From cdb5c9bdff3f86749255528a41196a4d49b8e8fd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 14:14:43 +0000
Subject: [PATCH 01/11] chore(deps): bump step-security/harden-runner from
 2.19.4 to 2.20.1

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.4 to 2.20.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...b09bb98e06d4d774595224525879c09bc6e98c40)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit d4ca7adcfe8b1831e7db21ed95e619365b5fe772)
---
 .github/workflows/analyze.yml            | 2 +-
 .github/workflows/build.yml              | 4 ++--
 .github/workflows/pana.yml               | 2 +-
 .github/workflows/pub-publish-dryrun.yml | 2 +-
 .github/workflows/release.yml            | 2 +-
 .github/workflows/sonarqube.yml          | 2 +-
 .github/workflows/test.yml               | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml
index 1777493..12e90f7 100644
--- a/.github/workflows/analyze.yml
+++ b/.github/workflows/analyze.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 13e4581..ef3e9d7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -63,7 +63,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/pana.yml b/.github/workflows/pana.yml
index b33e757..4f11b72 100644
--- a/.github/workflows/pana.yml
+++ b/.github/workflows/pana.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/pub-publish-dryrun.yml b/.github/workflows/pub-publish-dryrun.yml
index f71f793..c8752df 100644
--- a/.github/workflows/pub-publish-dryrun.yml
+++ b/.github/workflows/pub-publish-dryrun.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 230d86d..b44933a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index de3850b..997148b 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 65ffa50..315e155 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

From 29f43932e837a77ce5ad9c4931ded452a845a103 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 14:14:27 +0000
Subject: [PATCH 02/11] chore(deps): bump actions/checkout from 6.0.3 to 7.0.1

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 73c2f908acd1e9178f7d018e679d1e8a2dbee681)
---
 .github/workflows/analyze.yml            | 2 +-
 .github/workflows/build.yml              | 4 ++--
 .github/workflows/pana.yml               | 2 +-
 .github/workflows/pub-publish-dryrun.yml | 2 +-
 .github/workflows/release.yml            | 2 +-
 .github/workflows/sonarqube.yml          | 2 +-
 .github/workflows/test.yml               | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml
index 12e90f7..1f8ee36 100644
--- a/.github/workflows/analyze.yml
+++ b/.github/workflows/analyze.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ef3e9d7..8057fab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -68,7 +68,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/pana.yml b/.github/workflows/pana.yml
index 4f11b72..82b08a3 100644
--- a/.github/workflows/pana.yml
+++ b/.github/workflows/pana.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/pub-publish-dryrun.yml b/.github/workflows/pub-publish-dryrun.yml
index c8752df..d621ee4 100644
--- a/.github/workflows/pub-publish-dryrun.yml
+++ b/.github/workflows/pub-publish-dryrun.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b44933a..e1bb381 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index 997148b..5846ce9 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -32,7 +32,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 315e155..13e5cb5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -49,7 +49,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 

From 96165072eb4902a0362163654079c9f9ceace691 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Jun 2026 14:16:03 +0000
Subject: [PATCH 03/11] chore(deps): bump actions/cache from 5.0.5 to 6.1.0

Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit bf8764a5ba2740e60c7da4cf0a72ca4dfba66613)
---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8057fab..4a427c3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -41,7 +41,7 @@ jobs:
           cache: true
 
       - name: Restore Gradle cache
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
@@ -80,7 +80,7 @@ jobs:
           cache: true
 
       - name: Restore CocoaPods cache
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             apps/playground/ios/Pods

From dd62e27243240dda73580de15b9add706e2fd055 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 14:14:29 +0000
Subject: [PATCH 04/11] chore(deps): bump dart-lang/setup-dart from 1.7.2 to
 1.8.0

Bumps [dart-lang/setup-dart](https://github.com/dart-lang/setup-dart) from 1.7.2 to 1.8.0.
- [Release notes](https://github.com/dart-lang/setup-dart/releases)
- [Changelog](https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dart-lang/setup-dart/compare/65eb853c7ba17dde3be364c3d2858773e7144260...7654d458321ee25acccccfdb86cd48bd95768ff1)

---
updated-dependencies:
- dependency-name: dart-lang/setup-dart
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 882e804ade2e086c69e8bde5580c81b5d10c3801)
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e1bb381..f283b1e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
           echo "Release tag '$TAG' OK."
 
