Take gatelock 0.8.1, Flutter 3.47.4 and flutter_secure_storage 11.1.1

The freshness gate's three findings. gatelock 0.8.1 restructured
LockConfig, which this repo does not use (only log_integrity), so the
pin moves without a code change; pylint stays at 10 against it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HHCbkJWXHjtTUaqvnHRAqA

.fvmrc

@@ -1,3 +1,3 @@
 {
-  "flutter": "3.47.3"
+  "flutter": "3.47.4"
 }

.github/workflows/python-tests.yml

@@ -50,7 +50,7 @@ jobs:
 
       - uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.47.3
+          flutter-version: 3.47.4
           channel: stable
           cache: true
 

.github/workflows/release-apk.yml

@@ -77,7 +77,7 @@ jobs:
 
       - uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.47.3
+          flutter-version: 3.47.4
           channel: stable
           cache: true
 

.pre-commit-config.yaml

@@ -99,7 +99,7 @@ repos:
           # direct URLs for one distribution, so any pin that drifts from
           # the manifest becomes an unresolvable hook environment rather
           # than merely an old one.
-          - gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.7.3#subdirectory=gatelock
+          - gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.8.1#subdirectory=gatelock
           - crdt-sync @ git+https://github.com/kuhyx/utils@crdt-sync-v0.9.1#subdirectory=crdt-sync
           - freedays @ git+https://github.com/kuhyx/utils@freedays-v0.2.0#subdirectory=freedays
         # Test suites intentionally use patterns (protected-access, magic-value

phone_app/pubspec.lock

@@ -171,10 +171,10 @@ packages:
     dependency: "direct main"
     description:
       name: flutter_secure_storage
-      sha256: "4540927d8b37e6cc47aaa2d17b6035a2d49049e2797cb19d2bdd299bff602c67"
+      sha256: d87713a152ee2f255117bdbbf43da1dea1797e0551e499e0334f0c9dcfafddd2
       url: "https://pub.dev"
     source: hosted
-    version: "11.1.0"
+    version: "11.1.1"
   flutter_secure_storage_darwin:
     dependency: transitive
     description:

phone_app/pubspec.yaml

@@ -17,7 +17,7 @@ dependencies:
   cupertino_icons: 1.0.9
   flutter:
     sdk: flutter
-  flutter_secure_storage: 11.1.0
+  flutter_secure_storage: 11.1.1
 
   # One-tap sign-in for the sync account. App-side only: crdt_sync stays pure
   # Dart so it keeps working on Linux desktop and headless.

pyproject.toml

@@ -8,7 +8,7 @@ version = "1.0.0"
 description = "Trigger that starts the morning routine at the phone's alarm time"
 requires-python = ">=3.14"
 dependencies = [
-    "gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.7.3#subdirectory=gatelock",
+    "gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.8.1#subdirectory=gatelock",
     # Firebase transport for the alarm read. _sync.py imports it lazily and
     # falls back to its stdlib GitHub path if the import fails, so a broken
     # install degrades the read instead of killing the per-minute trigger.

requirements.txt

@@ -7,7 +7,7 @@ codespell==2.4.3
 coverage==7.16.0
 crdt-sync @ git+https://github.com/kuhyx/utils@crdt-sync-v0.9.1#subdirectory=crdt-sync
 freedays @ git+https://github.com/kuhyx/utils@freedays-v0.2.0#subdirectory=freedays
-gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.7.3#subdirectory=gatelock
+gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.8.1#subdirectory=gatelock
 mypy==2.3.1
 pre-commit==4.6.2
 pylint==4.0.8