Blokada

Recent Commits

• dependabot[bot] (16 Jun 26)

  build(deps): bump the android-gradle group in /android with 2 updates (#1122) Bumps the android-gradle group in /android with 2 updates: com.google.gms:google-services and com.google.firebase:firebase-bom. Updates `com.google.gms:google-services` from 4.4.4 to 4.5.0 Updates `com.google.firebase:firebase-bom` from 34.14.0 to 34.14.1 --- updated-dependencies: - dependency-name: com.google.gms:google-services dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: com.google.firebase:firebase-bom dependency-version: 34.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: android-gradle ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot] (16 Jun 26)

  build(deps): bump anthropics/claude-code-action (#1121) Bumps the github-actions group with 1 update: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `anthropics/claude-code-action` from 1.0.148 to 1.0.149 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/d5726de019ec4498aa667642bc3a80fca83aa102...4d7e1f0cd85743fdc93b1c8040ab54395da024e2) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.149 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• Karol Gusak (16 Jun 26)

  Merge pull request #1120 from blokadaorg/ci/dependabot-exclude-pigeon-from-group ci(dependabot): exclude pigeon from flutter-dependencies group

• kar (16 Jun 26)

  ci(dependabot): exclude pigeon from flutter-dependencies group The `ignore: pigeon / version-update:semver-major` rule does not keep pigeon out of the recreated *group* PR: when a grouped dep merges, Dependabot recreates the flutter-dependencies group and re-widens the pigeon constraint, re-bumping it to 26.x and going red on the `CommandEvents.setup`→`setUp` break (closed #1106, #1109, #1114). Excluding pigeon from the group keeps the ~18 safe minor/patch bumps unblocked. pigeon minor/patch then gets its own PR; its major stays held by the existing ignore rule. Drop both when the pigeon 26 native Swift/Kotlin codegen migration is scheduled. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• Karol Gusak (16 Jun 26)

  Merge pull request #1117 from blokadaorg/ios/spm-remove-cocoapods ios: remove CocoaPods, embed Flutter module as xcframeworks

• Karol Gusak (16 Jun 26)

  Merge pull request #1116 from blokadaorg/ios/firebase-spm ios: move Firebase to Swift Package Manager

• Karol Gusak (16 Jun 26)

  Merge pull request #1081 from blokadaorg/dependabot/gradle/android/com.google.firebase-firebase-bom-34.14.0 build(deps): bump com.google.firebase:firebase-bom from 33.7.0 to 34.14.0 in /android

• kar (16 Jun 26)

  build(android): drop -ktx suffix from firebase-messaging (firebase-bom 34) firebase-bom 34.0.0 removed the standalone -ktx artifacts, so firebase-messaging-ktx no longer resolves and the assemble fails. FcmService.kt uses only the main com.google.firebase.messaging.* API, so switching to firebase-messaging is behavior-neutral and fixes the build. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• dependabot[bot] (16 Jun 26)

  build(deps): bump the android-gradle group across 1 directory with 20 updates (#1119) Bumps the android-gradle group with 18 updates in the /android directory: | Package | From | To | | --- | --- | --- | | com.google.gms:google-services | `4.4.2` | `4.4.4` | | androidx.core:core-ktx | `1.16.0` | `1.19.0` | | [com.google.android.material:material](https://github.com/material-components/material-components-android) | `1.12.0` | `1.14.0` | | androidx.lifecycle:lifecycle-livedata-ktx | `2.9.1` | `2.10.0` | | androidx.browser:browser | `1.8.0` | `1.10.0` | | [org.jetbrains.kotlinx:kotlinx-coroutines-android](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` | | [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.8.1` | `1.11.0` | | [com.squareup.okhttp3:okhttp-bom](https://github.com/square/okhttp) | `5.3.2` | `5.4.0` | | [net.danlew:android.joda](https://github.com/dlew/joda-time-android) | `2.13.1` | `2.14.2` | | androidx.biometric:biometric-ktx | `1.2.0-alpha05` | `1.4.0-alpha02` | | androidx.datastore:datastore-preferences | `1.1.7` | `1.2.1` | | androidx.annotation:annotation | `1.9.1` | `1.10.0` | | androidx.activity:activity-ktx | `1.10.1` | `1.13.0` | | androidx.fragment:fragment-ktx | `1.8.8` | `1.8.9` | | [io.github.g00fy2.quickie:quickie-bundled](https://github.com/G00fY2/quickie) | `1.11.0` | `1.12.0` | | [io.adapty:adapty-bom](https://github.com/adaptyteam/AdaptySDK-Android) | `3.15.2` | `3.17.1` | | androidx.test.ext:junit | `1.2.1` | `1.3.0` | | androidx.test.espresso:espresso-core | `3.6.1` | `3.7.0` | Updates `com.google.gms:google-services` from 4.4.2 to 4.4.4 Updates `androidx.core:core-ktx` from 1.16.0 to 1.19.0 Updates `com.google.android.material:material` from 1.12.0 to 1.14.0 - [Release notes](https://github.com/material-components/material-components-android/releases) - [Commits](https://github.com/material-components/material-components-android/compare/1.12.0...1.14.0) Updates `androidx.lifecycle:lifecycle-livedata-ktx` from 2.9.1 to 2.10.0 Updates `androidx.lifecycle:lifecycle-viewmodel-ktx` from 2.9.1 to 2.10.0 Updates `androidx.browser:browser` from 1.8.0 to 1.10.0 Updates `org.jetbrains.kotlinx:kotlinx-coroutines-android` from 1.10.2 to 1.11.0 - [Release notes](https://github.com/Kotlin/kotlinx.coroutines/releases) - [Changelog](https://github.com/Kotlin/kotlinx.coroutines/blob/master/CHANGES.md) - [Commits](https://github.com/Kotlin/kotlinx.coroutines/compare/1.10.2...1.11.0) Updates `org.jetbrains.kotlinx:kotlinx-serialization-json` from 1.8.1 to 1.11.0 - [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases) - [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md) - [Commits](https://github.com/Kotlin/kotlinx.serialization/compare/v1.8.1...v1.11.0) Updates `com.squareup.okhttp3:okhttp-bom` from 5.3.2 to 5.4.0 - [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md) - [Commits](https://github.com/square/okhttp/compare/parent-5.3.2...parent-5.4.0) Updates `net.danlew:android.joda` from 2.13.1 to 2.14.2 - [Release notes](https://github.com/dlew/joda-time-android/releases) - [Changelog](https://github.com/dlew/joda-time-android/blob/main/CHANGELOG.md) - [Commits](https://github.com/dlew/joda-time-android/compare/v2.13.1...v2.14.2) Updates `androidx.biometric:biometric-ktx` from 1.2.0-alpha05 to 1.4.0-alpha02 Updates `androidx.datastore:datastore-preferences` from 1.1.7 to 1.2.1 Updates `androidx.annotation:annotation` from 1.9.1 to 1.10.0 Updates `androidx.lifecycle:lifecycle-runtime-ktx` from 2.9.1 to 2.10.0 Updates `androidx.activity:activity-ktx` from 1.10.1 to 1.13.0 Updates `androidx.fragment:fragment-ktx` from 1.8.8 to 1.8.9 Updates `io.github.g00fy2.quickie:quickie-bundled` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/G00fY2/quickie/releases) - [Commits](https://github.com/G00fY2/quickie/compare/1.11.0...1.12.0) Updates `io.adapty:adapty-bom` from 3.15.2 to 3.17.1 - [Release notes](https://github.com/adaptyteam/AdaptySDK-Android/releases) - [Commits](https://github.com/adaptyteam/AdaptySDK-Android/compare/3.15.2...3.17.1) Updates `androidx.test.ext:junit` from 1.2.1 to 1.3.0 Updates `androidx.test.espresso:espresso-core` from 3.6.1 to 3.7.0 --- updated-dependencies: - dependency-name: com.google.gms:google-services dependency-version: 4.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: android-gradle - dependency-name: androidx.core:core-ktx dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: com.google.android.material:material dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.lifecycle:lifecycle-livedata-ktx dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.lifecycle:lifecycle-viewmodel-ktx dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.browser:browser dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: org.jetbrains.kotlinx:kotlinx-coroutines-android dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: com.squareup.okhttp3:okhttp-bom dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: net.danlew:android.joda dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.biometric:biometric-ktx dependency-version: 1.4.0-alpha02 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.datastore:datastore-preferences dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.annotation:annotation dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.lifecycle:lifecycle-runtime-ktx dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.activity:activity-ktx dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.fragment:fragment-ktx dependency-version: 1.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: android-gradle - dependency-name: io.github.g00fy2.quickie:quickie-bundled dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: io.adapty:adapty-bom dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.test.ext:junit dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle - dependency-name: androidx.test.espresso:espresso-core dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: android-gradle ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• Karol Gusak (16 Jun 26)