       - name: Set up Dart for pub.dev OIDC
-        uses: dart-lang/setup-dart@65eb853c7ba17dde3be364c3d2858773e7144260 # v1.7.2
+        uses: dart-lang/setup-dart@7654d458321ee25acccccfdb86cd48bd95768ff1 # v1.8.0
 
       - name: Set up Flutter
         uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2.23.0

From 225729416ba3e2d5e766983b1e9b18824c35575e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 14:14:21 +0000
Subject: [PATCH 05/11] chore(deps): bump SonarSource/sonarqube-scan-action
 from 8.2.0 to 8.2.1

Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 8.2.0 to 8.2.1.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/713881670b6b3676cda39549040e2d88c70d582e...22918119ff8e1ca75a623e15c8296b6ea4fbe28f)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 222b6672d3463429a6df1affc65311c5487fa200)
---
 .github/workflows/sonarqube.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index 5846ce9..0e91edd 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -51,7 +51,7 @@ jobs:
         run: make test-sdk-coverage
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@713881670b6b3676cda39549040e2d88c70d582e # v8.2.0
+        uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

From 216bed549467d3c9e7226d6e900d9988edaa2f36 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 14:21:14 +0000
Subject: [PATCH 06/11] chore(deps): bump webview_flutter_android from 4.13.0
 to 4.14.1

Bumps [webview_flutter_android](https://github.com/flutter/packages/tree/main/packages/webview_flutter) from 4.13.0 to 4.14.1.
- [Commits](https://github.com/flutter/packages/commits/webview_flutter_android-v4.14.1/packages/webview_flutter)

---
updated-dependencies:
- dependency-name: webview_flutter_android
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 8518d94046b97a1347a7d0d12b81b748374caac7)
---
 packages/formbricks/pubspec.yaml |  2 +-
 pubspec.lock                     | 20 ++++++++++----------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/packages/formbricks/pubspec.yaml b/packages/formbricks/pubspec.yaml
index c8b5247..1e4538f 100644
--- a/packages/formbricks/pubspec.yaml
+++ b/packages/formbricks/pubspec.yaml
@@ -27,7 +27,7 @@ dependencies:
   clock: ^1.1.2
   webview_flutter: ^4.13.0
   # Android-specific APIs are used to disable file/content access.
-  webview_flutter_android: ^4.13.0
+  webview_flutter_android: ^4.14.1
   url_launcher: ^6.3.0
   connectivity_plus: ^7.1.1
 
diff --git a/pubspec.lock b/pubspec.lock
index 083efad..eba18e1 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -275,10 +275,10 @@ packages:
     dependency: transitive
     description:
       name: matcher
-      sha256: dc0b7dc7651697ea4ff3e69ef44b0407ea32c487a39fff6a4004fa585e901861
+      sha256: "31bd099b47c10cd1aeb55146a2d46ce0277630ecef3f7dae54ad7873f36696cd"
       url: "https://pub.dev"
     source: hosted
-    version: "0.12.19"
+    version: "0.12.20"
   material_color_utilities:
     dependency: transitive
     description:
@@ -299,10 +299,10 @@ packages:
     dependency: transitive
     description:
       name: meta
-      sha256: "1741988757a65eb6b36abe716829688cf01910bbf91c34354ff7ec1c3de2b349"
+      sha256: "307249ce4ff29d58a18e97f6345f539382eb9c9c29ecda628900f31de0443dd9"
       url: "https://pub.dev"
     source: hosted
-    version: "1.18.0"
+    version: "1.19.0"
   mocktail:
     dependency: transitive
     description:
@@ -544,10 +544,10 @@ packages:
     dependency: transitive
     description:
       name: test_api
-      sha256: "949a932224383300f01be9221c39180316445ecb8e7547f70a41a35bf421fb9e"
+      sha256: "2a122cbe059f8b610d3a5415f42e255b6c17b1f21eee1d960f31080237fb4f11"
       url: "https://pub.dev"
     source: hosted
-    version: "0.7.11"
+    version: "0.7.12"
   typed_data:
     dependency: transitive
     description:
@@ -624,10 +624,10 @@ packages:
     dependency: transitive
     description:
       name: vector_math
-      sha256: d530bd74fea330e6e364cda7a85019c434070188383e1cd8d9777ee586914c5b
+      sha256: f36f9f3be64c6198714492bb455c11056e33e2f85d9a0b676a48301e44fdcf47
       url: "https://pub.dev"
     source: hosted
-    version: "2.2.0"
+    version: "2.4.2"
   vm_service:
     dependency: transitive
     description:
@@ -664,10 +664,10 @@ packages:
     dependency: transitive
     description:
       name: webview_flutter_android
-      sha256: a97db7a44f8e71af2f3971c45550a08cce1fb60059c1b8e534251e6cfb753490
+      sha256: "4de8b3d1ff4ebe1bdb42e68a5e4f809194a3cb0117a8f495f590004f00da3964"
       url: "https://pub.dev"
     source: hosted
-    version: "4.13.0"
+    version: "4.14.1"
   webview_flutter_platform_interface:
     dependency: transitive
     description:

