chore(deps): bump flutter_secure_storage, share_plus and file_picker

[dependabot]

Bumps flutter_secure_storage, share_plus and file_picker. These dependencies needed to be updated together.
Updates flutter_secure_storage from 10.3.1 to 11.0.0

Release notes

Sourced from flutter_secure_storage's releases.

flutter_secure_storage: v11.0.0

11.0.0 (2026-08-06)

Breaking changes

items deprecated in v10 have been removed. Any data saved using deprecated algorithms or features will be unusable after this upgrade. If you used a version prior to v10, upgrade to v10 first so existing data is migrated.

Android

• Removed KeyCipherAlgorithm.RSA_ECB_PKCS1Padding. Upgrade to v10 first so existing data is migrated to RSA_ECB_OAEPwithSHA_256andMGF1Padding before upgrading to v11.
• Removed StorageCipherAlgorithm.AES_CBC_PKCS7Padding. Upgrade to v10 first so existing data is migrated to AES_GCM_NoPadding before upgrading to v11.
• Removed encryptedSharedPreferences parameter from AndroidOptions and AndroidOptions.biometric. The Jetpack Security (EncryptedSharedPreferences) backend is no longer supported; any remaining data was automatically migrated to custom cipher storage in v10.
• Removed sharedPreferencesName from AndroidOptions. Use storageNamespace instead for full namespace isolation.
• Raised minSdk to 24 and compileSdk to 37. Flutter 3.35 raised its own Android minimum to API 24, making API 23 support unverifiable with any supported Flutter version. The legacy AES-CBC cipher path that supported API 21-22 has been removed.

Features

• android: add requireBiometricConfirmation option to AndroidOptions (7f5f7de)

Bug Fixes

• android: catch Throwable on worker thread so keystore Errors don't crash the app (d5802ff)
• android: don't swallow VM errors, catch Throwable on biometric thread too (d413d3f)
• linux: handle missing default keyring (b39c7c1)
• linux: fail closed on orphaned keyring data (2e720ff)
• remove redundant ./ prefix from part directives (cc7018d)

Commits

• e144260 chore(develop): release flutter_secure_storage 11.0.0 (#1198)
• e133bdf chore(develop): release flutter_secure_storage_linux 3.0.2 (#1206)
• 95d579b Merge pull request #1221 from juliansteenbakker/docs/changelog-headers-linux-...
• c665f38 docs: add Changelog header to linux and main package
• 45d1074 Merge pull request #1220 from juliansteenbakker/docs/changelog-headers-and-or...
• cc2d907 Merge pull request #1215 from juliansteenbakker/dependabot/github_actions/act...
• 9646d0e Merge pull request #1214 from juliansteenbakker/dependabot/github_actions/act...
• 13c529f Merge pull request #1213 from juliansteenbakker/dependabot/github_actions/act...
• a31742f Merge pull request #1219 from juliansteenbakker/ci/gate-master-promotion-on-p...
• aa83172 docs: add Changelog header, fix platform_interface entry order
• Additional commits viewable in compare view

Updates share_plus from 12.0.2 to 13.3.0

Commits

• 13e1704 chore(release): prepare for release (#3939)
• d3ba3f3 feat(share_plus): Avoid exceptions on iPads with no sharePositionOrigin (#3769)
• 8dca0c8 ci(share_plus): fix macOS/iOS example build with Swift Package Manager (#3932)
• 2c5b493 fix(share_plus): Do not do I/O operations on the main thread on Android (#3931)
• 9336187 chore(release): prepare for release (#3928)
• 949e771 fix(share_plus): raise Apple platform minimums in SPM manifests to match Flut...
• 65ecfd0 chore(release): prepare for release (#3912)
• cf00609 feat(share_plus): Updated Swift Package Manager setup for Flutter 3.44 (#3911)
• 0c9b0ad feat(share_plus): Add support of built-in Kotlin (#3896)
• d9b6f29 refactor(share_plus): change android gradle from groovy to kotlin (#3860)
• Additional commits viewable in compare view

Updates file_picker from 11.0.3 to 12.0.0-beta.7

Release notes

Sourced from file_picker's releases.

12.0.0-beta.7

No release notes provided.