  Merge pull request #1118 from blokadaorg/chore/android-agp9 build(android): migrate to AGP 9.2.1 + built-in Kotlin + compileSdk 37

• kar (16 Jun 26)

  build(android): drop redundant Kotlin classpath + java.srcDirs (review) Addresses Copilot review feedback on the AGP-9 migration; all verified by rebuilding apk-six-debug + apk-family-debug (both green): - Remove the explicit `kotlin-gradle-plugin` buildscript classpath. With built-in Kotlin it was redundant: the serialization (2.4.0) and KSP (2.3.9) plugins already force kotlin-gradle-plugin to 2.4.0 (AGP's bundled 2.2.10 -> 2.4.0 via conflict resolution), so the line only risked version-skew confusion. - Drop the now-redundant `six.java.srcDirs` entries for the Kotlin-only dirs src/engine/kotlin and wireguard-android/ui/src/main/java (both 0 .java files); they compile via kotlin.srcDirs under built-in Kotlin. Also revert the stray debug.kotlin.srcDirs for src/mock/kotlin (that dir is empty). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  build(android): migrate to AGP 9.2.1 + built-in Kotlin + compileSdk 37 Moves the Android app off AGP 8.13.0 so the androidx 1.19/activity-1.13 generation (and Adapty's Compose-based paywall UI) can resolve. This is the toolchain prerequisite for the android-gradle Dependabot group (#1100), which fails on AGP 8 because androidx.core 1.19.0 requires AGP >=9.1.0 + compileSdk 37. Supersedes the standalone AGP bump (#1080). What AGP 9 forced, each verified by building both flavors (apk-six-debug + apk-family-debug, matching CI): - AGP 8.13.0 -> 9.2.1; compileSdk 35 -> 37 (needs SDK platform android-37.0). - Built-in Kotlin is mandatory at 9.2.1: the external `kotlin-android` plugin is rejected (builtInKotlin=false / newDsl=false bypasses no longer work), so it's removed and Kotlin is supplied by AGP. Aligns the Kotlin toolchain to 2.4.0 (kotlin-gradle-plugin, kotlin-stdlib), KSP 2.3.9 and serialization 2.4.0 so they're built-in-Kotlin compatible; safe-args gradle plugin 2.8.9 -> 2.9.8. - Built-in Kotlin only compiles `kotlin.srcDirs`, not `java.srcDirs`; the custom Kotlin dirs (src/engine/kotlin, wireguard-android/ui, src/mock/kotlin) are now registered as kotlin.srcDirs (default src/<flavor>/kotlin already auto-included). - AGP 9 drops getDefaultProguardFile('proguard-android.txt') -> '-optimize.txt'. - adapty-ui pulls androidx.compose.* unversioned; under AGP 9 the consumer must supply them, so add a Compose BOM to the six flavor (we don't author Compose). App dependency bumps (androidx core/activity/etc., adapty-bom 3.17.1) stay out of this PR; recreate #1100 on top once this lands. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  chore: drop dead pod permissions from .claude/settings.json `pod install` / `pod update` are gone with the CocoaPods removal, so the permission grants are dead. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  ios: drop dead CocoaPods block from .gitignore The Pods/ ignore was already commented out and there is no CocoaPods in the project anymore, so the boilerplate block is dead. Cleanup for the CocoaPods removal. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  docs: fix stale mocked-flow description in SIMULATOR.md The mocked dart-defines are now baked into a prebuilt App.xcframework via --dart-define-from-file, not passed to xcodebuild, and there is no more pod install. Addresses Copilot review feedback on the prose that still described the CocoaPods-era mechanism. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  ios: remove CocoaPods, embed Flutter module as xcframeworks Completes the migration off CocoaPods. The Flutter add-to-app module is now consumed as prebuilt xcframeworks instead of via podhelper, and the host Xcode project carries no CocoaPods integration at all. What changed: - `make -C common build-ios` now runs `flutter build ios-framework`, producing Flutter/App/FlutterPluginRegistrant + per-plugin + Adapty xcframeworks under common/build/ios-framework/<config>/. - The 6 app targets (Dev/Prod/Mocked + Family*) link all 12 xcframeworks and embed (Embed & Sign) the 11 dynamic ones via $(CONFIGURATION) file refs; FlutterPluginRegistrant is a static library so it is linked only, not embedded (embedding a static framework fails App Store upload validation). FRAMEWORK_SEARCH_PATHS already pointed at the output dir. `GeneratedPluginRegistrant` comes from the linked FlutterPluginRegistrant (App/Binding/Flutter.swift). - `pod deintegrate` removed all [CP]/[CP-User] build phases, Pods xcconfig base configs and Pods framework linking; deleted Podfile, Podfile.lock and the Pods.xcodeproj workspace ref; dropped the leftover empty Pods group. - Mocked simulator flow reworked: since Dart is now prebuilt (no host Flutter build phase), run-mocked-app builds a mocked App.xcframework with --dart-define-from-file (keeps ACCOUNT_ID out of argv) before the host build. - Tooling: cocoapods removed from Gemfile/Gemfile.lock (fastlane kept); pod steps dropped from ios/Makefile and CI (ci/appium-smoke/appium-ai-explore); Podfile.lock removed from check-adapty-fallback triggers and the dependabot / dep-validate allowlists; dep-validate now surfaces the active SPM pins from project.pbxproj instead of Podfile.lock. Docs updated (BUILDING.md, AGENTS.md, SIMULATOR.md). Verified on simulator: all 6 targets build; Dev launches and renders Flutter (Dart VM up, Adapty SDK activates, plugins register) with Firebase active; the Mocked flavor boots into the mocked main UI, confirming the dart-define reaches the prebuilt framework. No CocoaPods/Ruby needed for the iOS build path. Second of two staged PRs for blokadaorg/issue-tracker#317. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• Johnny Bergström (16 Jun 26)

  ci(dependabot-auto-merge): capture verdict via structured output; pin action (#1115) Mirror the upstream reusable workflow fix (blokadaorg/workflows) into this vendored copy. - replace the model-written /tmp/decision.txt with the action schema-validated structured_output (--json-schema); drop the Write tool. Fixes the intermittent ABSTAIN where Claude finished successfully but produced no decision file. - drop the github-actions human-review carve-out: those bumps now flow through the normal path (major-bump gate + Claude review). No publisher classification. - pin claude-code-action to the v1.0.148 release commit SHA (the step receives secrets + id-token); Dependabot bumps the SHA via discrete PRs. Co-authored-by: Claude Opus 4.8 <[email protected]>

• Karol Gusak (16 Jun 26)

  Merge pull request #1110 from blokadaorg/dependabot/pub/common/unique_names_generator-3.1.2 build(deps): bump unique_names_generator from 1.1.0 to 3.1.2 in /common

• kar (16 Jun 26)

  ios: move Firebase to Swift Package Manager Add firebase-ios-sdk via SPM (XCRemoteSwiftPackageReference, upToNextMajor from 12.12.0) and link FirebaseCore + FirebaseMessaging into the Dev, Prod and Mocked targets, mirroring the existing Factory/CodeScanner SPM setup. Drop the FirebaseCore/FirebaseMessaging pod declarations from the Podfile so they (and their transitive pods: FirebaseCoreInternal, FirebaseInstallations, GoogleDataTransport, GoogleUtilities, nanopb, PromisesObjC) leave Podfile.lock. AppDelegate's `#if canImport(FirebaseCore)` / `canImport(FirebaseMessaging)` guards are unchanged and resolve against the SPM modules. Verified: Dev/Prod/ Mocked build on the simulator with FIRApp/FIRMessaging statically linked and the Firebase resource bundles embedded; FamilyDev (no Firebase) still builds. Podfile.lock also picks up pre-existing drift (shared_preferences_foundation, refreshed Flutter/FlutterPluginRegistrant checksums) because the committed lock was stale vs the current plugin set; this is what `pod install` now produces. First of two staged PRs for blokadaorg/issue-tracker#317; the Flutter module stays on CocoaPods until PR 2. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• kar (16 Jun 26)

  fix(family): rename Config seperator→separator for unique_names_generator 3.x unique_names_generator 2.0.0 renamed the Config named param seperator→separator ("fix typo"); 1110 bumps 1.1.0→3.1.2 so the existing caller no longer compiles. One-line caller rename; behavior unchanged (length:1 makes the separator unused). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• Karol Gusak (16 Jun 26)

  Merge pull request #1111 from blokadaorg/dependabot/pub/common/syncfusion_flutter_charts-33.2.12 build(deps): bump syncfusion_flutter_charts from 28.2.12 to 33.2.12 in /common

• Karol Gusak (16 Jun 26)

  Merge pull request #1112 from blokadaorg/dependabot/pub/common/get_it-9.2.1 build(deps): bump get_it from 7.7.0 to 9.2.1 in /common

