[utkrishtsahu]

📋 Changes

Syncs main (2.7.0) into develop/v3.0 so the 3.x line includes everything shipped on 2.x since the last sync (#951).

⚠️ Please merge with "Create a merge commit", not "Squash and merge", so git records main's history in develop/v3.0 and future syncs / the GA merge don't re-conflict on the same files.

Brought in from main

• My Account API on Web (feat(web): Add My Account API support on Web #966) and passkey enrollment on Web (feat(web): add My Account passkey enrollment on Web #967): Auth0Web.myAccount(accessToken:) / MyAccountWeb, the MyAccountApiClient / Fetcher interop types and createFetcher() in js_interop.dart, the client proxy and plugin methods, the platform-interface stubs in Auth0FlutterWebPlatform, and their tests (my_account_web_test.dart, my_account_plugin_test.dart, my_account_extensions_test.dart). New on 3.x; no changes to existing APIs.
• 2.6.2 and 2.7.0 CHANGELOG entries for both packages, kept in release-date order (newest first).
• README / EXAMPLES sections for My Account on the Web, and the MyAccountApi doc comments pointing web users to Auth0Web.myAccount.

Kept from develop/v3.0 (intentional differences between the lines)

• Native SDKs: Auth0.Android 4.2.0, Auth0.swift 3.2.0 / JWTDecode 4.0.0. The Auth0.Android 3.21.1 / 3.21.2 / 3.21.3 bumps from main (fix(android): bump Auth0.Android to 3.21.1 for Keystore2 INCOMPATIBLE_DEVICE fix #963, fix: bump Auth0.Android to 3.21.2 for biometric failure fix #968, fix(android): bump Auth0.Android to 3.21.3 to keep RSA key for PKCS1 migration on padding mismatch #971) are superseded on 3.x by the 4.2.x line; the 3.21.3 fix lands on 3.x via the upcoming 4.2.1 bump.
• Minimums iOS 15 / macOS 12 / Android API 26, JVM 17, spa-js 2.29.
• Package versions 3.0.0-beta.0 (pubspecs, version.dart, podspec s.version).
• v3 APIs in tests: Auth0.swift 3's throwing CredentialsStorage in CredentialsManagerSpies.swift, Credentials(expiresAt:) in ExtensionsTests.swift, and the removed inline MFA methods are not re-added to authentication_api_test.dart (feat: remove inline MFA methods from the Authentication API. #943).
• auth0_flutter_web_test.mocks.dart (hand-maintained, excluded from build_runner in build.yaml): develop/v3.0's version, which is a superset of main's (adds the web MFA mocks).
• v3-only docs: the v3 migration-guide note in the README, the minTtl 60s default note in EXAMPLES.

Already present, no change: the Kotlin Gradle Plugin fix (#939) and CI/publish fixes (#932, #934, #949) were brought in by #951.

No native (Android/iOS/macOS/Windows) source changes; the effective code change vs develop/v3.0 is the Web My Account feature only.

🎯 Testing

Run locally on the merged branch

• flutter analyze: auth0_flutter_platform_interface no issues; auth0_flutter 0 errors (4 pre-existing warnings, same as before).
• auth0_flutter: flutter test --exclude-tags browser → 171 passed; flutter test --tags browser --platform chrome → 185 passed.
• auth0_flutter_platform_interface: flutter test → 320 passed (run with TZ=UTC, as on CI).
• My Account Web tests on the v3 code: my_account_plugin_test.dart (27), my_account_web_test.dart (18), my_account_extensions_test.dart (18) passed; web MFA (mfa_web_test.dart, 13) still passes.
• iOS native unit tests (xcodebuild test, same invocation as CI, Xcode 26.3, iPhone 17 Pro simulator): TEST SUCCEEDED, 355 test cases, 0 failures.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 3

• main
• beta-release/.*
• release/.*

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: auth0/auth0-flutter
• Branch: develop/v3.0
• File: .coderabbit.yaml
• Commit: c9c9e40
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: b72d9abf-220f-4867-9710-25576719b2cd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}