chore(release): prepare for 3.38.2

Co-authored-by: verified-commit[bot] <180343340+verified-commit[bot]@users.noreply.github.com>

.gitattributes

@@ -0,0 +1,2 @@
+# Normalize all text files to LF in repo, checkout CRLF on Windows
+* text=auto eol=lf

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,127 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity
+and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+* Demonstrating empathy and kindness toward other people
+* Being respectful of differing opinions, viewpoints, and experiences
+* Giving and gracefully accepting constructive feedback
+* Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+* Focusing on what is best not just for us as individuals, but for the
+  overall community
+
+Examples of unacceptable behavior include:
+
+* The use of sexualized language or imagery, and sexual attention or
+  advances of any kind
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or email
+  address, without their explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official e-mail address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement at [Insert contact method].
+All complaints will be reviewed and investigated promptly and fairly.
+
+All community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community Impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community Impact**: A violation through a single incident or series
+of actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or
+permanent ban.
+
+### 3. Temporary Ban
+
+**Community Impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent Ban
+
+**Community Impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior, harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within
+the community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.0, available at
+https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
+
+Community Impact Guidelines were inspired by [Mozilla's code of conduct
+enforcement ladder](https://github.com/mozilla/diversity).
+
+[homepage]: https://www.contributor-covenant.org
+
+For answers to common questions about this code of conduct, see the FAQ at
+https://www.contributor-covenant.org/faq. Translations are available at
+https://www.contributor-covenant.org/translations.

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Desktop (please complete the following information):**
+ - OS: [e.g. iOS]
+ - Browser [e.g. chrome, safari]
+ - Version [e.g. 22]
+
+**Smartphone (please complete the following information):**
+ - Device: [e.g. iPhone6]
+ - OS: [e.g. iOS8.1]
+ - Browser [e.g. stock browser, safari]
+ - Version [e.g. 22]
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/renovate.json

@@ -26,7 +26,7 @@
         "^Dockerfile$"
       ],
       "matchStrings": [
-        "#\\s*renovate:\\s*release=(?<release>.*?) depName=(?<depName>.*?)\\sARG .*?_VERSION=\"(?<currentValue>.*)\"\\s"
+        "#\\s*renovate:\\s*suite=(?<suite>.*?) depName=(?<depName>.*?)\\sARG .*?_VERSION=\"(?<currentValue>.*)\"\\s"
       ],
       "registryUrlTemplate": "https://deb.debian.org/debian?{{#if release }}release={{release}}{{else}}suite=stable{{/if}}&components=main,contrib,non-free&binaryArch=amd64",
       "datasourceTemplate": "deb"

.github/workflows/build.yml

@@ -18,17 +18,17 @@ jobs:
       # Allow to write pull requests for the docker/scout-action to write a comment
       pull-requests: write
       # Allow to write security events for github/codeql-action/upload-sarif to upload SARIF results
-      security-events: write 
+      security-events: write
     runs-on: ubuntu-24.04
     env:
       IMAGE_REPOSITORY_NAME: flutter-android
       VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -39,7 +39,7 @@ jobs:
             return await script({ core })
 
       - name: Load image metadata
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         id: metadata
         with:
           images: |
@@ -48,10 +48,10 @@ jobs:
             type=raw,value=${{ env.FLUTTER_VERSION }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Login to Docker Hub
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
@@ -83,7 +83,7 @@ jobs:
       # TODO: Parallelize testing and vulnerability scanning
       - name: Scan with Docker Scout
         id: docker-scout
-        uses: docker/scout-action@aceeb83b88f2ae54376891227858dda7af647183 # v1.18.1
+        uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
         with:
           command: compare, recommendations
           # Use the Docker Hub image that is the first tag in the metadata
@@ -102,14 +102,14 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup CUE
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Validate version.json and flutter_version.json with CUE
         run: |
@@ -120,14 +120,14 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup CUE
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Generate test files with CUE
         run: |
@@ -142,14 +142,25 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          ref: ${{ github.head_ref }}
+
       - name: Setup NodeJS
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           cache: npm
           cache-dependency-path: docs/src/package-lock.json
-          node-version-file: docs/src/package.json
+          node-version: lts/*
+
+      - name: Generate authentication token with GitHub App to trigger Actions
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+        id: app-token
+        with:
+          app-id: ${{ secrets.VERIFIED_COMMIT_ID }}
+          private-key: ${{ secrets.VERIFIED_COMMIT_KEY }}
+          repositories: ${{ github.event.repository.name }}
+          owner: ${{ github.repository_owner }}
 
       - name: Update documentation
         working-directory: docs/src
@@ -157,10 +168,13 @@ jobs:
           npm ci --prefer-offline
           npm run build
 
-      - name: Check if there are any changes in the git working tree
-        run: |
-          git add -A  
-          git diff --exit-code HEAD
+      - name: Commit and push documentation
+        uses: grafana/github-api-commit-action@b1d81091e8480dd11fcea8bc1f0ab977a0376ca5 # v1.0.0
+        with:
+          commit-message: 'docs: generate documentation files'
+          success-if-no-changes: true
+          stage-all-files: true
+          token: ${{ steps.app-token.outputs.token }}
 
   test_gradle:
     permissions:
@@ -174,13 +188,13 @@ jobs:
         password: ${{ github.token }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Read version.json
         id: version-json
         run: |
           {
-            echo "content<<EOF" 
+            echo "content<<EOF"
             cat ./config/version.json
             echo "EOF"
           } >> $GITHUB_OUTPUT
@@ -210,8 +224,8 @@ jobs:
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Validate version.json with CUE
         run: cue vet config/version.cue -d '#Version' config/version.json

.github/workflows/changelog.yml

@@ -14,7 +14,7 @@ jobs:
       VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           # TODO: Fetch only a few commits after using --unreleased in git-cliff
           # Fetch all commits to use as input for the changelog generation
@@ -26,11 +26,11 @@ jobs:
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: orhun/git-cliff
-          tag: v2.8.0
-          digest: 17da092783079c63a0fb14c24fbfa0d3b589e225c6ef01c93111e39cecbc88e8
+          tag: v2.10.1
+          digest: 6abe8a3e112b266dd00abf9089a8052ddf7314f39e1c53e192edf0652abca4eb
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -45,7 +45,7 @@ jobs:
           git-cliff -v --tag ${{ env.FLUTTER_VERSION }} --github-repo ${{ github.repository }} --output changelog.md
       
       - name: Generate authentication token with GitHub App to trigger Actions
-        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.VERIFIED_COMMIT_ID }}

.github/workflows/ci.yml

@@ -21,10 +21,10 @@ jobs:
       ANDROID_BUILD_TOOLS_VERSION: 30.0.3
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Login to Docker Hub
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
@@ -33,11 +33,11 @@ jobs:
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -48,7 +48,7 @@ jobs:
             return await script({ core })
 
       - name: Load image metadata
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         id: metadata
         with:
           images: |
@@ -57,7 +57,7 @@ jobs:
             type=raw,value=${{ env.FLUTTER_VERSION }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Build image and push to local Docker daemon
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
@@ -82,4 +82,3 @@ jobs:
         with:
           image: ${{ fromJSON(steps.metadata.outputs.json).tags[0] }}
           config: test/android.yml
-  

.github/workflows/release.yml

@@ -1,20 +1,21 @@
 on:
   push:
     tags:
-    - '*'
+      - '*'
   workflow_dispatch:
 
 # Read-only permissions by default
 permissions:
   contents: read
 
+env:
+  FLUTTER_VERSION: ${{ github.ref_name }}
+
 jobs:
   release_android:
     permissions:
       # Allow to write packages to push the container image to the Github Container Registry
       packages: write
-      # Allow to write security events to upload the results to code-scanning dashboard.
-      security-events: write
     runs-on: ubuntu-24.04
     env:
       IMAGE_REPOSITORY_NAME: flutter-android
@@ -22,10 +23,10 @@ jobs:
       VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -36,7 +37,7 @@ jobs:
             return await script({ core })
 
       - name: Load image metadata
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         id: metadata
         with:
           images: |
@@ -47,28 +48,28 @@ jobs:
             type=raw,value=${{ env.FLUTTER_VERSION }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Login to Docker Hub
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
       - name: Login to Quay.io
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
           password: ${{ secrets.QUAY_ROBOT_TOKEN }}
-      
+
       - name: Build image and push it to registries
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
@@ -87,8 +88,29 @@ jobs:
             android_ndk_version=${{ env.ANDROID_NDK_VERSION }}
             cmake_version=${{ env.CMAKE_VERSION }}
 
+  update_description:
+    runs-on: ubuntu-24.04
+    needs: release_android
+    env:
+      IMAGE_REPOSITORY_NAME: flutter-android
+      VERSION_MANIFEST: config/version.json
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Read environment variables from the version manifest
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
+          IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
+          VERSION_MANIFEST: ${{ env.VERSION_MANIFEST }}
+        with:
+          script: |
+            const script = require('./script/setEnvironmentVariables.js')
+            return await script({ core })
+
       - name: Update Docker Hub description
-        uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2
+        uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
@@ -96,20 +118,49 @@ jobs:
           short-description: ${{ github.event.repository.description }}
           readme-filepath: readme.md
 
+  record_image:
+    permissions:
+      # Allow to write code scanning results to GitHub's code scanning dashboard
+      security-events: write
+    runs-on: ubuntu-24.04
+    needs: release_android
+    env:
+      IMAGE_REPOSITORY_NAME: flutter-android
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+
       - name: Record image in Docker Scout environment
-        id: docker-scout-environment
-        uses: docker/scout-action@aceeb83b88f2ae54376891227858dda7af647183 # v1.18.1
+        uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
         with:
           command: environment, cves
-          # Use the Docker Hub image that is the first tag in the metadata
-          image: registry://${{ fromJson(steps.metadata.outputs.json).tags[0] }}
+          image: registry://${{ github.repository_owner }}/${{ env.IMAGE_REPOSITORY_NAME }}:${{ env.FLUTTER_VERSION }}
           environment: prod
           only-fixed: true
           organization: ${{ secrets.DOCKER_HUB_USERNAME }}
           sarif-file: sarif.json
-      
+
+      - name: Upload the results to GitHub's code scanning dashboard
+        uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        with:
+          sarif_file: sarif.json
+
+  set_bootstrap_image:
+    runs-on: ubuntu-24.04
+    needs: release_android
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
       - name: Generate authentication token with GitHub App to trigger Actions
-        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.VERIFIED_COMMIT_ID }}
@@ -122,37 +173,43 @@ jobs:
         env:
           GH_TOKEN: ${{ steps.app-token.outputs.token }}
 
-      # Upload the results to GitHub's code scanning dashboard (optional).
-      # Commenting out will disable upload of results to your repo's Code Scanning dashboard
-      - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+  create_github_release:
+    permissions:
+      # Allow to create releases and upload assets to them
+      contents: write
+    runs-on: ubuntu-24.04
+    needs: release_android
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
-          sarif_file: sarif.json
+          # TODO: Fetch only a few commits after using --unreleased in git-cliff
+          # Fetch all commits to use as input for the changelog generation
+          fetch-depth: 0
+          # Fetch all tags to use as input for the changelog generation
+          fetch-tags: true
 
