Feature/video track selection v2 online repo

.ci/flutter_master.version

@@ -1 +1 @@
-d117642c18e0d5e3a96ae00d4340b1b0724de24c
+fb03253e32ce6aba92872ed9c1224e999ec6abcb

.ci/flutter_stable.version

@@ -1 +1 @@
-2c9eb20739dfec95e2c74bd3dfa4601b0a8a36aa
+db50e20168db8fee486b9abf32fc912de3bc5b6a

.github/remove_cicd.yml

@@ -0,0 +1,65 @@
+# Copyright 2024 The Flutter Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+name: Remove outdated CICD Label
+
+on:
+  pull_request_target:
+    types: [synchronize]
+
+permissions:
+  pull-requests: write
+  issues: write
+
+jobs:
+  remove_cicd_label:
+    if: contains(github.event.pull_request.labels.*.name, 'CICD')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check if label was added before push
+        id: check_timing
+        run: |
+          # Get push time (commit date of the head SHA)
+          PUSH_TIME='${{ github.event.pull_request.updated_at }}'
+          echo "Push time: $PUSH_TIME"
+
+          # Get latest CICD labeling event time from the last 100 events
+          LABEL_TIME=$(gh api graphql -f query='
+            query($owner: String!, $repo: String!, $pr: Int!) {
+              repository(owner: $owner, name: $repo) {
+                pullRequest(number: $pr) {
+                  timelineItems(last: 100, itemTypes: [LABELED_EVENT]) {
+                    nodes {
+                      ... on LabeledEvent {
+                        label { name }
+                        createdAt
+                      }
+                    }
+                  }
+                }
+              }
+            }' -f owner=${{ github.repository_owner }} -f repo=${{ github.event.repository.name }} -F pr=${{ github.event.pull_request.number }} \
+            --jq '.data.repository.pullRequest.timelineItems.nodes | map(select(.label.name == "CICD")) | last | .createdAt')
+          echo "Label time: $LABEL_TIME"
+
+          if [[ -z "$LABEL_TIME" ]]; then
+            # Label exists on PR (checked by job 'if') but not in last 100 events -> must be very old
+            echo "should_remove=true" >> "$GITHUB_OUTPUT"
+            echo "Result: Label found on PR but not in recent timeline events. Assuming it is old."
+          elif [[ "$LABEL_TIME" < "$PUSH_TIME" ]]; then
+            echo "should_remove=true" >> "$GITHUB_OUTPUT"
+            echo "Result: Label added at $LABEL_TIME is older than push at $PUSH_TIME. Removing."
+          else
+            echo "should_remove=false" >> "$GITHUB_OUTPUT"
+            echo "Result: Label added at $LABEL_TIME is newer than or same as push at $PUSH_TIME. Skipping removal."
+          fi
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+
+      - name: Remove outdated CICD label
+        if: steps.check_timing.outputs.should_remove == 'true'
+        run: |
+          gh pr edit ${{ github.event.pull_request.number }} -R ${{ github.repository }} --remove-label "CICD"
+        env:
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/batch_release_pr.yml

@@ -5,10 +5,14 @@ on:
     types: [batch-release-pr]
 
 jobs:
-  create_release_pr:
+  create_batch_release_branch:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Grants write permission to create a branch.
     env:
       BRANCH_NAME: ${{ github.event.client_payload.package }}-${{ github.run_id }}-${{ github.run_attempt }}
+    outputs:
+      branch_created: ${{ steps.check-branch-exists.outputs.exists }}
     steps:
       - name: checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
@@ -36,15 +40,29 @@ jobs:
             echo "exists=false" >> $GITHUB_OUTPUT
           fi
 
-      - name: Create batch release PR
-        if: steps.check-branch-exists.outputs.exists == 'true'
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
+  create_release_pr:
+    needs: create_batch_release_branch
+    if: needs.create_batch_release_branch.outputs.branch_created == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      # The create-pull-request action needs both content and pull-requests permissions.
+      pull-requests: write
+      contents: write
+    env:
+      BRANCH_NAME: ${{ github.event.client_payload.package }}-${{ github.run_id }}-${{ github.run_attempt }}
+    steps:
+      - name: checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: "[${{ github.event.client_payload.package }}] Batch release"
-          title: "[${{ github.event.client_payload.package }}] Batch release"
-          body: "This PR was created automatically to batch release the `${{ github.event.client_payload.package }}`."
-          branch: ${{ env.BRANCH_NAME }}
-          base: release-${{ github.event.client_payload.package }}
+          ref: ${{ env.BRANCH_NAME }}
+      - name: Create batch release PR
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr create \
+            --base "release-${{ github.event.client_payload.package }}" \
+            --head "${{ env.BRANCH_NAME }}" \
+            --title "[${{ github.event.client_payload.package }}] Batch release" \
+            --body "This PR was created automatically to batch release the \`${{ github.event.client_payload.package }}\`."
 
 

.github/workflows/release.yml

@@ -40,7 +40,7 @@ jobs:
     # because there doesn't appear to be anything to wait for. To avoid that,
     # explicitly wait for one LUCI test by name first.
     - name: Wait for test check-in
-      uses: lewagon/wait-on-check-action@74049309dfeff245fe8009a0137eacf28136cb3c
+      uses: lewagon/wait-on-check-action@a08fbe2b86f9336198f33be6ad9c16b96f92799c
       with:
         ref: ${{ github.sha }}
         check-name: 'Linux ci_yaml packages roller'
@@ -52,7 +52,7 @@ jobs:
 
     # This workflow should be the last to run. So wait for all the other tests to succeed.
     - name: Wait on all tests
-      uses: lewagon/wait-on-check-action@74049309dfeff245fe8009a0137eacf28136cb3c
+      uses: lewagon/wait-on-check-action@a08fbe2b86f9336198f33be6ad9c16b96f92799c
       with:
         ref: ${{ github.sha }}
         running-workflow-name: 'release'

.github/workflows/release_from_branches.yml

@@ -5,7 +5,7 @@ on:
       - 'release-go_router'
 jobs:
   release:
-    uses: ./.github/workflows/resuable_release.yml
+    uses: ./.github/workflows/reusable_release.yml
     with:
       is-batch-release: true
       branch-name: '${{ github.ref_name }}'

.github/workflows/reusable_release.yml

@@ -44,7 +44,7 @@ jobs:
     # because there doesn't appear to be anything to wait for. To avoid that,
     # explicitly wait for one LUCI test by name first.
     - name: Wait for test check-in
-      uses: lewagon/wait-on-check-action@74049309dfeff245fe8009a0137eacf28136cb3c
+      uses: lewagon/wait-on-check-action@a08fbe2b86f9336198f33be6ad9c16b96f92799c
       with:
         ref: ${{ github.sha }}
         check-name: 'Linux ci_yaml packages roller'
@@ -56,7 +56,7 @@ jobs:
 
     # This workflow should be the last to run. So wait for all the other tests to succeed.
     - name: Wait on all tests
-      uses: lewagon/wait-on-check-action@74049309dfeff245fe8009a0137eacf28136cb3c
+      uses: lewagon/wait-on-check-action@a08fbe2b86f9336198f33be6ad9c16b96f92799c
       with:
         ref: ${{ github.sha }}
         running-workflow-name: 'release'

.github/workflows/sync_release_pr.yml

@@ -9,17 +9,21 @@ on:
 jobs:
   create_sync_pr:
     runs-on: ubuntu-latest
+    permissions:
+      # The create-pull-request action needs both content and pull-requests permissions.
+      contents: write
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: "Sync ${{ github.ref_name }} to main"
-          title: "Sync ${{ github.ref_name }} to main"
-          body: "This automated PR syncs the changes from the release branch ${{ github.ref_name }} back to the main branch."
-          branch: ${{ github.ref_name }}
-          base: main
-          labels: "post-${{ github.ref_name }}"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr create \
+            --base "main" \
+            --head "${{ github.ref_name }}" \
+            --title "Sync ${{ github.ref_name }} to main" \
+            --body "This automated PR syncs the changes from the release branch ${{ github.ref_name }} back to the main branch." \
+            --label "post-${{ github.ref_name }}"