12.0.0-beta.6

What's Changed

• Export 'src/platform/file_picker_platform_interface.dart' by @​zmuranaka in miguelpruivo/flutter_file_picker#2064
• Fix readAsBytes fallback for path-based files by @​vicajilau in miguelpruivo/flutter_file_picker#2057
• Use hardcoded hex values for request codes in FilePickerDelegate by @​daniJimen in miguelpruivo/flutter_file_picker#2071
• Update ffi, win32, and flutter_lints dependencies by @​daniJimen in miguelpruivo/flutter_file_picker#2072

New Contributors

• @​zmuranaka made their first contribution in miguelpruivo/flutter_file_picker#2064

Full Changelog: miguelpruivo/flutter_file_picker@v12.0.0-beta.5...v12.0.0-beta.6

12.0.0-beta.5

What's Changed

• Fix saveFile bytes handling on Android and iOS by @​vicajilau in miguelpruivo/flutter_file_picker#2038
• Fix iOS picker stuck state on fast swipe dismiss by @​vicajilau in miguelpruivo/flutter_file_picker#2040
• [All platforms][IOS] - feature: Refactor code in example & ios image order by @​daniJimen in miguelpruivo/flutter_file_picker#2047
• [IOS] feature: IOS prevent freece UI by @​daniJimen in miguelpruivo/flutter_file_picker#2048
• Fix web readAsBytes fallback for blob URLs by @​vicajilau in miguelpruivo/flutter_file_picker#2042
• [Android] - Feature: add coroutine to save file process by @​daniJimen in miguelpruivo/flutter_file_picker#2045

Full Changelog: miguelpruivo/flutter_file_picker@v12.0.0-beta.4...v12.0.0-beta.5

v12.0.0-beta.4

What's Changed

• fix(android): fix FileType.any subdirectory visibility by @​vicajilau in miguelpruivo/flutter_file_picker#2016
• feat: implement pickFile() API and improve PlatformFile documentation (#1469) by @​vicajilau in miguelpruivo/flutter_file_picker#2017
• fix(darwin): add missing FlutterFramework dependency to Package.swift by @​vicajilau in miguelpruivo/flutter_file_picker#2025
• fix(android): remove explicit KGP dependency to resolve warnings under AGP 9.0+ by @​vicajilau in miguelpruivo/flutter_file_picker#2026
• Feature/migrate goovy to kts by @​daniJimen in miguelpruivo/flutter_file_picker#2028
• feat: summarize file bytes in debug output by @​vicajilau in miguelpruivo/flutter_file_picker#2029

Full Changelog: miguelpruivo/flutter_file_picker@v12.0.0-beta.3...v12.0.0-beta.4

12.0.0-beta.3

What's Changed

• fix(android): support AGP 9+ and android.builtInKotlin property for plugin registration (#2002) by @​daniJimen in miguelpruivo/flutter_file_picker#2010
• Update version to 12.0.0-beta.3 and fix Android plugin registration by @​vicajilau in miguelpruivo/flutter_file_picker#2011
• fix(android): update error code to explorer_not_found when file explorer is missing (#1850) by @​daniJimen in miguelpruivo/flutter_file_picker#2008
• feat: add support for custom dialog titles in pickFileAndDirectoryPaths (#1911) by @​daniJimen in miguelpruivo/flutter_file_picker#2009
• Feature/fix add loading into save (#1918) by @​daniJimen in miguelpruivo/flutter_file_picker#2007

Full Changelog: miguelpruivo/flutter_file_picker@v12.0.0-beta.2...v12.0.0-beta.3

... (truncated)

Changelog

Sourced from file_picker's changelog.

12.0.0-beta.7

Web

• Ensures XFile.fromData is only used on the web if bytes is not null, preventing potential null check errors.

12.0.0-beta.6

General

• Improved PlatformFile.readAsBytes() so picked files can be read even when withData was not used and the file only has a local path or a stream source.
• FileType.custom now shares a consistent allowedExtensions validation across platforms, throwing ArgumentError when filters are missing or used with a non-custom file type.
• The ffi, win32, and flutter_lints dependencies have been updated.

Android

• Prevents unresolved references when extracting hashCode under a forced JVM version. #2070

12.0.0-beta.5

Android

• saveFile now writes file data using Kotlin Coroutines (CoroutineScope(Dispatchers.IO).launch), keeping all I/O off the main thread and preventing UI freezes.

iOS

• Fixed a race condition when dismissing the file picker with a fast swipe, preventing the picker from getting stuck in a multiple_request state until app restart. #2021
• iOS now preserves the selection order when picking multiple files: the list of returned files will match the order in which the user selected them.
• saveFile now performs file writing on a background thread (DispatchQueue.global), preventing UI freezes when saving large files.

Web

• Fixed PlatformFile.readAsBytes() so files picked on Web can recover data from blob: and data: URLs when withData was not used.
• Added Web fallback to stream file bytes from blob:/data: URLs: when the ReadableStream API is supported.

12.0.0-beta.4

General

• Added pickFile() static method as a convenience wrapper for single file selection, returning PlatformFile? directly. #1469
• BREAKING CHANGE: Refactored saveFile() to make fileName and bytes required parameters across all platforms for a more consistent API. Improved the method's documentation for better clarity.
• Improved documentation for PlatformFile properties (path, bytes, readStream) to clarify nullability and usage across platforms. #1469
• BREAKING CHANGE: The allowMultiple parameter on pickFiles() now defaults to true. Use pickFile() for single-file selection. (allowMultiple is deprecated and will be removed in a future release.)
• Deprecated withData, withReadStream, and readSequential on pickFiles()/pickFile(). Users should call PlatformFile.readAsBytes() or PlatformFile.readAsByteStream() to load file data on demand. These parameters will be removed in a future release.
• Improved PlatformFile.toString() output to display byte length instead of full content.