-      # TODO: Use kaniko for building and pushing after slowness is solved
-      # TODO: https://github.com/GoogleContainerTools/kaniko/issues/970
-      # TODO: https://github.com/GoogleContainerTools/kaniko/issues/875
-      # TODO: Use kaniko for building and pushing after pushing to Docker daemon is solved, to be able to test Docker image, with the following issues
-      # TODO: https://github.com/GoogleContainerTools/kaniko/issues/1331
-      # - name: Build image and push it to registries
-      #   uses: int128/kaniko-action@v1
-      #   with:
-      #     push: true
-      #     cache: true
-      #     cache-repository: ${{ steps.ecr-cache.outputs.repository-uri }}
-      #     tags: ${{ steps.metadata.outputs.tags }}
-      #     labels: ${{ steps.metadata.outputs.labels }}
-      #     build-args: |
-      #       flutter_version=${{ env.FLUTTER_VERSION }}
-      #       android_build_tools_version=${{ env.ANDROID_BUILD_TOOLS_VERSION }}
-      #       android_platform_versions=${{ env.ANDROID_PLATFORM_VERSIONS }}
-      #     kaniko-args: |
-      #       --skip-unused-stages=true
-      #       --use-new-run=true
-      #       --snapshotMode=redo
-      #     target: android
-      #     executor: gcr.io/kaniko-project/executor:latest
-# TODO: https://github.com/snok/container-retention-policy
-# TODO: Push a build image before the final image
-# TODO: Run basic tests with build image
-# TODO: Push final image only if tests pass https://redhat-cop.github.io/ci/publishing-images.html
+      - name: Setup git-cliff
+        uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
+        with:
+          repo: orhun/git-cliff
+          tag: v2.10.1
+          digest: 6abe8a3e112b266dd00abf9089a8052ddf7314f39e1c53e192edf0652abca4eb
+
+      - name: Get the tag details
+        id: get-tag-details
+        run: |-
+          # Store the changelog in a temporary directory to not pollute the working directory
+          mkdir -p "${{ runner.temp }}/git-cliff"
+          changelog_file="${{ runner.temp }}/git-cliff/changelog.md"
+          echo "changelog_file=${changelog_file}" >>$GITHUB_OUTPUT
+
+          git-cliff -v --latest --strip all --no-exec --github-repo "${{ github.repository }}" --output "$changelog_file"
+
+      - name: Create Github release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |-
+          gh release create "${{ env.FLUTTER_VERSION }}" \
+            --title="${{ env.FLUTTER_VERSION }}" \
+            --notes-file="${{ steps.get-tag-details.outputs.changelog_file }}"

.github/workflows/scorecard.yml

@@ -34,12 +34,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -61,7 +61,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: SARIF file
           path: results.sarif
@@ -70,6 +70,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           sarif_file: results.sarif

.github/workflows/tag.yml

@@ -9,12 +9,15 @@ on:
 jobs:
   create_git_tag:
     runs-on: ubuntu-24.04
+    env:
+      IMAGE_REPOSITORY_NAME: flutter-android
+      VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Generate authentication token with GitHub App to trigger Actions
-        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.VERIFIED_COMMIT_ID }}
@@ -23,7 +26,7 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -34,7 +37,7 @@ jobs:
             return await script({ core })
       
       - name: Create Tag for a New Flutter Version
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           OLD_FLUTTER_VERSION: ${{ vars.FLUTTER_VERSION }}
           NEW_FLUTTER_VERSION: ${{ env.FLUTTER_VERSION }}

.github/workflows/update_version.yml

@@ -20,11 +20,11 @@ jobs:
       flutter_version_artifact_id: ${{ steps.upload-version.outputs.artifact-id }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Update latest Flutter version
         id: update_flutter_version
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const script = require('./script/updateFlutterVersion.js')
@@ -35,8 +35,8 @@ jobs:
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Validate version.json with CUE
         if: ${{ steps.update_flutter_version.outputs.result == 'true' }}
@@ -45,11 +45,11 @@ jobs:
       - name: Upload artifact with the new Flutter version
         if: ${{ steps.update_flutter_version.outputs.result == 'true' }}
         id: upload-version
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: flutter_version.json
           path: config/flutter_version.json
-  
+
   update_android_version:
     permissions:
       # Allow to write contents to push commits
@@ -62,6 +62,7 @@ jobs:
     if: ${{ needs.update_flutter_version.outputs.new_version == 'true' }}
     outputs:
       version_artifact_id: ${{ steps.upload-version.outputs.artifact-id }}
+      android_test_artifact_id: ${{ steps.upload-android-test.outputs.artifact-id }}
     runs-on: ubuntu-24.04
     container:
       image: ghcr.io/${{ github.repository_owner }}/flutter-android:${{ vars.FLUTTER_VERSION }}
@@ -70,7 +71,7 @@ jobs:
         password: ${{ github.token }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       # TODO: Workaround because actions/download-artifact can't overwrite existing files
       # Check if this workaround can be removed after the following issues are fixed:
@@ -80,22 +81,20 @@ jobs:
         run: rm config/flutter_version.json
 
       - name: Download artifact with the new Flutter version
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           artifact-ids: ${{ needs.update_flutter_version.outputs.flutter_version_artifact_id }}
           path: config
-          # Download to the configured path instead of separated directories by artifact id
-          merge-multiple: true
 
       - name: Copy Flutter version into version manifest and export FLUTTER_* environment variables
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const script = require('./script/copyFlutterVersion.js')
             await script({core})
 
       - name: Update latest Fastlane version
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const script = require('./script/updateFastlaneVersion.js')
@@ -123,19 +122,37 @@ jobs:
         run: |
           rm -rf test_app
 
+      - name: Setup CUE
+        uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
+        with:
+          repo: cue-lang/cue
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
+
+      - name: Generate test files with CUE
+        run: |
+          ./script/update_test.sh
+
       - name: Upload artifact with the updated version.json
         id: upload-version
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: version.json
           path: config/version.json
 
+      - name: Upload the test artifact for Android
+        id: upload-android-test
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: android.yml
+          path: test/android.yml
+
   validate_config_version:
     needs: update_android_version
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       # TODO: Workaround because actions/download-artifact can't overwrite existing files
       # Check if this workaround can be removed after the following issues are fixed:
@@ -145,25 +162,24 @@ jobs:
         run: rm config/version.json
 
       - name: Download artifact with the new Flutter version
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           artifact-ids: ${{ needs.update_android_version.outputs.version_artifact_id }}
           path: config
-          # Download to the configured path instead of separated directories by artifact id
-          merge-multiple: true
 
