[dependabot]

Bumps the pub-minor-patch group with 9 updates in the / directory:

Package	From	To
build_runner	2.16.0	2.16.1
drift	2.34.3	2.35.0
drift_dev	2.34.5	2.35.0
flutter_local_notifications	22.3.0	22.3.1
flutter_riverpod	3.4.2	3.4.3
logger	2.7.0	2.8.0
mobile_scanner	7.4.0	7.4.2
riverpod_annotation	4.0.6	4.0.7
riverpod_generator	4.0.8	4.0.9

Updates build_runner from 2.16.0 to 2.16.1

Release notes

Sourced from build_runner's releases.

package:build_runner v2.16.1

• Clarify terminology: refer to .dart_tool/build/generated as the "artifact tree", and the normal output location as the "package path".
• Reduce logged compile progress output for non-interactive builds, for example presubmits.
• In serve and daemon modes, source files not involved in the build are no longer cached on read. They are re-read when requested.
• Bug fix: make post-process output behavior match normal outputs: by default, rebuild if deleted or incorrect. Follow --keep-modified-outputs and --only-check.
• Bug fix: in incremental builds, detect and delete conflicting outputs in the source directory rather than treating them as sources, which could cause builder dependency cycles and hangs; fix #5079.
• Bug fix: restrict incompatible build output deletion to output packages; do not attempt to delete files in dependency packages.
• Bug fix: do not invalidate retained package path outputs when conflicting artifact tree files appear; avoid unnecessary build step reruns.

Commits

• 5e25e60 Release build, build_config, build_daemon, build_runner, build_test. (#5111)
• 43c2bb7 Remove test-only PreviousBuild.fromFinishedBuildState. (#5109)
• a6078a0 Use AssetFile for deletes. (#5108)
• 3051007 Remove BuildState.isFile. (#5106)
• da162e6 Do not invalidate retained package path outputs on artifact tree conflicts. (...
• d51da7e Set default test timeout to 3m in build_runner/dart_test.yaml. (#5104)
• 47aba81 [build_web_compilers] Standardize web app entrypoint selection (#5095)
• f15a84e Restrict incompatibleBuildOutputsToDelete to outputPackages. (#5103)
• 1a276c2 Clarify source/cache/visible/hidden. (#5096)
• f5cc910 Improve BuildOutputReader; add BuildOutputReadResult. (#5101)
• Additional commits viewable in compare view

Updates drift from 2.34.3 to 2.35.0

Release notes

Sourced from drift's releases.

drift-2.35.0

drift 2.35.0

• Add support for FTS5 queries in the Dart API: match, matchExp, highlight, snippet, bm25 and rank are now available as extension methods on FTS5 tables from package:drift/extensions/fts5.dart (#3843). Thanks to @​minhqdao!
• Breaking change (web): Remove PortToChannel extension on dart:html types. Use WebPortToChannel extension on MessagePort from package:web instead.
• Web: Fix race to OPFS file handle in compatiblity check.

drift_dev 2.35.0

• Warn when a table class is annotated with @DriftDatabase instead of silently generating nothing (#3854).

drift-2.34.4

drift 2.34.4

• Allow using rowid extension on virtual tables, as they usually provide rowids as well.

drift_dev 2.34.6

• Remove legacy command used to migrate from moor from drift.
• Fix drift_dev command not completing when spawning a schema isolate fails.
• Support analyzer versions 14.x.

Commits

• 1e8bb78 Prepare 2.35.0 release
• fdb7427 Warn when a table has a @DriftDatabase annotation
• eb68e16 Versioned schema: Remove unused name parameter
• ccb75b7 Add FTS5 Dart helpers: match, highlight, snippet, bm25 and rank (#3843) (#3855)
• 9a84d10 Use navigator lock around OPFS check
• 3cc83f6 Fix typos in docs and contributing guide
• 5a17dcf Also remove export
• 546e35a Remove web/channel_legacy.dart as the SDK will soon drop support for dart:html.
• 70db2cd Fix dependency version in drift3 preview
• f7d7067 Prepare drift release
• Additional commits viewable in compare view

Updates drift_dev from 2.34.5 to 2.35.0

Commits

• 1e8bb78 Prepare 2.35.0 release
• fdb7427 Warn when a table has a @DriftDatabase annotation
• eb68e16 Versioned schema: Remove unused name parameter
• ccb75b7 Add FTS5 Dart helpers: match, highlight, snippet, bm25 and rank (#3843) (#3855)
• 9a84d10 Use navigator lock around OPFS check
• 3cc83f6 Fix typos in docs and contributing guide
• 5a17dcf Also remove export
• 546e35a Remove web/channel_legacy.dart as the SDK will soon drop support for dart:html.
• 70db2cd Fix dependency version in drift3 preview
• f7d7067 Prepare drift release
• Additional commits viewable in compare view