From 9fc11dc23026cc9255e11a9f74476d6e0a1ba69e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 14:15:27 +0000
Subject: [PATCH 07/11] chore(deps): bump webview_flutter from 4.13.1 to 4.14.1

Bumps [webview_flutter](https://github.com/flutter/packages/tree/main/packages/webview_flutter) from 4.13.1 to 4.14.1.
- [Commits](https://github.com/flutter/packages/commits/webview_flutter-v4.14.1/packages/webview_flutter)

---
updated-dependencies:
- dependency-name: webview_flutter
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit e578ef67a1e7ee6fd9ac8af87c13f3cf1e2fdc96)
---
 packages/formbricks/pubspec.yaml | 2 +-
 pubspec.lock                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/formbricks/pubspec.yaml b/packages/formbricks/pubspec.yaml
index 1e4538f..8e727c8 100644
--- a/packages/formbricks/pubspec.yaml
+++ b/packages/formbricks/pubspec.yaml
@@ -25,7 +25,7 @@ dependencies:
   http: ^1.2.0
   shared_preferences: ^2.3.0
   clock: ^1.1.2
-  webview_flutter: ^4.13.0
+  webview_flutter: ^4.14.1
   # Android-specific APIs are used to disable file/content access.
   webview_flutter_android: ^4.14.1
   url_launcher: ^6.3.0
diff --git a/pubspec.lock b/pubspec.lock
index eba18e1..c68819f 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -656,10 +656,10 @@ packages:
     dependency: transitive
     description:
       name: webview_flutter
-      sha256: a3da219916aba44947d3a5478b1927876a09781174b5a2b67fa5be0555154bf9
+      sha256: d53e1ccf5516f25017e3c9d44c39034db352d20fa34fe200674270242c2c5111
       url: "https://pub.dev"
     source: hosted
-    version: "4.13.1"
+    version: "4.14.1"
   webview_flutter_android:
     dependency: transitive
     description:

From 2ff8c64acf295bf2ba7609c108b5c516ebd54a3c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 14:15:33 +0000
Subject: [PATCH 08/11] chore(deps): bump connectivity_plus from 7.1.1 to 7.3.1

Bumps [connectivity_plus](https://github.com/fluttercommunity/plus_plugins/tree/main/packages/connectivity_plus) from 7.1.1 to 7.3.1.
- [Release notes](https://github.com/fluttercommunity/plus_plugins/releases)
- [Commits](https://github.com/fluttercommunity/plus_plugins/commits/connectivity_plus-v7.3.1/packages/connectivity_plus)

---
updated-dependencies:
- dependency-name: connectivity_plus
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 3933dc288ab8c97fb27624d23d579e7f660f3cce)
---
 packages/formbricks/pubspec.yaml | 2 +-
 pubspec.lock                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/formbricks/pubspec.yaml b/packages/formbricks/pubspec.yaml
index 8e727c8..7a10f29 100644
--- a/packages/formbricks/pubspec.yaml
+++ b/packages/formbricks/pubspec.yaml
@@ -29,7 +29,7 @@ dependencies:
   # Android-specific APIs are used to disable file/content access.
   webview_flutter_android: ^4.14.1
   url_launcher: ^6.3.0
-  connectivity_plus: ^7.1.1
+  connectivity_plus: ^7.3.1
 
 dev_dependencies:
   flutter_test:
diff --git a/pubspec.lock b/pubspec.lock
index c68819f..880fd58 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -93,10 +93,10 @@ packages:
     dependency: transitive
     description:
       name: connectivity_plus
-      sha256: "62ffa266d9a23b79fb3fcbc206afc00bb979417ba57b1324c546b5aab95ba057"
+      sha256: "762c99f890ca8bf87f7337236f99edd42793843bc6c3631da294a76653a54bd0"
       url: "https://pub.dev"
     source: hosted
-    version: "7.1.1"
+    version: "7.3.1"
   connectivity_plus_platform_interface:
     dependency: transitive
     description:

