[dependabot]

Bumps dio, intl, freezed_annotation, drift_dev, injectable_generator, freezed, json_serializable and build_runner. These dependencies needed to be updated together.
Updates dio from 5.9.2 to 5.11.1

Release notes

Sourced from dio's releases.

dio 5.11.1

What's new

• Fix response stream not propagating backpressure to the underlying socket. When a consumer paused the stream, the source subscription was never paused, so the network kept buffering response data into memory, risking OOM on constrained platforms.
• Make the badCertificateCallback pinning test deterministic by pinning a fingerprint that cannot match the served certificate, instead of relying on badssl.com hosts serving different certificates.
• Fix NoSuchMethodError when using a class that implements Interceptor instead of extends Interceptor. The interceptor pipeline was calling private dispatch methods that only exist on Interceptor subclasses, breaking any class using interface implementation.

dio 5.11.0

What's new

• Add query and queryUri convenience methods for the HTTP QUERY method defined in RFC 10008, which allows a request body for safe, idempotent queries.
• Fix FusedTransformer (the default transformer) throwing a FormatException on an empty response body when a custom responseDecoder is set. It now returns an empty result, consistent with SyncTransformer and BackgroundTransformer.
• Fix concurrent requests hanging or reporting uncaught errors when an interceptor shares a failing Future, such as in request deduplication.

dio 5.10.0

What's new

• Fix FormData.readAsBytes excessive memory usage with large payloads by replacing the O(n²) reduce+spread approach with a pre-allocated Uint8List.
• Fix request hanging indefinitely when async interceptor callbacks throw without calling the handler.
• Fix HttpException: Connection closed before full header was received being reported as DioExceptionType.unknown.
• Add transformTimeout to bound long-running response transformations, including background JSON decoding. On web, timeout handling is best-effort because synchronous JavaScript work cannot be preempted.
• Fix FormData.clone() dropping boundaryName and camelCaseContentDisposition, so a retried multipart request now keeps the original options instead of silently falling back to the defaults.
• Fix QueuedInterceptor stalling its queue forever when the active request is cancelled while its callback is still pending (never calls next/resolve/reject), which blocked every subsequent request routed through the interceptor.
• Fix ErrorInterceptorHandler.reject(..., true) not continuing to following error interceptors in queued interceptors.

Commits

• 4684e29 🔖 dio v5.11.1
• 96b10c7 🔖 web_adapter v2.2.2
• 6d18c7c 🔖 http2_adapter v2.9.0
• debe58c ✨ Deprecate misspelled handshakeTimout in favor of handshakeTimeout (#2595)
• 6c1033e 🐛 Expose supportedProtocols on ConnectionManager to fix fallback for RFC-stri...
• 6d39187 💚 Fail web test runs on the first failing compiler round (#2594)
• a3238c3 fix(dio): support classes that implement Interceptor (#2591)
• fd1cca0 fix(web): classify XHR timeout by connection phase (#2593)
• 83fd107 💚 Adopt CI to Flutter 3.47 (#2592)
• a553f46 Update README for clarity and remove star history (#2589)
• Additional commits viewable in compare view

Updates intl from 0.20.2 to 0.20.3

Release notes

Sourced from intl's releases.

package:intl v0.20.3

• Updated the Turkish Lira (TRY) currency symbol in simpleCurrencySymbols from "TL" to "₺" (U+20BA). This ensures accuracy and alignment with the official symbol introduced in 2012.
• Fix parsing of locale strings containing script codes in verifiedLocale. For example, zh-Hans-CN would have been previously parsed as zh, but is now parsed as zh_CN.
• Update the Ghanaian Cedis (GHS) currency symbol in simpleCurrencySymbols from "GHS" to "GH₵(U+20B5)".
• Update to CLDR v48.
• Add @pragma('wasm:prefer-inline') to Intl methods that already have @pragma('vm:prefer-inline'), for the same reason: to help omit message descriptions from compiled output.
• Update analysis to newest package:lints.

