From 11c752fe6508117d4d2db1c0744090221d5f6cb8 Mon Sep 17 00:00:00 2001 From: Krzysztof kuhy Rudnicki Date: Fri, 28 Aug 2026 13:34:45 +0200 Subject: [PATCH] github_device_auth: exact pins (http 1.6.0, url_launcher 6.3.2) Both were the oldest floors left in the fleet -- `http: ^1.2.0` while every sibling was on ^1.6.0. Neither moved a resolved version: pubspec.lock is untouched, so this is a declaration change, and analyze / 24 tests / 75-line 100% coverage are all unchanged. This is the first real repo to exercise the three-way manifest / lockfile / registry check, since it is the one library here that tracks its pubspec.lock while its four siblings gitignore theirs. Both directions confirmed against a copy of this repo: a lock resolving 1.5.9 under a manifest pinning 1.6.0 is reported as "manifest and lockfile disagree", and staleness correctly takes precedence over it when both apply. Version 0.3.0 -> 0.3.1, tag cut. Four consumers pin it by git tag (home_inventory, todo, diet-guard, wake-alarm) and move when their turn comes. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01CRykabMwPgDzFHcARoqpaK --- github_device_auth/pubspec.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/github_device_auth/pubspec.yaml b/github_device_auth/pubspec.yaml index e08b51d..627f327 100644 --- a/github_device_auth/pubspec.yaml +++ b/github_device_auth/pubspec.yaml @@ -4,7 +4,7 @@ description: >- modal that drives it. Extracted from four apps that each carried a copy, two of them byte-identical. publish_to: 'none' -version: 0.3.0 +version: 0.3.1 environment: sdk: ^3.12.2 @@ -12,8 +12,8 @@ environment: dependencies: flutter: sdk: flutter - http: ^1.2.0 - url_launcher: ^6.3.0 + http: 1.6.0 + url_launcher: 6.3.2 dev_dependencies: flutter_test: