Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Question]: Unstable Version Detected #3310

Open
8 tasks done
fabionegro-it opened this issue Oct 8, 2024 · 5 comments
Open
8 tasks done

[Question]: Unstable Version Detected #3310

fabionegro-it opened this issue Oct 8, 2024 · 5 comments
Labels
question Further information is requested

Comments

@fabionegro-it
Copy link

What is your question?

Hi! I would like to use these plugins

  • connectivity_plus
  • device_info_plus
  • package_info_plus

in my Flutter application.

My CI/CD procedure checks for any vulnerable dependencies. For these plugins, an unstable version is detected due to the version indicated in the build.gradle file of the native Android component (1.0-SNAPSHOT). Is it possible to align the version in the build.gradle file with the same version as the Dart side plugin?

Checklist before submitting a question

  • I searched issues in this repository and couldn't find such bug/problem
  • I Google'd a solution and I couldn't find it
  • I searched on StackOverflow for a solution and I couldn't find it
  • I read the README.md file of the plugin
  • I am using the latest version of the plugin
  • All dependencies are up to date with flutter pub upgrade
  • I did a flutter clean
  • I tried running the example project
@fabionegro-it fabionegro-it added the question Further information is requested label Oct 8, 2024
@miquelbeltran
Copy link
Member

mhh, I see what you mean. I think simply changing version '1.0-SNAPSHOT' to version '1.0' could be enough.

There is probably a lint option to disable that check as well.

The packages in flutter/packages have the same thing too:

https://github.com/flutter/packages/blob/e21f1ee67c0db17fe4d5587040c62d8da59e54e5/packages/url_launcher/url_launcher_android/android/build.gradle#L2C1-L2C23

Do you get warnings from their packages too?

@fabionegro-it
Copy link
Author

fabionegro-it commented Oct 8, 2024

Yes, I think the dependency analysis tool gets suspicious about the word "snapshot".
I have the same problem with these dependencies from flutter/packages:

  • path_provider_android
  • url_launcher_android

I just opened a similar issue on their repository.

@miquelbeltran
Copy link
Member

Got you, please post the link to the ticket here as well, I'd like to know what they decide

@fabionegro-it
Copy link
Author

Sure, this is the related issue on flutter/packages: flutter/flutter#156394

@tajjacob

This comment was marked as off-topic.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

3 participants