       - name: Setup CUE
         uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # v2.1.0
         with:
           repo: cue-lang/cue
-          tag: v0.13.0
-          digest: 59ba96137da07cd2cdd2e17ec33af81f850126f022f25dd96516f0b42071b6a9
+          tag: v0.15.0
+          digest: 06925fc1e5174591cef0b1e42ac32cff4271804742cd20893de1793b6d82d460
 
       - name: Validate version.json with CUE
         run: cue vet config/version.cue -d '#Version' config/version.json
 
   update_docs_and_create_pr:
     needs:
+      - update_flutter_version
       - update_android_version
       - validate_config_version
     runs-on: ubuntu-24.04
@@ -172,29 +188,36 @@ jobs:
       VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       # TODO: Workaround because actions/download-artifact can't overwrite existing files
       # Check if this workaround can be removed after the following issues are fixed:
       # https://github.com/actions/download-artifact/issues/225
       # https://github.com/actions/download-artifact/issues/138
-      - name: Delete version.json
-        run: rm config/version.json
+      - name: Delete flutter_version.json and version.json
+        run: |-
+          rm config/flutter_version.json config/version.json test/android.yml
 
-      - name: Download artifact with the new Flutter version
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - name: Download configuration artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
-          artifact-ids: ${{ needs.update_android_version.outputs.version_artifact_id }}
+          artifact-ids: ${{ needs.update_flutter_version.outputs.flutter_version_artifact_id }},${{ needs.update_android_version.outputs.version_artifact_id }}
           path: config
           # Download to the configured path instead of separated directories by artifact id
           merge-multiple: true
 
+      - name: Download test artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          artifact-ids: ${{ needs.update_android_version.outputs.android_test_artifact_id }}
+          path: test
+
       - name: Setup NodeJS
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           cache: npm
           cache-dependency-path: docs/src/package-lock.json
-          node-version-file: docs/src/package.json
+          node-version: lts/*
 
       - name: Update documentation
         working-directory: docs/src
@@ -203,7 +226,7 @@ jobs:
           npm run build
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}
@@ -211,21 +234,21 @@ jobs:
         with:
           script: |
             const script = require('./script/setEnvironmentVariables.js')
-            return await script({ core })      
+            return await script({ core })
 
       - name: Create commit message variable
         run: |
-          echo "COMMIT_MESSAGE=chore(release): update flutter dependencies in version.json for ${{ env.FLUTTER_VERSION }}" >> $GITHUB_ENV
+          echo "COMMIT_MESSAGE=chore(release): upgrade flutter to ${{ env.FLUTTER_VERSION }}" >> $GITHUB_ENV
 
       - name: Generate authentication token with GitHub App to trigger Actions
-        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.VERIFIED_COMMIT_ID }}
           private-key: ${{ secrets.VERIFIED_COMMIT_KEY }}
           repositories: ${{ github.event.repository.name }}
           owner: ${{ github.repository_owner }}
-      
+
       # TODO: Generate changelog for the new flutter version, that will be the new tag
       - name: Create pull request if there are changes
         uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8

.github/workflows/windows.yml

@@ -25,16 +25,16 @@ jobs:
       VERSION_MANIFEST: config/version.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Login to Docker Hub
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
 
       - name: Read environment variables from the version manifest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }}
           IMAGE_REPOSITORY_NAME: ${{ env.IMAGE_REPOSITORY_NAME }}

LICENSE.md

@@ -2,7 +2,7 @@
 
 MIT License
 
-Copyright (c) 2023-2025 Eligio Alejandro Mariño Garcés
+Copyright (c) 2023 Eligio Alejandro Mariño Garcés
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

android.Dockerfile

@@ -1,19 +1,19 @@
-FROM debian:12.11-slim@sha256:90522eeb7e5923ee2b871c639059537b30521272f10ca86fdbbbb2b75a8c40cd AS flutter
+FROM debian:13.2-slim@sha256:9812458f2932ede726468ba07bcb9e51bceb1f0c7f16ee30baa789ccee7cc202 AS flutter
 
 SHELL ["/bin/bash", "-euxo", "pipefail", "-c"]
 
 ENV LANG=C.UTF-8
 
-# renovate: release=bullseye depName=curl
-ARG CURL_VERSION="7.88.1-10+deb12u12"
-# renovate: release=bullseye depName=git
-ARG GIT_VERSION="1:2.39.5-0+deb12u2"
-# renovate: release=bullseye depName=lcov
-ARG LCOV_VERSION="1.16-1"
-# renovate: release=bullseye depName=ca-certificates
-ARG CA_CERTIFICATES_VERSION="20230311"
-# renovate: release=bullseye depName=unzip
-ARG UNZIP_VERSION="6.0-28"
+# renovate: suite=trixie depName=curl
+ARG CURL_VERSION="8.14.1-2+deb13u2"
+# renovate: suite=trixie depName=git
+ARG GIT_VERSION="1:2.47.3-0+deb13u1"
+# renovate: suite=trixie depName=lcov
+ARG LCOV_VERSION="2.3.1-1"
+# renovate: suite=trixie depName=ca-certificates
+ARG CA_CERTIFICATES_VERSION="20250419"
+# renovate: suite=trixie depName=unzip
+ARG UNZIP_VERSION="6.0-29"
 
 USER root
 RUN apt-get update \
@@ -93,14 +93,14 @@ FROM flutter AS fastlane
 
 SHELL ["/bin/bash", "-euxo", "pipefail", "-c"]
 
-# renovate: release=bullseye depName=ruby-dev
-ARG RUBY_VERSION="1:3.1"
-# renovate: release=bullseye depName=build-essential
-ENV BUILD_ESSENTIAL_VERSION="12.9"
+# renovate: suite=trixie depName=ruby-dev
+ARG RUBY_VERSION="1:3.3"
+# renovate: suite=trixie depName=build-essential
+ENV BUILD_ESSENTIAL_VERSION="12.12"
 
 USER root
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends \ 
+    && apt-get install -y --no-install-recommends \
     # Fastlane dependencies
     ruby-full="$RUBY_VERSION" \
     build-essential="$BUILD_ESSENTIAL_VERSION" \
@@ -142,19 +142,21 @@ FROM fastlane AS android
 
 SHELL ["/bin/bash", "-euxo", "pipefail", "-c"]
 
-# TODO: Get JAVA_HOME dinamically from a JDK binary 
+# TODO: Get JAVA_HOME dinamically from a JDK binary
 # TODO: Use `dirname $(dirname $(readlink -f $(which javac)))` after the following issue is fixed
 # TODO: https://github.com/moby/moby/issues/29110
 ENV ANDROID_HOME="$SDK_ROOT/android-sdk" \
     JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64
 ENV PATH="$PATH:$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/platform-tools:$HOME/.local/bin"
 
-# renovate: release=bullseye depName=openjdk-17-jdk-headless
-ARG OPENJDK_17_JDK_HEADLESS_VERSION="17.0.15+6-1~deb12u1"
-# renovate: release=bullseye depName=sudo
-ARG SUDO_VERSION="1.9.13p3-1+deb12u1"
+# renovate: suite=bookworm depName=openjdk-17-jdk-headless
+ARG OPENJDK_17_JDK_HEADLESS_VERSION="17.0.17+10-1~deb12u1"
+# renovate: suite=trixie depName=sudo
+ARG SUDO_VERSION="1.9.16p2-3"
 
 USER root
+# Add debian 12 bookworm repository alongside debian 13 trixie to install Java 17
+COPY config/debian_12_bookworm.sources /etc/apt/sources.list.d/debian_12_bookworm.sources
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
     # For Android x86 emulators
@@ -172,6 +174,8 @@ RUN apt-get update \
     # To allow changing ownership in GitLab CI /builds
     sudo="$SUDO_VERSION" \
     && rm -rf /var/lib/apt/lists/* \
+    # Delete debian 12 bookworm repository after installing Java 17
+    && rm /etc/apt/sources.list.d/debian_12_bookworm.sources \
     # To allow changing ownership in GitLab CI /builds
     && echo "flutter ALL= NOPASSWD:/bin/chown -R flutter /builds, /bin/chown -R flutter /builds/*" >> /etc/sudoers.d/flutter
 

changelog.md

@@ -1,20 +1,108 @@
-# Changelog
+## [3.38.2] - 2025-11-19
 
-All notable changes to this project will be documented in this file.
+### ⚙️ Miscellaneous Tasks
 
+- *(release)* Upgrade flutter to 3.38.2 (#400)
+## [3.38.1] - 2025-11-17
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Upgrade flutter to 3.38.1 (#399)
+## [3.38.0] - 2025-11-12
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Upgrade flutter to 3.38.0 (#397)
+## [3.35.7] - 2025-11-02
+
+### ⚙️ Miscellaneous Tasks
+
+- Use merge-multiple for multiple artifact IDs (#394)
+- *(release)* Upgrade flutter to 3.35.7 (#395)
+## [3.35.5] - 2025-09-30
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Upgrade flutter to 3.35.5 (#383)
+## [3.35.4] - 2025-09-20
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Update flutter dependencies in version.json for 3.35.4 (#381)
+## [3.35.3] - 2025-09-05
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Update flutter dependencies in version.json for 3.35.3 (#379)
+## [3.35.2] - 2025-08-29
+
+### 📚 Documentation
+
+- Add issue templates (#376)
+
+### ⚙️ Miscellaneous Tasks
+
+- Create CODE_OF_CONDUCT.md (#374)
+- *(release)* Update flutter dependencies in version.json for 3.35.2 (#378)
+## [3.35.1] - 2025-08-17
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update react monorepo to v19.1.1 (#369)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Update flutter dependencies in version.json for 3.35.1 (#371)
+## [3.32.8] - 2025-07-29
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update dependency cross-env to v10 (#367)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Update flutter dependencies in version.json for 3.32.8 (#365)
+## [3.32.7] - 2025-07-17
+
+### ⚙️ Miscellaneous Tasks
+
+- Build image path to solve "skip output since it may contain secret" (#362)
+- *(release)* Update flutter dependencies in version.json for 3.32.7 (#364)
+## [3.32.6] - 2025-07-13
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Update flutter dependencies in version.json for 3.32.6 (#361)
+## [3.32.5] - 2025-06-26
+
+### ⚙️ Miscellaneous Tasks
+
+- Parse json before output (#354)
+- *(release)* Update flutter dependencies in version.json for 3.32.5 (#357)
+## [3.32.4] - 2025-06-14
+
+### ⚙️ Miscellaneous Tasks
+
+- Split release workflow into jobs (#352)
+- *(release)* Update flutter dependencies in version.json for 3.32.4 (#353)
+## [3.32.3] - 2025-06-12
+
+### ⚙️ Miscellaneous Tasks
+
+- Add VERSION_MANIFEST to tag workflow (#349)
+- *(release)* Update flutter dependencies in version.json for 3.32.2 (#350)
+- *(release)* Update flutter dependencies in version.json for 3.32.3 (#351)
 ## [3.32.2] - 2025-06-05
 
 ### ⚙️ Miscellaneous Tasks
 
 - Split  into tag.yml and changelog.yml workflows (#347)
 - *(release)* Update flutter dependencies in version.json for 3.32.2 (#348)
-
 ## [3.32.1] - 2025-05-30
 
 ### ⚙️ Miscellaneous Tasks
 
 - *(release)* Update flutter dependencies in version.json for 3.32.1 (#345)
-
 ## [3.32.0] - 2025-05-23
 
 ### ⚙️ Miscellaneous Tasks
@@ -24,7 +112,6 @@ All notable changes to this project will be documented in this file.
 - Download immutable artifact by id (#337)
 - Update artifact download configuration (#342)
 - *(release)* Update flutter dependencies in version.json for 3.32.0 (#343)
-
 ## [3.29.3] - 2025-04-17
 
 ### 🚀 Features
@@ -55,7 +142,6 @@ All notable changes to this project will be documented in this file.
 - Download-artifact can not overwrite existing files (#327)
 - Path is a folder in download-artifact (#328)
 - Update flutter dependencies in version.json for 3.29.3 (#329)
-
 ## [3.29.2] - 2025-03-15
 
