Skip to content

feat(repo)!: v10.0.0 #2280

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
xsahil03x wants to merge 77 commits into
base: master
Choose a base branch
from
Open

feat(repo)!: v10.0.0 #2280

Show file tree
Hide file tree
Changes from 72 commits
Commits
Show all changes
77 commits
Select commit Hold shift + click to select a range
9109c2d
refactor(ui)!: re-wrote message actions and modals (#2156)
xsahil03x May 22, 2025
08600ee
refactor(ui): sync theme with figma (#2263)
xsahil03x May 26, 2025
31b2809
refactor!(ui): add support for customising reaction picker (#2248)
xsahil03x Jun 10, 2025
396fcca
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jun 16, 2025
eb9d91c
refactor(ui)!: improve reaction bubble implementation (#2277)
xsahil03x Jun 17, 2025
6a5cf55
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jun 17, 2025
d2aabea
chore(ui): make `CustomMessageAction` extendable
xsahil03x Jun 17, 2025
39bc67b
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jun 17, 2025
f9d454c
chore(repo): add migration guide
xsahil03x Jun 18, 2025
5a2dc40
chore(repo): update CHANGELOG.md
xsahil03x Jun 18, 2025
76debfd
chore(repo): update migration guide
xsahil03x Jun 18, 2025
75d9d17
chore(repo): release v10.0.0-beta.1 (#2283)
xsahil03x Jun 18, 2025
c038038
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jun 27, 2025
dead3f9
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jun 30, 2025
0ffdd7c
chore: include latest stable release in beta changelogs
xsahil03x Jun 30, 2025
8c8dbd2
chore(repo): release v10.0.0-beta.2 (#2292)
xsahil03x Jun 30, 2025
74bb460
feat(ui)!: refactor poll message into attachment (#2296)
xsahil03x Jul 3, 2025
3a2b3e3
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 4, 2025
cc69eb3
refactor(llc): introduce event controller, resolver (#2301)
xsahil03x Jul 10, 2025
74188e3
refactor(ui)!: add support for non-attachment types in attachment pic…
xsahil03x Jul 11, 2025
cc33ba3
chore(repo): remove deprecated classes, methods, and properties (#2306)
xsahil03x Jul 16, 2025
fd1e502
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 17, 2025
3e95d5c
chore(repo): release v10.0.0-beta.3 (#2310)
xsahil03x Jul 17, 2025
86d3220
chore(ui): hide reaction picker bubble border and mask (#2316)
xsahil03x Jul 20, 2025
a514537
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 21, 2025
7d3fa7f
feat(llc): add support for sharing live and static locations (#2305)
xsahil03x Jul 23, 2025
376f0fe
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 23, 2025
a32d298
fix(ui): adjust reaction picker and message modal animations
xsahil03x Jul 24, 2025
84b2994
feat(persistence): add support for location persistence (#2319)
xsahil03x Jul 24, 2025
00c0b15
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 24, 2025
7fe34aa
feat(llc, ui, persistence)!: add support for reaction emoji_code (#2326)
xsahil03x Jul 25, 2025
bf33673
feat(ui): add `StreamChatConfiguration.maybeOf()` method
xsahil03x Jul 25, 2025
c37fa34
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 25, 2025
0a6b932
chore: Update Goldens
xsahil03x Jul 25, 2025
d1819c1
chore(repo): release v10.0.0-beta.4 (#2333)
xsahil03x Jul 25, 2025
48b0cc7
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Jul 30, 2025
ba38c8e
chore: merge fixes
xsahil03x Jul 30, 2025
3ad5cab
fix(llc): fixed skipPush and skipEnrichUrl not preserving during mess…
VladShturma Jul 30, 2025
8e06a36
fix(llc, ui): update message state on failure
xsahil03x Jul 30, 2025
4ca7fe9
refactor(ui): introduce showStreamDialog and replace showStreamMessag…
xsahil03x Aug 6, 2025
74fecb2
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Aug 6, 2025
dfa6170
chore: fix lints
xsahil03x Aug 6, 2025
1433346
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Aug 13, 2025
8376c94
chore: merge fixes
xsahil03x Aug 13, 2025
b138da2
chore: Update Goldens
xsahil03x Aug 13, 2025
2b8a21e
chore(repo): release v10.0.0-beta.5 (#2354)
xsahil03x Aug 13, 2025
c511c68
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Sep 19, 2025
0f8a4f5
chore: Update Goldens
xsahil03x Sep 19, 2025
90d5bc2
fix(ui): ensure dialog confirmation for delete/flag actions (#2384)
xsahil03x Sep 19, 2025
c7c1dd3
fix(ui): enable sending reply in threads for users with sendReply cap…
xsahil03x Sep 23, 2025
74f46ab
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Sep 24, 2025
4d8635c
chore: Update Goldens
xsahil03x Sep 24, 2025
9af6ba2
test: fix tests
xsahil03x Sep 24, 2025
6a52cb0
chore(repo): release v10.0.0-beta.6 (#2393)
xsahil03x Sep 24, 2025
e7576f9
feat(llc, ui): add delete message for me (#2394)
xsahil03x Sep 26, 2025
5a02491
feat(persistence): add deletedForMe and deletedMessages fields (#2395)
xsahil03x Sep 26, 2025
4bb47e1
feat(llc)!: add standalone file/image upload/remove methods (#2396)
xsahil03x Sep 26, 2025
7ba65c2
feat(llc): improve message validation for upload criteria
xsahil03x Oct 9, 2025
bd17255
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Oct 15, 2025
37e0466
chore: merge fixes
xsahil03x Oct 15, 2025
e6f5e25
chore(repo): release v10.0.0-beta.7 (#2417)
xsahil03x Oct 15, 2025
0db0485
feat(llc, persistence): handle user.messages.deleted event (#2423)
xsahil03x Oct 21, 2025
ea361cd
feat(ui): add `attachmentPickerOptionsBuilder` (#2415)
xsahil03x Oct 29, 2025
b38b320
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Oct 29, 2025
76fdb59
chore: update migration guide
xsahil03x Oct 29, 2025
3f89e28
chore(repo): release v10.0.0-beta.8 (#2425)
xsahil03x Oct 29, 2025
f594ac4
feat(ui)!: enhance onAttachmentTap with fallback to default behavior …
xsahil03x Oct 31, 2025
30da524
feat(llc): Store endAt in UTC (#2428)
xsahil03x Nov 3, 2025
182706c
feat(ui): add reactionIndicatorBuilder for custom reaction indicators…
xsahil03x Nov 13, 2025
341973d
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Nov 18, 2025
736a7be
chore: merge fixes
xsahil03x Nov 18, 2025
b5874a1
chore: Update Goldens
xsahil03x Nov 18, 2025
2a117b0
chore(repo): release v10.0.0-beta.9 (#2446)
xsahil03x Nov 18, 2025
302ade6
Merge remote-tracking branch 'origin/master' into v10.0.0
xsahil03x Dec 3, 2025
ee5d767
chore: Update Goldens
xsahil03x Dec 3, 2025
e223a99
chore(repo): release v10.0.0-beta.10 (#2458)
xsahil03x Dec 3, 2025
56e021f
chore: Fix version typo in changelog
xsahil03x Dec 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
15 changes: 10 additions & 5 deletions melos.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ command:
# List of all the dependencies used in the project.
dependencies:
async: ^2.11.0
avatar_glow: ^3.0.0
Copy link
Contributor

@coderabbitai coderabbitai bot Dec 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

geolocator 13.0.0 Flutter known issues security concerns

💡 Result:

Short summary — geolocator 13.0.0 (Flutter)

  • What changed in 13.0.0

    • Breaking changes: deprecates getCurrentPosition parameters (desiredAccuracy, forceAndroidLocationManager, timeLimit) in favor of a LocationSettings class; exposes WebSettings; updated federated subpackage deps (android/apple/web/windows/platform_interface). [1]

  • Known functional issues (reported & fixed soon after)

    • 13.0.1/13.0.2/13.0.3 quickly followed to fix compilation/example issues (13.0.1 fixed illegal reference to dart:js_interop on non‑web builds; other 13.x releases updated dependencies and example configs). If you hit build/compiler issues, upgrade to the patched 13.x or newer. [1]

  • Security vulnerabilities to be aware of

    • There is a public CVE (CVE‑2024‑52443) for a WordPress plugin named “Geolocator” (PHP object‑injection / deserialization) — this affects that WordPress plugin (versions ≤1.1), not the Flutter geolocator package. The Flutter geolocator package has no CVE record shown by the public databases for 13.0.0. Do not conflate the two projects. [2][3]

  • Other security/privacy notes (general, relevant to any location plugin)

    • Browser geolocation requires secure origins (HTTPS); geolocation APIs are deprecated on insecure origins. For web builds, serve over HTTPS. [4]
    • Review platform permission settings (foreground vs background location), Android 13+/iOS 14+ permission behavior, and limit how long/location granularity is requested in production apps. Also audit third‑party subpackages (geolocator_android, geolocator_apple, geolocator_web) for updates. [1]

  • Recommendation

    • If you use 13.0.0: upgrade to the latest stable geolocator (14.x as of the package page) or at least 13.0.4+ (which contains quick fixes) and test builds on all target platforms. Audit your app’s permission requests and ensure web builds are served over HTTPS. [1]

Sources

  • geolocator changelog (pub.dev). [1]
  • NVD / CVE records and aggregators for CVE‑2024‑52443 (WordPress Geolocator plugin). [2][3]
  • Chromium/DevTools note on geolocation requiring secure origins (HTTPS). [4]

If you want, I can:

  • check the exact latest geolocator version now and provide upgrade guidance for your pubspec, or
  • scan your project for usages of the deprecated getCurrentPosition parameters and produce a small migration patch.

🌐 Web query:

flutter_map 8.1.1 stability production usage

💡 Result:

Short answer: flutter_map 8.1.1 is a bug‑fix release (published 2025‑03‑08) that addresses an infinite‑loop bug with polygon labels on rotated maps; it’s part of an actively maintained 8.x line and is generally fine for production if you pin and test it in your app. [1][2][3]

Details & recommendation:

  • Release: 8.1.1 — 2025‑03‑08; changelog lists the polygon‑label infinite‑loop fix. Test your polygon/rotation code path. [1]
  • Maintenance: the project is community‑maintained with frequent 8.x fixes/patches (see repo releases). Keep an eye on later 8.x bugfixes (e.g., 8.2.x) and update when appropriate. [2][3]
  • Practical advice: pin the exact package version in pubspec.yaml, run your full test matrix (Android/iOS/web, device/OS versions you support), and check upstream issues for any regressions specific to your use (e.g., tile caching, vector tile plugins). If you rely on related plugins (tile caching, vector tiles), verify compatibility with their versions too.

Sources:
[1] flutter_map changelog (pub.dev) — 8.1.1 entry.
[2] fleaflet/flutter_map GitHub releases.
[3] flutter_map docs (fleaflet).

🌐 Web query:

avatar_glow flutter package security maintenance

💡 Result:

Short summary

  • Current package: avatar_glow — latest published release on pub.dev is v3.0.1. [1]
  • Source: GitHub repo apgapg/avatar_glow (repository and live demo linked from pub.dev). [1][3]
  • Maintenance signals: recent pub.dev metadata shows infrequent updates (latest release published ~24 months ago on pub.dev listings) and a small issue count on the repo — active but low-maintenance. [1][2]
  • Security posture: no public CVEs or security advisories listed on pub.dev or Libraries.io; package is MIT-licensed, has no external native/unsafe dependencies (pure Flutter widget), so attack surface is small — but no formal audit found. [1][2]
  • Practical recommendations:
    • Pin the package version in pubspec.yaml (avoid floating ranges) and vendor or audit the code if you rely on it in production. [1]
    • Review the GitHub issues/PRs before upgrading; consider using the GitHub repo directly if you need an unpushed fix. [1][3]
    • If you need long-term maintenance guarantees, either fork and maintain the widget in your repo or implement the simple glow effect yourself (widget is small). [2][3]

Sources
[1] pub.dev/avatar_glow package page (metadata, versions, repo link).
[2] Libraries.io / pub listing for avatar_glow (package metadata, license, maintenance info).
[3] GitHub repository referenced by package (apgapg/avatar_glow).

🌐 Web query:

flutter_map_animations latlong2 compatibility issues

💡 Result:

Short answer — common compatibility causes and fixes

  • Root cause: flutter_map and many related plugins (including flutter_map_animations) use the LatLng type from the latlong2 package; mismatched versions or having multiple LatLng types (from latlong, latlong2, google_maps_flutter, etc.) produce type errors. (docs.fleaflet.dev)

  • Quick checks/fixes:

    1. Add latlong2 to your pubspec (same major version expected by your flutter_map/flutter_map_animations). Example: flutter pub add latlong2. (docs.fleaflet.dev)
    2. Import the correct symbol where used: import 'package:latlong2/latlong.dart'; or import it with an alias if another LatLng exists: import 'package:latlong2/latlong.dart' as ll2; then use ll2.LatLng(...). This resolves ambiguous/assignability errors. (stackoverflow.com)
    3. Make sure flutter_map_animations and flutter_map versions target the same latlong2 major version — if not, upgrade/downgrade or add a dependency_override for latlong2 (temporarily) so all packages use the same package version. Then run flutter clean && flutter pub get. (docs.fleaflet.dev)
    4. If upgrading to flutter_map v5+ or other major releases, read migration notes — latlong2 had updates (const constructors, version bumps) that can cause small breaking changes. Apply suggested migration fixes (dart fix, update constructors/usages). (docs.fleaflet.dev)

  • If you still get errors: inspect pub deps (flutter pub deps --style=compact) to find multiple latlong/LatLng providers; remove the old latlong package or unify versions. Stack Overflow and flutter_map docs show this is the usual resolution. (stackoverflow.com)

If you want, tell me the pubspec.yaml and exact error message and I’ll give step‑by‑step edits.

Citations:

Upgrade geolocator to version 13.0.4 or later; other new dependencies are stable.

The addition of avatar_glow, flutter_map, flutter_map_animations, and latlong2 aligns well with the live location sharing feature and poses no known security or stability concerns. However, geolocator 13.0.0 has known breaking changes and required multiple bugfix patches (13.0.1–13.0.3). Upgrade to at least 13.0.4+ or the latest stable version (14.x) to avoid compilation issues and benefit from critical fixes. Also ensure web builds are served over HTTPS and audit your app's location permission scopes (foreground vs. background, especially for Android 13+ and iOS 14+).

Also applies to: 47-48, 56-56, 66-66

🤖 Prompt for AI Agents 
In melos.yaml around line 28 (also applies to lines 47-48, 56, and 66), the
project references geolocator 13.0.0 which has known breaking changes and
required bugfixes; update the geolocator dependency entries to at least 13.0.4
or preferably the latest stable 14.x release, ensure the version constraint
reflects a minimum of 13.0.4 (e.g., ^13.0.4 or ^14.0.0), and run pub get to
verify resolution; additionally confirm your web builds are served over HTTPS
and audit Android/iOS location permission scopes (foreground vs background) for
Android 13+ and iOS 14+ to match the updated geolocator behavior.

cached_network_image: ^3.3.1
chewie: ^1.8.1
collection: ^1.17.2
Expand All @@ -43,13 +44,16 @@ command:
file_selector: ^1.0.3
flutter_app_badger: ^1.5.0
flutter_local_notifications: ^18.0.1
flutter_map: ^8.1.1
flutter_map_animations: ^0.9.0
flutter_markdown: ^0.7.2+1
flutter_portal: ^1.1.4
flutter_secure_storage: ^9.2.2
flutter_slidable: ^3.1.1
flutter_svg: ^2.0.10+1
freezed_annotation: ">=2.4.1 <4.0.0"
gal: ^2.3.1
geolocator: ^13.0.0
get_thumbnail_video: ^0.7.3
go_router: ^14.6.2
http_parser: ^4.0.2
Expand All @@ -59,6 +63,7 @@ command:
jose: ^0.3.4
json_annotation: ^4.9.0
just_audio: ">=0.9.38 <0.11.0"
latlong2: ^0.9.1
logging: ^1.2.0
lottie: ^3.1.2
media_kit: ^1.1.10+1
Expand All @@ -79,11 +84,11 @@ command:
share_plus: ">=11.0.0 <13.0.0"
shimmer: ^3.0.0
sqlite3_flutter_libs: ^0.5.26
stream_chat: ^9.20.0
stream_chat_flutter: ^9.20.0
stream_chat_flutter_core: ^9.20.0
stream_chat_localizations: ^9.20.0
stream_chat_persistence: ^9.20.0
stream_chat: ^10.0.0-beta.8
stream_chat_flutter: ^10.0.0-beta.8
stream_chat_flutter_core: ^10.0.0-beta.8
stream_chat_localizations: ^10.0.0-beta.8
stream_chat_persistence: ^10.0.0-beta.8
streaming_shared_preferences: ^2.0.0
svg_icon_widget: ^0.0.1
synchronized: ^3.1.0+1
Expand Down
Loading