From dbe716ab7aeca8c008b92b9aca010f85b81c4bf4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 8 Sep 2026 14:15:07 +0000
Subject: [PATCH 09/11] chore(deps): bump melos from 7.8.2 to 8.6.0

Bumps [melos](https://github.com/invertase/melos/tree/main/packages) from 7.8.2 to 8.6.0.
- [Changelog](https://github.com/invertase/melos/blob/main/CHANGELOG.md)
- [Commits](https://github.com/invertase/melos/commits/melos-v8.6.0/packages)

---
updated-dependencies:
- dependency-name: melos
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit bf4246c10bc93647a8a2b18f571dad71eb45df5f)
---
 pubspec.lock | 8 ++++----
 pubspec.yaml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pubspec.lock b/pubspec.lock
index 880fd58..dc66f53 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -61,10 +61,10 @@ packages:
     dependency: transitive
     description:
       name: cli_launcher
-      sha256: "35cf15a3ffaeb9c11849eaa0afba761bb76dceb42d050532bfd3e1299c9748cd"
+      sha256: "96883f87648524292e24e2cc6a369fbdf64883473fe3e3ddadd3d857bf16a484"
       url: "https://pub.dev"
     source: hosted
-    version: "0.3.3+1"
+    version: "0.3.3+2"
   cli_util:
     dependency: transitive
     description:
@@ -291,10 +291,10 @@ packages:
     dependency: "direct dev"
     description:
       name: melos
-      sha256: "5fc1a858e3d90fdc42f2f423b95f901214bbc3d9e80c99125d9352f12453721d"
+      sha256: f8f6110bdac663034301c56dec02381de08f81b593175fee4c5714874d3d6dcd
       url: "https://pub.dev"
     source: hosted
-    version: "7.8.2"
+    version: "8.6.0"
   meta:
     dependency: transitive
     description:
diff --git a/pubspec.yaml b/pubspec.yaml
index a295528..a4b7926 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -14,7 +14,7 @@ workspace:
   - apps/playground
 
 dev_dependencies:
-  melos: ^7.8.2
+  melos: ^8.6.0
 
 # Melos 7 builds on Dart's native pub workspaces (the `workspace:` key above).
 # It adds cross-package scripting: run analyze / test / format across every

From e6bc4c3c9dffbb9d19a20e0474ccc1f12d0a805e Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 14 Sep 2026 13:32:04 +0000
Subject: [PATCH 10/11] chore(deps): reconcile lockfile and migrate melos
 config to 8.x
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Consolidating the nine open Dependabot PRs needed two fixes on top of the
cherry-picked bumps:

- pubspec.lock: Dependabot resolves without a Flutter SDK, so its branches
  also moved the SDK-pinned packages (matcher, meta, test_api, vector_math)
  to versions Flutter 3.44.0 does not pin. That makes
  `flutter pub get --enforce-lockfile` — what CI runs — fail. Regenerated the
  lockfile with the pinned SDK from .fvmrc so it only carries the four real
  dependency changes.

- Melos 8.0.0 made script `run` and `exec` mutually exclusive; the command an
  exec script runs now lives under `exec.command`. The `test` and
  `test-coverage` scripts still used the 7.x form, which made every melos
  command (including `melos list`) fail. Migrated both and refreshed the
  Melos 7 references in the root pubspec and README.

Verified with Flutter 3.44.0: pub get --enforce-lockfile, flutter analyze
--fatal-infos --fatal-warnings, dart format check, 368 SDK tests + 6
playground tests, melos run test, and pub publish --dry-run (0 warnings).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DyooLoWXm3dWMyLzwfRu34
---
 README.md    |  4 ++--
 pubspec.lock | 16 ++++++++--------
 pubspec.yaml | 10 ++++++----
 3 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/README.md b/README.md
index 68f8f95..28181d3 100644
--- a/README.md
+++ b/README.md
@@ -116,12 +116,12 @@ A standard `packages/*` + `apps/*` monorepo split.
 
