Issues

fix(network): the release realtime handshake ignores a client certificate installed through HttpOverrides

koniz-dev/flutter-starter#1069 · opened

on Oct 31, 2026

fix(security): ImageCacheHelper debugPrints raw image URLs (presigned signatures, ?token=) in release builds

koniz-dev/flutter-starter#1065 · opened

on Oct 31, 2026

fix(security): a staging or production release follows a wss:// handshake redirect to ws:// and connects in cleartext

koniz-dev/flutter-starter#1052 · opened

on Oct 31, 2026

fix(storage): a read of a stale cleared token key could retry the delete, shortening the restart window

koniz-dev/flutter-starter#1042 · opened

on Oct 31, 2026

fix(security): the non-https BASE_URL startup refusal shows the URL's userinfo on screen and in the error report

koniz-dev/flutter-starter#1030 · opened

on Oct 31, 2026

fix(auth): a failed refresh-token read during a 401 refresh signs the user out, contrary to the token store's contract

koniz-dev/flutter-starter#1028 · opened

on Oct 31, 2026

fix(auth): a sign-in completed while logout's server call is pending is wiped by logout's clearCache

koniz-dev/flutter-starter#1027 · opened

on Oct 31, 2026

fix(auth): tokens from a sign-in cut off by logout are never revoked on the server

koniz-dev/flutter-starter#1026 · opened

on Oct 31, 2026

chore(ci): coverage.yml's PR comment step can never run, and compares numbers as strings

koniz-dev/flutter-starter#980 · opened

on Oct 30, 2026

fix(tooling): release.sh fails halfway with pubspec and CHANGELOG modified when the branch or tag already exists

koniz-dev/flutter-starter#978 · opened

on Oct 30, 2026

fix(tooling): create_feature.ps1 title-cases with the current culture, so a Turkish locale produces an invalid identifier

koniz-dev/flutter-starter#977 · opened

on Oct 30, 2026

fix(tooling): setup_git_hooks.sh leaves a core.hooksPath that does not resolve when its verification fails

koniz-dev/flutter-starter#976 · opened

on Oct 30, 2026

fix(tooling): setup_ci.dart ignores unknown flags, so --dryrun writes the workflows

koniz-dev/flutter-starter#975 · opened

on Oct 30, 2026

fix(tooling): test_coverage.sh passes the threshold when bc is missing, and test_coverage.ps1 exits 0 on failing tests

koniz-dev/flutter-starter#974 · opened

on Oct 30, 2026

fix(tooling): check_android_toolchain reads versions from commented-out lines

koniz-dev/flutter-starter#972 · opened

on Oct 30, 2026

fix(tooling): doc_dart_defines misses a quoted --dart-define value

koniz-dev/flutter-starter#971 · opened

on Oct 30, 2026

fix(tooling): check_docs never checks CLAUDE.md's links or test paths

koniz-dev/flutter-starter#970 · opened

on Oct 30, 2026

fix(tooling): doc_symbols and doc_signatures silently skip malformed directives and accept non-declarations

koniz-dev/flutter-starter#968 · opened

on Oct 30, 2026

fix(tooling): the feature_clean brick never validates class_name, so the generated code fails analyze

koniz-dev/flutter-starter#967 · opened

on Oct 30, 2026

docs(testing): the testing guide's troubleshooting names ProviderNotFoundException, which Riverpod never throws

koniz-dev/flutter-starter#961 · opened

on Oct 30, 2026

docs(testing): the testing docs call plain flutter test --coverage the coverage job's command

koniz-dev/flutter-starter#960 · opened

on Oct 30, 2026

docs(api): utils.md lists DateFormatter's lossy pair, not the ISO-8601 pair for stored data, and misses three validators

koniz-dev/flutter-starter#959 · opened

on Oct 30, 2026

docs(architecture): ADR 0006's contract table cites file:line references that point at unrelated lines

koniz-dev/flutter-starter#958 · opened

on Oct 30, 2026

docs: docs/README and docs/api/README imply a Firebase Remote Config feature-flag implementation ships

koniz-dev/flutter-starter#957 · opened

on Oct 30, 2026

docs(accessibility): the touch-target test snippet does not compile

koniz-dev/flutter-starter#956 · opened

on Oct 30, 2026

Navigation Menu

Repository navigation

Issues

fix(network): the release realtime handshake ignores a client certificate installed through HttpOverrides

fix(security): ImageCacheHelper debugPrints raw image URLs (presigned signatures, ?token=) in release builds

fix(security): a staging or production release follows a wss:// handshake redirect to ws:// and connects in cleartext

fix(storage): a read of a stale cleared token key could retry the delete, shortening the restart window

fix(security): the non-https BASE_URL startup refusal shows the URL's userinfo on screen and in the error report

fix(auth): a failed refresh-token read during a 401 refresh signs the user out, contrary to the token store's contract

fix(auth): a sign-in completed while logout's server call is pending is wiped by logout's clearCache

fix(auth): tokens from a sign-in cut off by logout are never revoked on the server

chore(ci): coverage.yml's PR comment step can never run, and compares numbers as strings

fix(tooling): release.sh fails halfway with pubspec and CHANGELOG modified when the branch or tag already exists

fix(tooling): create_feature.ps1 title-cases with the current culture, so a Turkish locale produces an invalid identifier

fix(tooling): setup_git_hooks.sh leaves a core.hooksPath that does not resolve when its verification fails

fix(tooling): setup_ci.dart ignores unknown flags, so --dryrun writes the workflows

fix(tooling): test_coverage.sh passes the threshold when bc is missing, and test_coverage.ps1 exits 0 on failing tests

fix(tooling): check_android_toolchain reads versions from commented-out lines

fix(tooling): doc_dart_defines misses a quoted --dart-define value

fix(tooling): check_docs never checks CLAUDE.md's links or test paths

fix(tooling): doc_symbols and doc_signatures silently skip malformed directives and accept non-declarations

fix(tooling): the feature_clean brick never validates class_name, so the generated code fails analyze

docs(testing): the testing guide's troubleshooting names ProviderNotFoundException, which Riverpod never throws

docs(testing): the testing docs call plain flutter test --coverage the coverage job's command

docs(api): utils.md lists DateFormatter's lossy pair, not the ISO-8601 pair for stored data, and misses three validators

docs(architecture): ADR 0006's contract table cites file:line references that point at unrelated lines

docs: docs/README and docs/api/README imply a Firebase Remote Config feature-flag implementation ships

docs(accessibility): the touch-target test snippet does not compile