 ### ⚙️ Miscellaneous Tasks
@@ -65,7 +151,6 @@ All notable changes to this project will be documented in this file.
 - Upgrade actions only for new major or minor versions (#308)
 - Update flutter version in flutter_version.json to 3.29.2 (#309)
 - Update flutter dependencies in version.json for 3.29.2 (#310)
-
 ## [3.29.1] - 2025-03-09
 
 ### 🐛 Bug Fixes
@@ -91,7 +176,6 @@ All notable changes to this project will be documented in this file.
 - Update flutter version in flutter_version.json to 3.29.1 (#302)
 - Discard changes to flutter source code when switching tags (#303)
 - Update flutter dependencies in version.json for 3.29.1 (#304)
-
 ## [3.29.0] - 2025-02-17
 
 ### 🐛 Bug Fixes
@@ -463,5 +547,3 @@ All notable changes to this project will be documented in this file.
 - Update flutter dependencies in version.json for 3.27.4 (#283)
 - Update flutter version in flutter_version.json to 3.29.0 (#286)
 - Update flutter dependencies in version.json for 3.29.0 (#289)
-
-<!-- generated by git-cliff -->

config/android.cue

@@ -1,3 +1,17 @@
+package config
+
+import "list"
+
+#CommandTests: {
+	name: _
+	setup?: _
+	teardown?: _
+	command: _
+	args: _
+	expectedOutput?: [string]
+	excludedOutput?: _
+}
+
 #FileContentTests: {
 	name: string
 	path: _
@@ -6,24 +20,47 @@
 
 #ContainerStructureTest: {
 	schemaVersion: _
-	commandTests: _
+	commandTests: [...#CommandTests]
 	fileContentTests: [...#FileContentTests]
 }
 
 input: #ContainerStructureTest
 
-android_cmdline_tools_version: string @tag(android_cmdline_tools_version)
 android_cmdline_tools_test_expected_content: string @tag(android_cmdline_tools_test_expected_content)
+android_cmdline_tools_version: string @tag(android_cmdline_tools_version)
+android_ndk_version: string @tag(android_ndk_version)
+android_sdk_build_tools_version: string @tag(android_sdk_build_tools_version)
 
 output: {
 	schemaVersion: input.schemaVersion
-	commandTests: input.commandTests
-	fileContentTests: [
-		{
-			name: "Android SDK Command-line Tools is version \(android_cmdline_tools_version)"
-			path: input.fileContentTests[0].path
-			expectedContents: [android_cmdline_tools_test_expected_content]
+	
+	commandTests: list.Concat([
+		list.Take(input.commandTests, 1),
+		[
+			{
+				name: input.commandTests[1].name
+				command: input.commandTests[1].command
+				args: input.commandTests[1].args
+				expectedOutput: [android_sdk_build_tools_version]
+			},
+			{
+				name: input.commandTests[2].name
+				command: input.commandTests[2].command
+				args: input.commandTests[2].args
+				expectedOutput: [android_ndk_version]
+			}
+		],
+		list.Drop(input.commandTests, 3),
+	])
+	
+	fileContentTests: list.Concat([
+		if len(input.fileContentTests) > 0 {
+			[{
+				name: "Android SDK Command-line Tools is version \(android_cmdline_tools_version)"
+				path: input.fileContentTests[0].path
+				expectedContents: [android_cmdline_tools_test_expected_content]
+			}],
 		},
-		input.fileContentTests[1]
-	]
+		list.Drop(input.fileContentTests, 1),
+	])
 }

config/debian_12_bookworm.sources

@@ -0,0 +1,13 @@
+# Add debian 12 bookworm repository alongside debian 13 trixie to install Java 17
+
+Types: deb
+URIs: http://deb.debian.org/debian
+Suites: bookworm bookworm-updates
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://deb.debian.org/debian-security
+Suites: bookworm-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

config/flutter_version.json

@@ -1,7 +1,7 @@
 {
     "flutter": {
         "channel": "stable",
-        "commit": "b25305a8832cfc6ba632a7f87ad455e319dccce8",
-        "version": "3.32.1"
+        "commit": "f5a8537f90d143abd5bb2f658fa69c388da9677b",
+        "version": "3.38.2"
     }
 }

config/version.json

@@ -1,32 +1,32 @@
 {
     "flutter": {
         "channel": "stable",
-        "commit": "8defaa71a77c16e8547abdbfad2053ce3a6e2d5b",
-        "version": "3.32.2"
+        "commit": "f5a8537f90d143abd5bb2f658fa69c388da9677b",
+        "version": "3.38.2"
     },
     "android": {
         "platforms": [
             {
-                "version": 35
+                "version": 36
             }
         ],
         "gradle": {
-            "version": "8.12"
+            "version": "8.14"
         },
         "buildTools": {
-            "version": "34.0.0"
+            "version": "35.0.0"
         },
         "cmdlineTools": {
             "version": "19.0"
         },
         "ndk": {
-            "version": "26.3.11579264"
+            "version": "28.2.13676358"
         },
         "cmake": {
             "version": "3.22.1"
         }
     },
     "fastlane": {
-        "version": "2.227.2"
+        "version": "2.228.0"
     }
 }

docs/src/content.mdx

@@ -121,7 +121,7 @@ docker build --target android --build-arg flutter_version=${flutterVersion} --bu
 
 The storage of the images starts to cost after 50 GB and increases with every pushed image because the AWS Free Tier covers up to 50 GB of total storage for free in ECR Public.
 
-## Why there is no dynamic tag like `latest`?
+### Why there is no dynamic tag like `latest`?
 
 There is no `latest` Docker tag on purpose. You need to specify the version of the image you want to use. The reason for that is that `latest` can cause unexpected behavior when rerunning a past CI job that was expected to use the old build of the `latest` tag. There are multiple articles explaining more about this reasoning like [What's Wrong With The Docker :latest Tag?](https://vsupalov.com/docker-latest-tag/) and [The misunderstood Docker tag: latest](https://medium.com/@mccode/the-misunderstood-docker-tag-latest-af3babfd6375).
 

docs/src/license.mdx

@@ -1,8 +1,6 @@
-export const year = new Date().getFullYear()
-
 MIT License
 
-Copyright (c) 2023-{year} Eligio Alejandro Mariño Garcés
+Copyright (c) 2023 Eligio Alejandro Mariño Garcés
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -20,4 +18,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+SOFTWARE.

docs/src/package.json

@@ -1,27 +1,34 @@
 {
-  "name": "doc",
-  "version": "1.0.0",
-  "description": "",
-  "main": "index.js",
-  "type": "module",
-  "scripts": {
-    "build": "npm run readme && npm run contributing && npm run license",
-    "readme": "cross-env NODE_ENV=production node compile.js readme.mdx ../../readme.md",
-    "license": "cross-env NODE_ENV=production node compile.js license.mdx ../../LICENSE.md",
-    "contributing": "cross-env NODE_ENV=production node compile.js contributing.mdx ../contributing.md",
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "author": "",
-  "license": "ISC",
-  "dependencies": {
-    "cross-env": "^7.0.3",
-    "mdx-to-md": "^0.5.0",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
-    "remark-gfm": "^4.0.1",
-    "remark-toc": "^9.0.0"
-  },
-  "volta": {
-    "node": "22.16.0"
-  }
+    "name": "doc",
+    "version": "1.0.0",
+    "description": "",
+    "main": "index.js",
+    "type": "module",
+    "scripts": {
+        "build": "npm run readme && npm run contributing && npm run license",
+        "readme": "cross-env NODE_ENV=production node compile.js readme.mdx ../../readme.md",
+        "license": "cross-env NODE_ENV=production node compile.js license.mdx ../../LICENSE.md",
+        "contributing": "cross-env NODE_ENV=production node compile.js contributing.mdx ../contributing.md",
+        "test": "echo \"Error: no test specified\" && exit 1"
+    },
+    "author": "",
+    "license": "ISC",
+    "dependencies": {
+        "cross-env": "^10.0.0",
+        "mdx-to-md": "^0.5.0",
+        "react": "^19.1.0",
+        "react-dom": "^19.1.0",
+        "remark-gfm": "^4.0.1",
+        "remark-toc": "^9.0.0"
+    },
+    "devEngines": {
+        "runtime": {
+            "name": "node",
+            "onFail": "error"
+        },
+        "packageManager": {
+            "name": "npm",
+            "onFail": "error"
+        }
+    }
 }

readme.md

@@ -16,39 +16,39 @@ The images includes the minimum tools to run Flutter and build apps. The version
 * [Building Locally](#building-locally)
 * [Roadmap](#roadmap)
 * [FAQ](#faq)  
-   * [Why the images are not published in the AWS ECR Public registry?](#why-the-images-are-not-published-in-the-aws-ecr-public-registry)
-* [Why there is no dynamic tag like latest?](#why-there-is-no-dynamic-tag-like-latest)
+   * [Why the images are not published in the AWS ECR Public registry?](#why-the-images-are-not-published-in-the-aws-ecr-public-registry)  
+   * [Why there is no dynamic tag like latest?](#why-there-is-no-dynamic-tag-like-latest)
 * [Contributing](#contributing)
 * [License](#license)
 
 ## Features
 
-* Installed Flutter SDK 3.32.2.
+* Installed Flutter SDK 3.38.2.
 * Analytics disabled by default, opt-in if `ENABLE_ANALYTICS` environment variable is passed when running the container.
 * Rootless user `flutter:flutter`, with permissions to run on Github workflows and GitLab CI.
-* Cached Fastlane gem 2.227.2.
+* Cached Fastlane gem 2.228.0.
 * Minimal image with predownloaded SDKs and tools ready to run `flutter` commands for the Android platform.
 
 Predownloaded SDKs and tools in Android:
 
 * Licenses accepted
-* Android SDK Platforms: 35
-* Android NDK: 26.3.11579264
-* Gradle: 8.12
+* Android SDK Platforms: 36
+* Android NDK: 28.2.13676358
+* Gradle: 8.14
 
 ## Running Containers
 
 | Registry                  | flutter-android                                                                                                            |
 | ------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
-| Docker Hub                | [gmeligio/flutter-android:3.32.2](https://hub.docker.com/r/gmeligio/flutter-android)                                       |
-| GitHub Container Registry | [ghcr.io/gmeligio/flutter-android:3.32.2](https://github.com/gmeligio/flutter-docker-image/pkgs/container/flutter-android) |
-| Quay                      | [quay.io/gmeligio/flutter-android:3.32.2](https://quay.io/repository/gmeligio/flutter-android)                             |
+| Docker Hub                | [gmeligio/flutter-android:3.38.2](https://hub.docker.com/r/gmeligio/flutter-android)                                       |
+| GitHub Container Registry | [ghcr.io/gmeligio/flutter-android:3.38.2](https://github.com/gmeligio/flutter-docker-image/pkgs/container/flutter-android) |
+| Quay                      | [quay.io/gmeligio/flutter-android:3.38.2](https://quay.io/repository/gmeligio/flutter-android)                             |
 
 On the terminal:
 
 ```bash
 # From GitHub Container Registry
-docker run --rm -it ghcr.io/gmeligio/flutter-android:3.32.2 bash
+docker run --rm -it ghcr.io/gmeligio/flutter-android:3.38.2 bash
 ```
 
 On a workflow in GitHub Actions:
@@ -58,7 +58,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     container:
-      image: ghcr.io/gmeligio/flutter-android:3.32.2
+      image: ghcr.io/gmeligio/flutter-android:3.38.2
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -70,7 +70,7 @@ On a `.gitlab-ci.yml` in GitLab CI:
 
 ```yaml
 build:
-  image: ghcr.io/gmeligio/flutter-android:3.32.2
+  image: ghcr.io/gmeligio/flutter-android:3.38.2
   script:
     - flutter build apk
 ```
@@ -91,20 +91,20 @@ bundle exec fastlane
 
 Every new tag on the flutter stable channel gets built. The tag is composed of the Flutter version used to build the image:
 
