Bump the flutter-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the flutter-dependencies group with 5 updates in the /app directory:

Package	From	To
build_runner	2.10.5	2.13.1
cupertino_icons	1.0.8	1.0.9
file_picker	10.3.8	10.3.10
freezed	3.2.4	3.2.5
uuid	4.5.2	4.5.3

Updates build_runner from 2.10.5 to 2.13.1

Release notes

Sourced from build_runner's releases.

package:build_runner v2.13.1

• Allow analyzer 11.0.0 and 12.0.0.

Performance improvements

• Performance: speedup of between 1.4x for small initial builds to 4x for large incremental builds. See dart-lang/build#4405 for full benchmark results. Optimizations included: faster management of files for analysis, re-use syntax errors computation, avoid a throw/catch on "not yet generated" source, copy asset graph without a serialization round trip, re-use trigger configuration digest.
• Add --dart-aot-perf flag for profiling on Linux. Use it with --force-aot. It runs the builders under the perf profiling tool which writes to perf.data.
• Add --verbose-durations flag that logs durations with greater precision.
• Improve debugging instructions in README.md.
• Bug fix: fix line wrapping in build_runner args usage output.

package:build_runner v2.12.2

• Bug fix: don't crash if applies_builders in build.yaml mentions an unknown builder.

package:build_runner v2.12.1

• Require build_config 1.3.0.

package:build_runner v2.12.0

• Add support for globs in the package list of workspace pubspec.yaml, matching the new feature in Dart SDK 3.11.
• Support the build_to key added to post_process_builders in build_config 1.3.0. Post process builders can use this to output files to the source tree.
• Bug fix: prevent logging crash when using build_test in a builder.

package:build_runner v2.11.1

• Improve logging on build script build failures, don't repeatedly log an identical failure.
• Bug fix: with --workspace flag, correctly build for sources in the workspace root instead of failing with "tried to delete from package not in the build".

package:build_runner v2.11.0

• Add --workspace flag. Use it with dart run build_runner build or watch to build or watch or all packages in the current workspace. It is currently experimental and subject to change based on feedback, please add feedback at Feedback on --workspace dart-lang/build#4349.
• Bug fix: fix crash in corner case with post process builder, optional builder and output used for --output, watch or serve.
• Bug fix: fix crash in corner case with watch or serve when builders depend on generated files in the current build.

Commits

• b83641f Bump analyzer. (#4407)
• fa791ed Release 2.13.0. (#4405)
• deee829 Lock resolvers for build. (#4403)
• 7fd0737 Add --web flag to benchmark creator. (#4404)
• ee50a88 Cache trigger digest. (#4399)
• a8f5f7c Copy AssetGraph without serializing/deserializing. (#4398)
• 5f025bd Provide a custom FileContentCache to the analyzer. (#4397)
• a215907 Reuse already-computed errors. (#4396)
• eee31aa Increase daemon test timeout. (#4395)
• aab7a70 Use asset graph in AnalysisDriverModel (#4392)
• Additional commits viewable in compare view

Updates cupertino_icons from 1.0.8 to 1.0.9

Commits

• f330175 [cupertino_icons] Remove empty Dart file (#11308)
• 02f231f [various] iOS/macOS example project automigrations (#11227)
• ee460d6 [various] Modernize non-plugin Android example apps (#11168)
• 1e0338b Updated AGP and KGP to align with flutter/flutter templates (#10423)
• e774c2a [flutter_svg] Update README with an example to scale images (#10547)
• 0250616 [ci] Update repo for 3.41 (#11017)
• 7805d3e [flutter_svg] Convert example app to Swift (#10968)
• 9db114f [mustache_template] Improve error throwing (#10700)
• cc3dca6 [all] Omit obvious local types (#10511)
• 22c6056 [various] Replace deprecated Color.value in SVG packages (#10482)
• Additional commits viewable in compare view

Updates file_picker from 10.3.8 to 10.3.10

Release notes

Sourced from file_picker's releases.

10.3.10

Android

• Reverted breaking changes accidentally introduced in 10.3.9 to maintain Semantic Versioning compliance.
• Updated Tika library to resolve vulnerability CVE-2025-66516 and CVE-2025-54988 (Critical XXE vulnerability).

10.3.9

Android

• Updated Apache Tika to 3.2.3 to address CVE-2025-66516 and CVE-2025-54988 (Critical XXE vulnerability).
• Support Gradle 9

Changelog

Sourced from file_picker's changelog.

10.3.10

General

• Reverted breaking changes accidentally introduced in 10.3.9 to maintain Semantic Versioning compliance.

Android

• Updated Tika library to resolve vulnerability CVE-2025-66516 and CVE-2025-54988 (Critical XXE vulnerability).

10.3.9

Android

• Updated Apache Tika to 3.2.3 to address CVE-2025-66516 and CVE-2025-54988 (Critical XXE vulnerability).
• Support Gradle 9

Commits

• 97e4c8d docs: Update Tika vulnerability details in CHANGELOG.md for version 10.3.10.
• 66fedc4 Fix: Update Tika and revert breaking changes (Ref #1953)
• See full diff in compare view

Updates freezed from 3.2.4 to 3.2.5

Commits

• 9494429 freezed : 3.2.4 -> 3.2.5
• 3268f9a Analyzer 10.0
• 0fe515d chore: update sponsors.svg
• 886d4d4 chore: update sponsors.svg
• bcd618b Add readAllSourcesFromFilesystem everywhere
• 1b0c710 chore: update sponsors.svg
• 821021c Format
• f106a44 Disable Freezed_lint CI
• See full diff in compare view

Updates uuid from 4.5.2 to 4.5.3

Release notes

Sourced from uuid's releases.

4.5.3

What's Changed

• Update actions/checkout action to v6 by @​renovate[bot] in daegalus/dart-uuid#138
• Add binary input support for UUIDv5 (RFC 4122/9562 compliant) by @​ljanecek in daegalus/dart-uuid#137
• fix: Remove the experimental annotation from the UuidValue class by @​marcelomendoncasoares in daegalus/dart-uuid#141

New Contributors

• @​ljanecek made their first contribution in daegalus/dart-uuid#137
• @​marcelomendoncasoares made their first contribution in daegalus/dart-uuid#141

Full Changelog: daegalus/dart-uuid@4.5.2...4.5.3

Changelog

Sourced from uuid's changelog.

v4.5.3

• Remove experimental flag on UUIDValue and remote meta dependency. (thanks @​marcelomendoncasoares)
• Add binary support to UUIDv5 (thanks @​ljanecek)

Commits

• e849db3 Update docs and changelog
• 5e01a2d Bump versions
• 4d22900 fix: Remove experimental annotation from UuidValue
• 919cb97 feat: Add binary input support for UUIDv5 (RFC 4122/9562 compliant)
• 452623d Update actions/checkout action to v6
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions