
• ff18db4 feat: improve DurationKnob (#1915)
• 8588916 chore(widgetbook): release v3.24.0 (#1926)
• 92c72e1 chore(generator): release v3.24.0 (#1927)
• 97bbfef chore(cli): release v3.15.0 (#1928)
• 7e5a40b chore(cli): bump xml to 7.x (#1925)
• 54615c0 refactor(generator,cli): allow analyzer 13.x (#1923)
• 79ddc93 chore(deps): bump flutter to 3.44 (#1924)
• See full diff in compare view

Updates widgetbook_generator from 3.23.0 to 3.24.0

Commits

• 92c72e1 chore(generator): release v3.24.0 (#1927)
• 97bbfef chore(cli): release v3.15.0 (#1928)
• 7e5a40b chore(cli): bump xml to 7.x (#1925)
• 54615c0 refactor(generator,cli): allow analyzer 13.x (#1923)
• 79ddc93 chore(deps): bump flutter to 3.44 (#1924)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions