chore(release): bump version to 7.1.25

Author: agordn52

CHANGELOG.md

@@ -1,3 +1,17 @@
+## [7.1.25] - 2026-07-06
+
+### Fixed
+* `make:api_service` — acronym-spelled names (e.g. `PaymentsAPIService`) no longer produce a doubled `ApiServiceApiService` class name; the suffix is now stripped case-insensitively and falls back to `api` for suffix-only input
+* Generated API service now always imports `package:nylo_framework/nylo_framework.dart` (previously omitted when a custom `--url` was supplied, breaking the `NyApiService` reference)
+* Generated `env.g.dart` now escapes single quotes and backslashes in keys and values, so secrets containing `'` or `\` can't break the generated Dart string literal
+
+### Changed
+* `make:api_service` info hint now points to `bootstrap/decoders.dart` (was `config/decoders.dart`)
+* Generated `env.g.dart` adds explicit local variable type annotations and a `dart:typed_data` import (satisfies the `specify_nonobvious_local_variable_types` lint)
+* Bump `nylo_support` dependency from `^7.27.2` to `^7.27.3`
+* Bump `flutter_local_notifications` dependency from `^22.0.0` to `^22.0.1`
+* Bump `dio` dependency from `^5.9.2` to `^5.10.0`
+
 ## [7.1.24] - 2026-06-08
 
 ### Changed

example/pubspec.lock

@@ -5,18 +5,18 @@ packages:
     dependency: transitive
     description:
       name: app_badge_plus
-      sha256: c74952a7cc24fee60e0fd3d88c660636611d7234c35674f8e7501cdaf07265d6
+      sha256: "60b24ecbcb792f5b185a837b066ee436ef9f6435f2a3006eb314d0c6a80f1d75"
       url: "https://pub.dev"
     source: hosted
-    version: "1.3.0"
+    version: "1.3.1"
   app_links:
     dependency: transitive
     description:
       name: app_links
-      sha256: a350a5b37579b7227aaf9a59c07114617cd4283852e193f743b2b3d2d7483c18
+      sha256: "9d3c82f634c7f5b5c752f7ee46b67724246043f5e1d5fc1b433dd5b38d780dbe"
       url: "https://pub.dev"
     source: hosted
-    version: "7.1.1"
+    version: "7.2.0"
   app_links_linux:
     dependency: transitive
     description:
@@ -29,10 +29,10 @@ packages:
     dependency: transitive
     description:
       name: app_links_platform_interface
-      sha256: "05f5379577c513b534a29ddea68176a4d4802c46180ee8e2e966257158772a3f"
+      sha256: "78a18580eecac98108d1eef52a7db668bc317714f5205e616973363326efe333"
       url: "https://pub.dev"
     source: hosted
-    version: "2.0.2"
+    version: "2.0.3"
   app_links_web:
     dependency: transitive
     description:
@@ -117,10 +117,10 @@ packages:
     dependency: transitive
     description:
       name: connectivity_plus
-      sha256: "62ffa266d9a23b79fb3fcbc206afc00bb979417ba57b1324c546b5aab95ba057"
+      sha256: cad0e811a289ea2a941119dc483c204ec1684cbb9a8fc7351fe4a230b8313160
       url: "https://pub.dev"
     source: hosted
-    version: "7.1.1"
+    version: "7.2.0"
   connectivity_plus_platform_interface:
     dependency: transitive
     description:
@@ -165,18 +165,18 @@ packages:
     dependency: transitive
     description:
       name: dio
-      sha256: aff32c08f92787a557dd5c0145ac91536481831a01b4648136373cddb0e64f8c
+      sha256: ea2bad3c89a27635ce2d85cce4d6b199da49a5a48ec77b03e45b65a3b90922b0
       url: "https://pub.dev"
     source: hosted
-    version: "5.9.2"
+    version: "5.10.0"
   dio_web_adapter:
     dependency: transitive
     description:
       name: dio_web_adapter
-      sha256: "2f9e64323a7c3c7ef69567d5c800424a11f8337b8b228bad02524c9fb3c1f340"
+      sha256: dd58dc3861eb36edb13b217efc006a1c21e5bbc341de8c229b85634fa5e362e4
       url: "https://pub.dev"
     source: hosted
-    version: "2.1.2"
+    version: "2.2.0"
   dispose_scope:
     dependency: transitive
     description:
@@ -189,10 +189,10 @@ packages:
     dependency: transitive
     description:
       name: equatable
-      sha256: "3e0141505477fd8ad55d6eb4e7776d3fe8430be8e497ccb1521370c3f21a3e2b"
+      sha256: "3bce007a596ff8b3119c45d68aaef631272537c03d30e5d4534dd24bf4c5eaa2"
       url: "https://pub.dev"
     source: hosted
-    version: "2.0.8"
+    version: "2.1.0"
   error_stack:
     dependency: transitive
     description:
@@ -250,10 +250,10 @@ packages:
     dependency: transitive
     description:
       name: flutter_local_notifications
-      sha256: be38e3854d2baabcda8e16966a5fe8748cebb655bb94701494da0f052c2fc352
+      sha256: a0d7141f14cabcee42967470a858dfc99dd6cfb70d3cab404bacfcafa9e84e70
       url: "https://pub.dev"
     source: hosted
-    version: "22.0.0"
+    version: "22.0.1"
   flutter_local_notifications_linux:
     dependency: transitive
     description:
@@ -282,10 +282,10 @@ packages:
     dependency: transitive
     description:
       name: flutter_local_notifications_windows
-      sha256: "5aeed973a0c1480706784fad05c5c3a911335ebb561b2274b47fe80b375201e1"
+      sha256: "6f43bdd03b171b7a90f22647506fea33e2bb12294b7c7c7a3d690e960a382945"
       url: "https://pub.dev"
     source: hosted
-    version: "3.1.0"
+    version: "3.1.1"
   flutter_localizations:
     dependency: transitive
     description: flutter
@@ -385,10 +385,10 @@ packages:
     dependency: transitive
     description:
       name: get_time_ago
-      sha256: cd111914562ca2b938afbc73f715fab1f37795cc053924d08f6de59878781388
+      sha256: "883e14a3d47471779582b2681734e494748f97301b35e5f6a5b50185788e042a"
       url: "https://pub.dev"
     source: hosted
-    version: "2.3.2"
+    version: "2.4.0"
   gtk:
     dependency: transitive
     description:
@@ -539,15 +539,15 @@ packages:
       path: ".."
       relative: true
     source: path
-    version: "7.1.23"
+    version: "7.1.24"
   nylo_support:
     dependency: transitive
     description:
       name: nylo_support
-      sha256: "7e08e7c13510757d0d4ab6b88daf74b7d9efab8672ee72af48f34bb958fcf7dd"
+      sha256: "58d0682324e011bed87b371c150caf26d8e0519e1692ee62c1646559144a6c4c"
       url: "https://pub.dev"
     source: hosted
-    version: "7.27.2"
+    version: "7.27.3"
   objective_c:
     dependency: transitive
     description:
@@ -576,10 +576,10 @@ packages:
     dependency: transitive
     description:
       name: path_provider
-      sha256: "50c5dd5b6e1aaf6fb3a78b33f6aa3afca52bf903a8a5298f53101fdaee55bbcd"
+      sha256: a7f4874f987173da295a61c181b8ee71dab59b332a486b391babf26a1b884825
       url: "https://pub.dev"
     source: hosted
-    version: "2.1.5"
+    version: "2.1.6"
   path_provider_android:
     dependency: transitive
     description:
@@ -600,18 +600,18 @@ packages:
     dependency: transitive
     description:
       name: path_provider_linux
-      sha256: f7a1fe3a634fe7734c8d3f2766ad746ae2a2884abe22e241a8b301bf5cac3279
+      sha256: "58c2005f147315b11e9b4a7bc889cd5203e250cba8e3f012dae259b4972b5c16"
       url: "https://pub.dev"
     source: hosted
-    version: "2.2.1"
+    version: "2.2.2"
   path_provider_platform_interface:
     dependency: transitive
     description:
       name: path_provider_platform_interface
-      sha256: "88f5779f72ba699763fa3a3b06aa4bf6de76c8e5de842cf6f29e2e06476c2334"
+      sha256: "484838772624c3a4b94f1e44a3e19897fee738f2d5c4ce448443b0417f7c9dda"
       url: "https://pub.dev"
     source: hosted
-    version: "2.1.2"
+    version: "2.1.3"
   path_provider_windows:
     dependency: transitive
     description:
@@ -640,10 +640,10 @@ packages:
     dependency: transitive
     description:
       name: patrol_log
-      sha256: "16ab747b28621640115d9493138eae82a1d410a613857cb0caf9000ce62fc546"
+      sha256: "080608c3402480e18f7dce5a7ee17bf2e23fc191eedffb73a8a635506ce6d4bf"
       url: "https://pub.dev"
     source: hosted
-    version: "0.9.0"
+    version: "0.9.1"
   petitparser:
     dependency: transitive
     description:
@@ -728,10 +728,10 @@ packages:
     dependency: transitive
     description:
       name: shared_preferences_android
-      sha256: a2c49fc1fed7140cadd892d765bd47edbe4ac0b9c7e7e3c493dcb58126f99cf0
+      sha256: "93ae5884a9df5d3bb696825bceb3a17590754548b5d740eba51500afc8d088f5"
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.25"
+    version: "2.4.26"
   shared_preferences_foundation:
     dependency: transitive
     description:
@@ -845,10 +845,10 @@ packages:
     dependency: transitive
     description:
       name: timezone
-      sha256: "784a5e34d2eb62e1326f24d6f600aaaee452eb8ca8ef2f384a59244e292d158b"
+      sha256: "981d1020d6ef8fe1e7b3de5054e5b25579ae7c403d7734adc508ffc47668e9cb"
       url: "https://pub.dev"
     source: hosted
-    version: "0.11.0"
+    version: "0.11.1"
   typed_data:
     dependency: transitive
     description:

lib/metro/commands/make/api_service.dart

@@ -46,12 +46,7 @@ class _MakeApiServiceCommand extends NyCustomCommand {
       message: 'API service name is required',
     );
 
-    String cleanApiServiceName = apiServiceName.snakeCase.replaceAll(
-      RegExp(r'(_?api_service)'),
-      "",
-    );
-
-    ReCase classReCase = ReCase(cleanApiServiceName);
+    ReCase classReCase = ReCase(cleanApiServiceName(apiServiceName));
 
     // Get model option or default to 'Model'
     String modelName = result.getString("model") ?? "Model";
@@ -77,6 +72,25 @@ class _MakeApiServiceCommand extends NyCustomCommand {
       '$networkingPath/${classReCase.snakeCase}_api_service.dart',
     );
 
-    info('Add the API service to your config/decoders.dart file');
+    info('Add the API service to your bootstrap/decoders.dart file');
+  }
+}
+
+/// Strips a trailing API service suffix from [rawName] and returns the resource
+/// name in snake_case.
+///
+/// The suffix is matched case-insensitively so acronym spellings such as
+/// `APIService` (which `snakeCase` would split into `a_p_i_service`) are handled
+/// correctly and don't leave the class name doubled (e.g. `APIServiceApiService`).
+/// When the input is nothing but the suffix (e.g. `APIService`), it falls back
+/// to `api` so a non-empty name is always produced.
+String cleanApiServiceName(String rawName) {
+  String stripped = rawName.replaceFirst(
+    RegExp(r'[-_ ]?api[-_ ]?service$', caseSensitive: false),
+    "",
+  );
+  if (stripped.trim().isEmpty) {
+    return "api";
   }
+  return ReCase(stripped).snakeCase;
 }

lib/metro/stubs/api_service_stub.dart

@@ -7,7 +7,7 @@ String apiServiceStub(
   required String baseUrl,
 }) =>
     '''import '/bootstrap/decoders.dart';
-${baseUrl == "getEnv('API_BASE_URL')" ? "import 'package:nylo_framework/nylo_framework.dart';" : ""}${model.originalText != 'Model' ? "\nimport '/app/models/${model.snakeCase}.dart';" : ""}
+import 'package:nylo_framework/nylo_framework.dart';${model.originalText != 'Model' ? "\nimport '/app/models/${model.snakeCase}.dart';" : ""}
 
 class ${rc.pascalCase}ApiService extends NyApiService {
   ${rc.pascalCase}ApiService() : super(decoders: modelDecoders);

lib/metro/stubs/env_stub.dart

@@ -18,6 +18,7 @@ String envStub({
   );
   buffer.writeln('');
   buffer.writeln("import 'dart:convert';");
+  buffer.writeln("import 'dart:typed_data';");
   buffer.writeln('');
 
   // Start class
@@ -39,15 +40,19 @@ String envStub({
     buffer.writeln(
       '  /// APP_KEY for decryption (obfuscated at compile time).',
     );
-    buffer.writeln("  static const String _appKey = '$appKey';");
+    buffer.writeln(
+      "  static const String _appKey = '${_escapeSingleQuoted('$appKey')}';",
+    );
   }
   buffer.writeln('');
 
   // Encrypted values map
   buffer.writeln('  /// Encrypted environment values.');
   buffer.writeln('  static const Map<String, String> _encrypted = {');
   for (final entry in encryptedMap.entries) {
-    buffer.writeln("    '${entry.key}': '${entry.value}',");
+    buffer.writeln(
+      "    '${_escapeSingleQuoted(entry.key)}': '${_escapeSingleQuoted(entry.value)}',",
+    );
   }
   buffer.writeln('  };');
   buffer.writeln('');
@@ -60,8 +65,10 @@ String envStub({
   // XOR decrypt method
   buffer.writeln('  /// Decrypts a base64-encoded XOR-encrypted string.');
   buffer.writeln('  static String _decrypt(String encrypted) {');
-  buffer.writeln('    final encryptedBytes = base64Decode(encrypted);');
-  buffer.writeln('    final keyBytes = utf8.encode(_appKey);');
+  buffer.writeln(
+    '    final Uint8List encryptedBytes = base64Decode(encrypted);',
+  );
+  buffer.writeln('    final Uint8List keyBytes = utf8.encode(_appKey);');
   buffer.writeln('    final decryptedBytes = <int>[];');
   buffer.writeln('');
   buffer.writeln('    for (var i = 0; i < encryptedBytes.length; i++) {');
@@ -107,8 +114,8 @@ String envStub({
   buffer.writeln('    }');
   buffer.writeln('');
   buffer.writeln('    // Decrypt and parse the value');
-  buffer.writeln('    final decrypted = _decrypt(_encrypted[key]!);');
-  buffer.writeln('    final parsed = _parseValue(decrypted);');
+  buffer.writeln('    final String decrypted = _decrypt(_encrypted[key]!);');
+  buffer.writeln('    final dynamic parsed = _parseValue(decrypted);');
   buffer.writeln('');
   buffer.writeln('    // Cache the result');
   buffer.writeln('    _cache[key] = parsed;');
@@ -133,3 +140,9 @@ String envStub({
 
   return buffer.toString();
 }
+
+/// Escapes [value] for safe interpolation inside a single-quoted Dart string
+/// literal. Backslashes are escaped first, then single quotes, so a key or value
+/// containing `'` or `\` cannot break the generated `env.g.dart`.
+String _escapeSingleQuoted(String value) =>
+    value.replaceAll('\\', '\\\\').replaceAll("'", "\\'");

lib/nylo_framework.dart

@@ -15,4 +15,4 @@ export 'package:date_field/date_field.dart';
 export 'package:dio/dio.dart';
 
 /// Nylo version
-const String nyloVersion = 'v7.1.24';
+const String nyloVersion = 'v7.1.25';