build(deps): bump subosito/flutter-action from 2.21.0 to 2.23.0#3654
build(deps): bump subosito/flutter-action from 2.21.0 to 2.23.0#3654dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
Bumps [subosito/flutter-action](https://github.com/subosito/flutter-action) from 2.21.0 to 2.23.0. - [Release notes](https://github.com/subosito/flutter-action/releases) - [Commits](subosito/flutter-action@fd55f4c...1a44944) --- updated-dependencies: - dependency-name: subosito/flutter-action dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
github_actions
dependabot
Bot
added
the
github_actions
Semver Impact of This PR⚪ None (no version bump detected) 📋 Changelog PreviewThis is how your changes will appear in the changelog. Internal Changes
🤖 This preview updates automatically when you update the PR. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 6098270. Configure here.
| - uses: dart-lang/setup-dart@65eb853c7ba17dde3be364c3d2858773e7144260 # pin@v1.7.2 | ||
| if: ${{ inputs.sdk == 'dart' }} | ||
| - uses: subosito/flutter-action@fd55f4c5af5b953cc57a2be44cb082c8f6635e8e # pin@v2.21.0 | ||
| - uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # pin@v2.23.0 |
There was a problem hiding this comment.
Inconsistent dependency version across workflow and action files
Low Severity
The subosito/flutter-action dependency was bumped to v2.23.0 in all workflow files under .github/workflows/, but two composite action files were missed: .github/actions/size-analysis-setup/action.yml still pins v2.21.0 and .github/actions/flutter-test/action.yml still pins v2.18.0. This version inconsistency means different CI jobs may use different Flutter action versions, which could lead to subtle behavioral differences across CI pipelines. Per the review rules for dependency updates (chore(deps):), compatibility issues from version mismatches across the codebase are worth flagging.
Additional Locations (1)
Triggered by project rule: PR Review Guidelines for Cursor Bot (Root)
Reviewed by Cursor Bugbot for commit 6098270. Configure here.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #3654 +/- ##
==========================================
+ Coverage 86.78% 86.90% +0.11%
==========================================
Files 335 335
Lines 11934 11934
==========================================
+ Hits 10357 10371 +14
+ Misses 1577 1563 -14
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
1 participant
Bumps subosito/flutter-action from 2.21.0 to 2.23.0.
Release notes
Sourced from subosito/flutter-action's releases.
Commits
1a44944Simplify extraction of zip files (#379)4efee11readme: minor updates (#392)d97c38eadd a CI job that checks out a specific master commit (#391)75b905cchores (#390)7ff07e9Add separate pub-cache boolean flag (#377)6622f58feat: fvm support (#383)0ca7a94Remove macos-13 (Intel) runner from CI (#388)de04a6aUpgrade actions/cache to v5 (#385)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)