Android

• Fixed an issue where FileType.any would prevent subdirectories from being listed in the system file explorer by ensuring EXTRA_MIME_TYPES is correctly passed as an array. #2013
• Removed explicit Kotlin Gradle Plugin (KGP) application and dependencies from build files to resolve warnings under AGP 9.0+.
• Updated Android build tooling and dependencies: Android Gradle Plugin bumped to 8.5.2, androidx.core:core and androidx.core:core-ktx updated to 1.18.0, androidx.lifecycle:lifecycle-runtime updated to 2.10.0, and org.apache.tika:tika-core updated to 3.3.0.
• Migrated Android build files from Groovy to Kotlin DSL (build.gradle.kts, settings.gradle.kts).
• Added Android AGP compatibility CI workflow.

Darwin

• Added missing FlutterFramework dependency to Package.swift for Swift Package Manager (SPM) compatibility.

12.0.0-beta.3

General

• Added onFileLoading callback to saveFile and implemented status tracking via an event channel. saveFile now reports loading status (for example FilePickerStatus.loading and FilePickerStatus.done).
• Offloaded file saving (writing bytes) to a background isolate to avoid blocking the UI when saving large files.
• Ensured the event subscription used for loading status is always cancelled in a finally block to prevent leaks and spurious events.

... (truncated)

Commits

• 7fbe3ad Merge pull request #2075 from daniJimen/feature/fix_web_issue_with_xfile
• a805298 Merge branch 'master' into feature/fix_web_issue_with_xfile
• e51213d Clean up formatting in CHANGELOG.md
• f85c933 Bump version to 12.0.0-beta.7
• fc64c32 Ensure XFile.fromData is only used when bytes are non-null on Web
• 2867a4e Fix PlatformFile.xFile getter on web when bytes are null
• 3dcf7a4 Merge pull request #2072 from daniJimen/feature/update_dependencies
• b6995c1 Update CHANGELOG.md
• 992055a Improve CHANGELOG.md formatting
• b497609 Update CHANGELOG.md with dependency changes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[anilcancakir]

Not merging this, and the green check is why it needs saying out loud: it is stale in a way that inverts its answer.

The run that produced it executed on 2026-08-11 and resolved file_picker 12.0.0-beta.7, which the code does compile against. 12.0.0 final has since been published and is latest, so with the widened >=11.0.2 <13.0.0 a resolve today picks it. I re-ran the same job against today's pub state: failure, resolving file_picker 12.0.0.

What breaks, from that run:

error • The getter 'files' isn't defined for the type 'List<PlatformFile>'      • lib/src/facades/pick.dart:303
error • The getter 'files' isn't defined for the type 'List<PlatformFile>'      • lib/src/facades/pick.dart:305
error • The getter 'files' isn't defined for the type 'List<PlatformFile>'      • lib/src/facades/pick.dart:329
error • A value of type 'Future<Uri?>' can't be returned from the method
        'saveFile' because it has a return type of 'Future<String?>'           • lib/src/facades/pick.dart:373
error • The getter 'size' isn't defined for the type 'PlatformFile'             • lib/src/facades/pick.dart:399
error • The getter 'extension' isn't defined for the type 'PlatformFile'        • lib/src/facades/pick.dart:400
error • The getter 'bytes' isn't defined for the type 'PlatformFile'            • lib/src/facades/pick.dart:401
error • The name 'AndroidOptions' is defined in the libraries
        'flutter_secure_storage' and 'file_picker_platform_interface'          • lib/magic.dart:15  ambiguous_export

Three separate pieces of work, not a bump:

1. FilePicker.pickFiles no longer returns a result with .files, and PlatformFile lost size, extension and bytes.
2. FilePicker.saveFile returns Future<Uri?>. Pick.saveFile is Future<String?> in this package's PUBLIC API, so the migration has to decide whether that signature changes (breaking for consumers) or converts.
3. The last one is new and independent of pick.dart: lib/magic.dart blanket-exports both flutter_secure_storage and file_picker, and 12 introduces a colliding AndroidOptions. That needs a deliberate hide, which is also a public-surface decision.

Worth noting for whoever picks this up: pick.dart's comment says "file_picker 12 made fileName and bytes required and non-null on FilePicker.saveFile". That was written against the beta and is still true of it; the final went further. The comment reads as "we are already 12-ready", and we are not.

The flutter_secure_storage half of this PR is fine on its own (it resolved 11.0.0 and passed), so a bump limited to that would go straight in.

Closing rather than leaving it green-and-misleading. Same conclusion as #122, now with the final release measured rather than inferred. Dependabot will reopen once the constraint is widened on purpose.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.