• Karol Gusak (16 Jun 26)

  Merge pull request #1113 from blokadaorg/dependabot/pub/common/flutter_lints-6.0.0 build(deps): bump flutter_lints from 2.0.3 to 6.0.0 in /common

• Karol Gusak (16 Jun 26)

  Merge pull request #1103 from blokadaorg/deps/adapty-3.17 build(deps): bump adapty_flutter from 3.11.4 to 3.17.0

• dependabot[bot] (15 Jun 26)

  build(deps): bump the appium-wdio-npm group across 1 directory with 7 updates (#1101) Bumps the appium-wdio-npm group with 6 updates in the /automation/appium/wdio directory: | Package | From | To | | --- | --- | --- | | [@wdio/cli](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-cli) | `9.27.2` | `9.28.0` | | [@wdio/globals](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-globals) | `9.27.2` | `9.28.0` | | [@wdio/local-runner](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-local-runner) | `9.27.2` | `9.28.0` | | [@wdio/mocha-framework](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-mocha-framework) | `9.27.2` | `9.28.0` | | [@wdio/spec-reporter](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-spec-reporter) | `9.27.2` | `9.28.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `25.9.3` | Updates `@wdio/cli` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/wdio-cli) Updates `@wdio/globals` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/wdio-globals) Updates `@wdio/local-runner` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/wdio-local-runner) Updates `@wdio/mocha-framework` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/wdio-mocha-framework) Updates `@wdio/spec-reporter` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/wdio-spec-reporter) Updates `webdriverio` from 9.27.2 to 9.28.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v9.28.0/packages/webdriverio) Updates `@types/node` from 25.9.2 to 25.9.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: appium-wdio-npm - dependency-name: "@wdio/cli" dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm - dependency-name: "@wdio/globals" dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm - dependency-name: "@wdio/local-runner" dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm - dependency-name: "@wdio/mocha-framework" dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm - dependency-name: "@wdio/spec-reporter" dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm - dependency-name: webdriverio dependency-version: 9.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: appium-wdio-npm ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot] (15 Jun 26)

  build(deps): bump esbuild (#1099) Bumps the appium-wdio-npm-security group with 1 update in the /automation/appium/wdio directory: [esbuild](https://github.com/evanw/esbuild). Updates `esbuild` from 0.25.11 to 0.28.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](https://github.com/evanw/esbuild/compare/v0.25.11...v0.28.1) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.28.1 dependency-type: indirect dependency-group: appium-wdio-npm-security ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• Karol Gusak (15 Jun 26)

  Merge pull request #1097 from blokadaorg/dep-validate-skill Add dep-validate skill for risky dependency bumps

• kar (15 Jun 26)

  build(deps): compile adapty_flutter at JVM 11 to fix Android AAR build adapty_flutter 3.17.0 (latest) pins kotlinOptions.jvmTarget = '1.8', but its native Adapty Android SDK (io.adapty:android-ui via adapty-bom 3.17.1) is built for JVM 11 and exposes inline functions used by the native paywall/onboarding views. Kotlin refuses to inline JVM-11 bytecode into a JVM-1.8 target, so `flutter build aar` fails at :adapty_flutter:compileReleaseKotlin ("Cannot inline bytecode built with JVM target 11 ... built with JVM target 1.8"). Override the dependency to a blokadaorg fork of the 3.17.0 tag that only raises the plugin's compile target to JVM 11. Remove once upstream ships the fix: https://github.com/adaptyteam/AdaptySDK-Flutter Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

• dependabot[bot] (15 Jun 26)

  build(deps): bump flutter_lints from 2.0.3 to 6.0.0 in /common Bumps [flutter_lints](https://github.com/flutter/packages/tree/main/packages) from 2.0.3 to 6.0.0. - [Commits](https://github.com/flutter/packages/commits/flutter_lints-v6.0.0/packages) --- updated-dependencies: - dependency-name: flutter_lints dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

• dependabot[bot] (15 Jun 26)

  build(deps): bump get_it from 7.7.0 to 9.2.1 in /common Bumps [get_it](https://github.com/flutter-it/get_it) from 7.7.0 to 9.2.1. - [Release notes](https://github.com/flutter-it/get_it/releases) - [Changelog](https://github.com/flutter-it/get_it/blob/main/CHANGELOG.md) - [Commits](https://github.com/flutter-it/get_it/commits) --- updated-dependencies: - dependency-name: get_it dependency-version: 9.2.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>