fix: harden DCP patching and release reliability

.github/workflows/Flatpak.yml

@@ -66,6 +66,7 @@ jobs:
       - name: Clone OpenROM binaries repo
         run: |
           git clone --depth 1 https://github.com/M5Devs/OpenROM-bins.git bins
+          git -C bins checkout 586f7cc54df0facf9df9d3066c70e6b434b93753
 
       - name: Set up Flutter
         uses: subosito/flutter-action@v2

.github/workflows/Release.yml

@@ -22,6 +22,7 @@ jobs:
       - name: Fetch binaries from OpenROM-bins
         run: |
           git clone --depth 1 https://github.com/M5Devs/OpenROM-bins.git bins
+          git -C bins checkout 586f7cc54df0facf9df9d3066c70e6b434b93753
           New-Item -ItemType Directory -Force -Path assets\windows
           Copy-Item -Path "bins\windows\x86_64\*" -Destination "assets\windows\" -Recurse
 
@@ -148,6 +149,7 @@ jobs:
       - name: Fetch binaries from OpenROM-bins
         run: |
           git clone --depth 1 https://github.com/M5Devs/OpenROM-bins.git bins
+          git -C bins checkout 586f7cc54df0facf9df9d3066c70e6b434b93753
           mkdir -p assets/linux/x86_64
           cp -r bins/linux/x86_64/. assets/linux/x86_64/
           chmod +x assets/linux/x86_64/*
@@ -271,6 +273,7 @@ jobs:
       - name: Fetch binaries from OpenROM-bins
         run: |
           git clone --depth 1 https://github.com/M5Devs/OpenROM-bins.git bins
+          git -C bins checkout 586f7cc54df0facf9df9d3066c70e6b434b93753
           mkdir -p assets/linux/arm64
           cp -r bins/linux/arm64/. assets/linux/arm64/
           chmod +x assets/linux/arm64/*
@@ -377,6 +380,7 @@ jobs:
       - name: Fetch binaries from OpenROM-bins
         run: |
           git clone --depth 1 https://github.com/M5Devs/OpenROM-bins.git bins
+          git -C bins checkout 586f7cc54df0facf9df9d3066c70e6b434b93753
           mkdir -p assets/macos/arm64 assets/macos/x86_64
           cp -r bins/macos/arm64/.  assets/macos/arm64/
           cp -r bins/macos/x86_64/. assets/macos/x86_64/

.github/workflows/quality.yml

@@ -0,0 +1,65 @@
+name: Quality Gate
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  dart-and-flutter:
+    name: Dart and Flutter checks
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check version consistency
+        shell: bash
+        run: |
+          version="$(tr -d '[:space:]' < VERSION)"
+          test -n "$version"
+          grep -q "^version: $version$" core/pubspec.yaml
+          grep -q "^version: $version+1$" gui/pubspec.yaml
+
+      - name: Set up Flutter
+        uses: subosito/flutter-action@v2
+        with:
+          channel: stable
+          cache: true
+
+      - name: Install GUI dependencies
+        working-directory: gui
+        run: flutter pub get
+
+      - name: Check GUI formatting
+        working-directory: gui
+        run: dart format --output=none --set-exit-if-changed .
+
+      - name: Analyze GUI
+        working-directory: gui
+        run: flutter analyze
+
+      - name: Test GUI
+        working-directory: gui
+        run: flutter test
+
+      - name: Install core dependencies
+        working-directory: core
+        run: dart pub get
+
+      - name: Check core formatting
+        working-directory: core
+        run: dart format --output=none --set-exit-if-changed .
+
+      - name: Analyze core
+        working-directory: core
+        run: dart analyze
+
+      - name: Test core
+        working-directory: core
+        run: dart test

README.md

@@ -90,7 +90,7 @@ Each release includes the **Flutter GUI** (`OpenROM`) and the **headless CLI** (
 - **CRC32 matching** — Identifies ROMs by hash, not filename.
 - **Dry run mode** — Preview renames before applying.
 - **DAT library** — Import multiple DATs and OpenROM stores them locally for reuse.
-- **Streaming XML parser** — Handles massive DAT files (hundreds of MB for PS2/MAME) without RAM spikes.
+- **Event-based XML parser** — Parses DAT metadata without building a full DOM tree; a streaming file decoder is planned for extremely large DAT files.
 - **100% offline** — No network requests, no API keys.
 
 ### 📊 Queue & Preview

VERSION

@@ -1 +1 @@
-3.5.0
+3.7.0