-* Docker image: gmeligio/flutter-android:3.32.2
-* Flutter version: 3.32.2
+* Docker image: gmeligio/flutter-android:3.38.2
+* Flutter version: 3.38.2
 
 ## Building Locally
 
 The android.Dockerfile expects a few arguments:
 
-* `flutter_version <string>`: The version of Flutter to use when building. Example: 3.32.2
-* `android_build_tools_version <string>`: The version of the Android SDK Build Tools to install. Example: 34.0.0
-* `android_platform_versions <list>`: The versions of the Android SDK Platforms to install, separated by spaces. Example: 35
+* `flutter_version <string>`: The version of Flutter to use when building. Example: 3.38.2
+* `android_build_tools_version <string>`: The version of the Android SDK Build Tools to install. Example: 35.0.0
+* `android_platform_versions <list>`: The versions of the Android SDK Platforms to install, separated by spaces. Example: 36
 
 ```bash
 # Android
-docker build --target android --build-arg flutter_version=3.32.2 --build-arg fastlane_version=2.227.2 --build-arg android_build_tools_version=34.0.0 --build-arg android_platform_versions="35" -t android-test .
+docker build --target android --build-arg flutter_version=3.38.2 --build-arg fastlane_version=2.228.0 --build-arg android_build_tools_version=35.0.0 --build-arg android_platform_versions="36" -t android-test .
 ```
 
 ## Roadmap
@@ -123,7 +123,7 @@ docker build --target android --build-arg flutter_version=3.32.2 --build-arg fas
 
 The storage of the images starts to cost after 50 GB and increases with every pushed image because the AWS Free Tier covers up to 50 GB of total storage for free in ECR Public.
 
-## Why there is no dynamic tag like `latest`?
+### Why there is no dynamic tag like `latest`?
 
 There is no `latest` Docker tag on purpose. You need to specify the version of the image you want to use. The reason for that is that `latest` can cause unexpected behavior when rerunning a past CI job that was expected to use the old build of the `latest` tag. There are multiple articles explaining more about this reasoning like [What's Wrong With The Docker :latest Tag?](https://vsupalov.com/docker-latest-tag/) and [The misunderstood Docker tag: latest](https://medium.com/@mccode/the-misunderstood-docker-tag-latest-af3babfd6375).
 

script/java_version.sh

@@ -0,0 +1 @@
+java -version 2>&1 | awk -F[\".] '/version/ {print $2}'

script/jq_flutter_latest_version.sh

@@ -0,0 +1 @@
+jq -r '.releases[] | select(.channel=="stable") | max_by(.release_date) | .version'

script/latest_android_sdk_build_tools.sh

@@ -1 +1,4 @@
 sdkmanager --list | grep 'build-tools' | awk '{print $1}' | grep -oP 'build-tools;\d+\.\d+\.\d+$' | tail -1
+
+# Get 36.0.0 from `build-tools;36.0.0:build-tools`
+curl -s https://raw.githubusercontent.com/flutter/flutter/refs/tags/3.35.1/engine/src/flutter/tools/android_sdk/packages.txt | grep 'build-tools' | awk -F'[;:]' '{print $2}'

script/update_test.sh

@@ -1,5 +1,4 @@
 #!/usr/bin/env sh
-
 # TODO: Update all versions used in android.yml from version.json, like NDK, CMake, etc.
 
 # Path to the JSON and YAML files
@@ -12,6 +11,8 @@ android_cmdline_tools_version=$(cue eval -e 'android.cmdlineTools.version' "$ver
 android_cmdline_tools_test_expected_content="Pkg.Revision=$android_cmdline_tools_version
 Pkg.Path=cmdline-tools;$android_cmdline_tools_version
 Pkg.Desc=Android SDK Command-line Tools"
+android_ndk_version=$(cue eval -e 'android.ndk.version' "$version_file_path" | tr -d '"')
+android_sdk_build_tools_version=$(cue eval -e 'android.buildTools.version' "$version_file_path" | tr -d '"')
 
 # Check if the version value is not empty
 if [ -z "$android_cmdline_tools_version" ]; then
@@ -21,8 +22,8 @@ fi
 
 
 # Update the version YAML file using cue
-cue export config/android.cue -l input: ./test/android.yml -t android_cmdline_tools_version="$android_cmdline_tools_version" -t android_cmdline_tools_test_expected_content="$android_cmdline_tools_test_expected_content" -e output --out yaml >"$temp_file_path"
+cue export config/android.cue -l input: ./test/android.yml -t android_cmdline_tools_version="$android_cmdline_tools_version" -t android_cmdline_tools_test_expected_content="$android_cmdline_tools_test_expected_content" -t android_ndk_version="$android_ndk_version" -t android_sdk_build_tools_version="$android_sdk_build_tools_version" -e output --out yaml >"$temp_file_path"
 mv "$temp_file_path" "$test_file_path"
 
 # Write progress
-echo "Updated $test_file_path with android_cmdline_tools_version: $android_cmdline_tools_version"
+echo "Updated $test_file_path with android_cmdline_tools_version=$android_cmdline_tools_version, android_ndk_version=$android_ndk_version"

test/android.yml

@@ -24,13 +24,13 @@ commandTests:
     args:
       - /home/flutter/sdks/android-sdk/build-tools
     expectedOutput:
-      - 34.0.0
+      - 35.0.0
   - name: Android NDK is pinned
     command: ls
     args:
       - /home/flutter/sdks/android-sdk/ndk
     expectedOutput:
-      - 26.3.11579264
+      - 28.2.13676358
   - name: CMake is pinned
     command: ls
     args:

windows.Dockerfile

@@ -1,6 +1,6 @@
 # escape=`
 
-FROM mcr.microsoft.com/windows/servercore:ltsc2025@sha256:c6b2b26058a096cb3f627ed03d0be66bea262c89222c988b516e63ae68f3ea72 as flutter
+FROM mcr.microsoft.com/windows/servercore:ltsc2025@sha256:1126ba40ef176fb8393f59822c2431c5daf38f5c67a62808960c7036311350af as flutter
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"]