Commits

• 22b808d use broader types
• 588013a Upgrade analyzer
• 3be91bc Add @​pragma(wasm:prefer-inline)toIntl` methods (#1060)
• 2ae32fd No public description
• de7e11b No public description
• 3d58541 No public description
• b77c9a7 Change pub run to dart run in README.md (#1044)
• 45f1c20 Merge pull request #1033 from dart-lang:moredocs
• 7aabf9b Hint to use package:intl4x instead of package:intl (#1036)
• fc7c308 Updates to intl4x: bugs and typing (#1035)
• Additional commits viewable in compare view

Updates freezed_annotation from 2.4.4 to 3.1.0

Commits

• 6351730 Don't publish benchmark
• ac7666f freezed_annotation : 3.0.0 -> 3.1.0
• 2c0d0a1 fixes #1261
• 71b51d2 ⚡️ Stop writing // dart format width=80 to the generated freezed files (#1256)
• 05e2bb4 Add when/map back (#1271)
• 170db3b fix markdown link syntax (#1254)
• 9317203 chore: update sponsors.svg
• a42c20c Use built_test 3.2.1, test fixes. (#1266)
• 6f1a033 chore: update sponsors.svg
• 168513b docs: simplify dependency installation commands by grouping packages (#1268)
• Additional commits viewable in compare view

Updates drift_dev from 2.28.0 to 2.28.3

Commits

• b4e8c77 Prepare release
• 02b2421 Update build dependencies
• 35c4797 Stop depending on deprecated build packages
• cdd6150 Fix wasm num cast in legacy web database
• 6ac85ed Fix missing element false positive
• 8bfe305 Also apply to non-shared implementation
• 5c0a08d add isolateDebugLog to DriftNativeOptions
• a981268 Document insertOnConflictUpdate issue
• aca2cad Prepare drift_flutter release
• 3891b66 added initializeDatabase to web options
• Additional commits viewable in compare view

Updates injectable_generator from 2.7.0 to 2.9.1

Commits

• See full diff in compare view

Updates freezed from 2.5.8 to 3.2.3

Commits

• 62eaff9 The following packages have been updated:
• 89d763e Use range for analyzer version (#1302)
• b02955c freezed : 3.2.1 -> 3.2.2
• f49fa4b freezed_lint : 0.0.10 -> 0.0.11
• 2822e04 Update analyzer 8 (#1301)
• 1e359f2 freezed : 3.2.0 -> 3.2.1
• 7ee3153 Handle analyzer 8 (#1300)
• ab94118 Bump actions/setup-node from 4 to 5 (#1297)
• 03f180c chore: update sponsors.svg
• 75230b1 chore: update sponsors.svg
• Additional commits viewable in compare view

Updates json_serializable from 6.9.5 to 6.11.2

Release notes

Sourced from json_serializable's releases.

package:json_serializable v6.11.2

• Allow run_only_if_triggered to be specified in build.yaml to turn on the build_runner triggers heuristic.
• Skip warning about annotations on both constructor and field if the values match.

package:json_serializable v6.11.1

• Allow build: '>=3.0.0 <5.0.0'.
• Allow source_gen: '>=3.1.0 <5.0.0'.

package:json_serializable v6.11.0

• Support JsonKey annotation on constructor parameters.
• Require analyzer: '>=7.4.0 <9.0.0'
• Require dart_style: ^3.0.0
• Require meta: ^1.15.0
• Require source_helper: ^1.3.6
• Require source_gen: ^3.1.0, stop using deprecated TypeChecker.fromRuntime and use the new TypeChecker.typeNamed instead.

package:json_serializable v6.10.0

• Required analyzer: ^7.4.0.
• Switch to analyzer element2 model and build: ^3.0.0-dev.
• Move package:collection to a dev dependency.
• Use new null-aware element feature in generated code.
• Require Dart 3.8

package:json_serializable v6.10.0-dev

• Switch to analyzer element2 model and build: ^3.0.0-dev.
• Move package:collection to a dev dependency.
• Use new null-aware element feature in generated code.
• Require Dart 3.8

Commits

• a9eb6c3 Release 6.11.2. (#1534)
• 8288fa3 Skip warning about duplicate annotations if the values match. (#1532)
• 3c09ab4 Allow an option called run_only_if_triggered. (#1531)
• b7fd5fc Bump the dependencies group with 2 updates (#1529)
• d95430c Allow build 4.0.0. (#1525)
• 8cb173f Bump the dependencies group with 2 updates (#1522)
• 191f06a Release 6.11.0. (#1520)
• c8c3b39 Stop using source_gen TypeChecker.fromRuntime. (#1517)
• 426f5a2 Support latest dependencies (#1516)
• 4298f97 Allow @JsonKey to be used on constructor parameters (#1505)
• Additional commits viewable in compare view

Updates build_runner from 2.5.4 to 2.15.1

Release notes

Sourced from build_runner's releases.

package:build_runner v2.15.1

• Pass Dart SDK --packages arg to builder compiles, so they can be compiled with different packages to the current version solve.
• More efficient watching for file changes in workspaces and other setups with nested packages.
• Support builders with no declared outputs. They can't output anything, but they can do processing, write log messages and choose whether to fail the build.
• Mention in command usage that --define values are parsed as JSON with a fallback.
• Performance: reduce size of serialized build state when there are optional outputs that are not written.
• Bug fix: handle errors from post process builders in previous runs without crashing.
• Bug fix: fix dart run build_runner test to correctly pass arguments after -- to the test process.
• Bug fix: fix crash if a resolved Dart source contains invalid utf8.
• Bug fix: fix incorrect output when builder code changes during builder compile.
• Bug fix: do a clean build when switching between a workspace build and a package build, as incremental builds were sometimes incorrect.
• Require Dart 3.8.0.

package:build_runner v2.15.0

• Remove --low-resources-mode as default memory usage has been improved. If you have problems with RAM usage please file an issue.
• Remove --log-performance and --track-performance. File an issue if you have performance measurement needs not covered by the newer --dart-aot-perf.
• Removed options can still be passed, they will be ignored with a warning.
• Bug fix: fix crash during logging if an asset path is an invalid URI.
• Bug fix: with --workspace the global options affecting build order were read from the wrong package. They are now read from build.yaml in the workspace root, like other global options.
• Allow analyzer 13.0.0.

package:build_runner v2.14.1

• Bug fix: fix crash if a package used to belong to a workspace but was removed from the workspace leaving a stale workspace.ref file.
• Bug fix: the watch command now always does one build before exiting due to a request from another build_runner process. Fix crashes related to request before build start.

package:build_runner v2.14.0

• Performance: further improvements to management of files for analysis for 2x faster incremental builds.
• Performance: default to AOT compilation for commands other than run. This costs more initial startup time but gives faster builds afterwards. Fall back to JIT if the compile fails due to use of dart:mirrors. Use the --force-jit flag if you want the old default JIT builder compile. Use the --force-aot flag to turn off the fallback to JIT compile.

... (truncated)

Commits

• 565856b Release build 4.0.7, build_runner 3.15.1. (#5010)
• 76f0f89 Fix workspace vs package build config conflict (#5008)
• 8921c3f Formatting changes due to latest dev SDK. (#5007)
• e999ea4 Fix incorrect build due to racy builder changes. (#4988)
• d2a2f4f Bump SDK upper bounds. (#5006)
• a72038d Set flattenBuild in passed ReaderWriter. (#5004)
• ea0cf6b fix(build_daemon): reject cross-origin WebSocket handshakes (CSWSH) (#4992)
• ae52e61 Use BuiltList.of instead of BuiltList.from. (#5003)
• a8e949c Fix trigger evaluation reading ungenerated parts. (#5000)
• 39353ef Bump actions/cache from 5.0.5 to 6.1.0 in the github-actions group (#5002)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sourceant]

Code Review Summary

Bumps eight Dart/Flutter dependencies in pubspec.yaml: dio 5.8.0+1→5.11.1, intl 0.20.2→0.20.3, freezed_annotation 2.4.4→3.1.0, freezed 2.5.8→3.2.3, json_serializable 6.9.5→6.11.2, injectable_generator 2.7.0→2.9.1, drift_dev 2.26.1→2.28.3, and build_runner 2.4.15→2.15.1. These build-time and runtime packages must move together because their analyzer and build constraints are interdependent. No application source or generated-code changes are included.

🚀 Key Improvements

• dio 5.11.1 bounds response-transform timeouts and fixes stream backpressure, preventing memory growth on large responses.
• build_runner 2.15.1 speeds up incremental builds and file-change watching, and defaults builders to AOT compilation.
• freezed 3.x and json_serializable 6.11 support newer analyzer versions, easing future dependency updates.

💡 Minor Suggestions

• Review coverage is incomplete. Inspect the execution details before approving.

[sourceant]

Review complete. See the overview comment for a summary.