Updates flutter_local_notifications from 22.3.0 to 22.3.1

Release notes

Sourced from flutter_local_notifications's releases.

flutter_local_notifications-v22.3.1

• [macOS] fixed subtitle not showing up properly. Thanks to the PR from Soi (Jiwon Lee)

Commits

• 325d98f prepare for 22.3.1 release (#2822)
• 9081a17 [flutter_local_notifications] fix: apply subtitle from platformSpecifics on m...
• c09911f Bump actions/setup-java from 5 to 6 (#2819)
• e5100eb [flutter_local_notifications] remove unnecessary FOREGROUND_SERVICE permissio...
• See full diff in compare view

Updates flutter_riverpod from 3.4.2 to 3.4.3

Commits

• 128a8ca The following packages have been updated:
• c12fab8 Changelog
• 64e328d Allow analyzer 14 (#4861)
• 693a2db docs: document UnmountedRefException behavior change in 3.0 migration guide (...
• 3104958 Merge branch 'master' of https://github.com/rrousselGit/riverpod
• e06b38c Unnecessary override
• efbe4ed docs: fix invalid ref.state in 3.0 migration AsyncNotifier example (#4855)
• 9f64f67 Bump shimmer from 3.0.0 to 4.0.0 (#4859)
• ba9905e Bump dio from 5.10.0 to 5.11.0 (#4852)
• 47ad9a2 Update codegen
• Additional commits viewable in compare view

Updates logger from 2.7.0 to 2.8.0

Release notes

Sourced from logger's releases.

v2.8.0

What's Changed

• Expose separate logEvent method. Closes (#116).

Full Changelog: SourceHorizon/logger@v2.7.0...v2.8.0

Changelog

Sourced from logger's changelog.

2.8.0

• Expose separate logEvent method. Closes (#116).

Commits

• c4d65c3 Bump version to 2.8.0
• fac43d3 Expose separate logEvent method, closes #116
• See full diff in compare view

Updates mobile_scanner from 7.4.0 to 7.4.2

Release notes

Sourced from mobile_scanner's releases.

v7.4.2

7.4.2 (2026-09-10)

Bug Fixes

• android: defer orientation sensor listener until camera start (#1803) (f9c81ea)

v7.4.1

Improvements

• [Web] Bumped zxing-wasm (the WebBarcodeReader.zxingWasm backend) from 3.1.1 to 3.1.3.

Bug Fixes

• [Android] Fixed the camera preview reporting a stale device orientation on start, when the device was rotated while the camera was stopped.
• [Android] Fixed device rotations sometimes not being detected while the camera is running, e.g. when the display rotation callback fires before the display reflects the new rotation, or on a seamless 180 degree rotation between the two landscape orientations.
• [Android] Fixed barcode scanning permanently stalling when a camera frame was never released. The ImageProxy is now released on every exit path of the analyzer, including a null image, a failed or cancelled ML Kit request, and any error while building the input image or handling the result. Previously a single leaked frame stopped all further scanning while the preview kept running. (thanks @​WladmirJunior !)
• [Android] Fixed a host-app crash when CameraX fails to initialize while starting the scanner (e.g. "Available cameras: 0", the camera being held by another process, or a transient HAL error). The failure is now routed through the normal error callback so it can be surfaced via errorBuilder instead of terminating the app.
• [Android] Fixed the false-positive Your app uses the following plugins that apply Kotlin Gradle Plugin (KGP): mobile_scanner warning on AGP 9. The plugin's Gradle files are now Kotlin DSL, and the Kotlin Gradle Plugin is only applied when built-in Kotlin is disabled, which keeps the build working on older AGP versions. (thanks @​AndresMontaniv !)
• [Android] Added a ProGuard keep rule for the internal ML Kit barcode classes (com.google.android.gms.internal.mlkit_vision_barcode), which could be stripped or obfuscated in release builds.
• [Apple] Fixed a crash when the app is terminated while the camera is running. A capture frame that was still in flight could reach the Flutter engine after its shell had been destroyed, causing an EXC_BAD_ACCESS. The capture session is now stopped before the engine is destroyed, and the camera is released when the engine detaches the plugin.
• [Web] Fixed web builds failing to compile on Dart 3.14 (Flutter 3.48), which rejects @JS annotations on extension type constructors. The annotations were already no-ops, so removing them does not change any behavior.
• Fixed the camera preview no longer following device rotation after switchCamera(). Restarting the camera recreated the device orientation stream, and cancelling a listener of the previous stream instance afterwards inadvertently tore down the platform channel of the new one.

Changelog

Sourced from mobile_scanner's changelog.

7.4.2 (2026-09-10)

Bug Fixes

• android: defer orientation sensor listener until camera start (#1803) (f9c81ea)

7.4.1

Improvements

• [Web] Bumped zxing-wasm (the WebBarcodeReader.zxingWasm backend) from 3.1.1 to 3.1.3.

Bug Fixes

• [Android] Fixed the camera preview reporting a stale device orientation on start, when the device was rotated while the camera was stopped.
• [Android] Fixed device rotations sometimes not being detected while the camera is running, e.g. when the display rotation callback fires before the display reflects the new rotation, or on a seamless 180 degree rotation between the two landscape orientations.
• [Android] Fixed barcode scanning permanently stalling when a camera frame was never released. The ImageProxy is now released on every exit path of the analyzer, including a null image, a failed or cancelled ML Kit request, and any error while building the input image or handling the result. Previously a single leaked frame stopped all further scanning while the preview kept running. (thanks @​WladmirJunior !)
• [Android] Fixed a host-app crash when CameraX fails to initialize while starting the scanner (e.g. "Available cameras: 0", the camera being held by another process, or a transient HAL error). The failure is now routed through the normal error callback so it can be surfaced via errorBuilder instead of terminating the app.
• [Android] Fixed the false-positive Your app uses the following plugins that apply Kotlin Gradle Plugin (KGP): mobile_scanner warning on AGP 9. The plugin's Gradle files are now Kotlin DSL, and the Kotlin Gradle Plugin is only applied when built-in Kotlin is disabled, which keeps the build working on older AGP versions. (thanks @​AndresMontaniv !)
• [Android] Added a ProGuard keep rule for the internal ML Kit barcode classes (com.google.android.gms.internal.mlkit_vision_barcode), which could be stripped or obfuscated in release builds.
• [Apple] Fixed a crash when the app is terminated while the camera is running. A capture frame that was still in flight could reach the Flutter engine after its shell had been destroyed, causing an EXC_BAD_ACCESS. The capture session is now stopped before the engine is destroyed, and the camera is released when the engine detaches the plugin.
• [Web] Fixed web builds failing to compile on Dart 3.14 (Flutter 3.48), which rejects @JS annotations on extension type constructors. The annotations were already no-ops, so removing them does not change any behavior.
• Fixed the camera preview no longer following device rotation after switchCamera(). Restarting the camera recreated the device orientation stream, and cancelling a listener of the previous stream instance afterwards inadvertently tore down the platform channel of the new one.

Commits

• 34f5050 chore(develop): release 7.4.2 (#1804)
• f9c81ea fix(android): defer orientation sensor listener until camera start (#1803)
• 5349d04 chore: example macos spm (#1800)
• b776c2e docs: add missing 7.4.1 changelog entries
• 56ff4d3 chore(deps): bump the example-android group in /example/android with 2 update...
• c9406fd chore(deps): bump zxing-wasm from 3.1.2 to 3.1.3 (#1776)
• d4cd946 chore(deps): bump gradle-wrapper from 9.5.0 to 9.7.1 in /android (#1788)
• 49dfb65 chore(deps): bump actions/setup-java from 5 to 6 (#1792)
• a1f203f chore: add dependabot cooldown and grouping (#1798)
• c594d20 fix(apple): release the camera when the engine detaches the plugin
• Additional commits viewable in compare view

Updates riverpod_annotation from 4.0.6 to 4.0.7

Commits

• 128a8ca The following packages have been updated:
• c12fab8 Changelog
• 64e328d Allow analyzer 14 (#4861)
• 693a2db docs: document UnmountedRefException behavior change in 3.0 migration guide (...
• 3104958 Merge branch 'master' of https://github.com/rrousselGit/riverpod
• e06b38c Unnecessary override
• efbe4ed docs: fix invalid ref.state in 3.0 migration AsyncNotifier example (#4855)
• 9f64f67 Bump shimmer from 3.0.0 to 4.0.0 (#4859)
• ba9905e Bump dio from 5.10.0 to 5.11.0 (#4852)
• 47ad9a2 Update codegen
• Additional commits viewable in compare view

Updates riverpod_generator from 4.0.8 to 4.0.9

Commits

• 128a8ca The following packages have been updated:
• c12fab8 Changelog
• 64e328d Allow analyzer 14 (#4861)
• 693a2db docs: document UnmountedRefException behavior change in 3.0 migration guide (...
• 3104958 Merge branch 'master' of https://github.com/rrousselGit/riverpod
• e06b38c Unnecessary override
• efbe4ed docs: fix invalid ref.state in 3.0 migration AsyncNotifier example (#4855)
• 9f64f67 Bump shimmer from 3.0.0 to 4.0.0 (#4859)
• ba9905e Bump dio from 5.10.0 to 5.11.0 (#4852)
• 47ad9a2 Update codegen
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0e21e415-e84d-4f88-8f06-2aaa159b4d80

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.