 ## Monorepo tooling
 
-Uses **Dart pub workspaces** (Dart ≥ 3.6) + **[Melos](https://melos.invertase.dev) 7**.
+Uses **Dart pub workspaces** (Dart ≥ 3.6) + **[Melos](https://melos.invertase.dev) 8**.
 
 - The root `pubspec.yaml` declares `workspace:` members. Each member sets
   `resolution: workspace`, so the whole repo shares **one** lockfile and one
   resolved dependency graph — no version drift between SDK and demo app.
-- Melos 7 sits on top of native workspaces and adds cross-package scripts
+- Melos 8 sits on top of native workspaces and adds cross-package scripts
   (analyze / test / format across everything at once). Its config lives under
   the `melos:` key in the root `pubspec.yaml` (Melos 7 dropped `melos.yaml`).
 
diff --git a/pubspec.lock b/pubspec.lock
index dc66f53..9ee695c 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -275,10 +275,10 @@ packages:
     dependency: transitive
     description:
       name: matcher
-      sha256: "31bd099b47c10cd1aeb55146a2d46ce0277630ecef3f7dae54ad7873f36696cd"
+      sha256: dc0b7dc7651697ea4ff3e69ef44b0407ea32c487a39fff6a4004fa585e901861
       url: "https://pub.dev"
     source: hosted
-    version: "0.12.20"
+    version: "0.12.19"
   material_color_utilities:
     dependency: transitive
     description:
@@ -299,10 +299,10 @@ packages:
     dependency: transitive
     description:
       name: meta
-      sha256: "307249ce4ff29d58a18e97f6345f539382eb9c9c29ecda628900f31de0443dd9"
+      sha256: "1741988757a65eb6b36abe716829688cf01910bbf91c34354ff7ec1c3de2b349"
       url: "https://pub.dev"
     source: hosted
-    version: "1.19.0"
+    version: "1.18.0"
   mocktail:
     dependency: transitive
     description:
@@ -544,10 +544,10 @@ packages:
     dependency: transitive
     description:
       name: test_api
-      sha256: "2a122cbe059f8b610d3a5415f42e255b6c17b1f21eee1d960f31080237fb4f11"
+      sha256: "949a932224383300f01be9221c39180316445ecb8e7547f70a41a35bf421fb9e"
       url: "https://pub.dev"
     source: hosted
-    version: "0.7.12"
+    version: "0.7.11"
   typed_data:
     dependency: transitive
     description:
@@ -624,10 +624,10 @@ packages:
     dependency: transitive
     description:
       name: vector_math
-      sha256: f36f9f3be64c6198714492bb455c11056e33e2f85d9a0b676a48301e44fdcf47
+      sha256: d530bd74fea330e6e364cda7a85019c434070188383e1cd8d9777ee586914c5b
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.2"
+    version: "2.2.0"
   vm_service:
     dependency: transitive
     description:
diff --git a/pubspec.yaml b/pubspec.yaml
index a4b7926..c1f58d9 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -3,7 +3,7 @@ publish_to: none
 
 # Root of the Formbricks Flutter monorepo.
 # This package is never published; it only declares the pub workspace
-# (Dart 3.6+ / Melos 7) that ties the SDK package and demo app together
+# (Dart 3.6+ / Melos 8) that ties the SDK package and demo app together
 # under a single resolved dependency graph + lockfile.
 environment:
   sdk: ^3.12.0
@@ -16,7 +16,7 @@ workspace:
 dev_dependencies:
   melos: ^8.6.0
 
-# Melos 7 builds on Dart's native pub workspaces (the `workspace:` key above).
+# Melos 8 builds on Dart's native pub workspaces (the `workspace:` key above).
 # It adds cross-package scripting: run analyze / test / format across every
 # package with one command. Used locally and in CI.
 melos:
@@ -43,16 +43,18 @@ melos:
 
     test:
       description: Run tests in every package that has a test/ dir.
-      run: flutter test
+      # Melos 8 made `run` and `exec` mutually exclusive — the command an
+      # exec script runs now lives under `exec.command`.
       exec:
+        command: flutter test
         concurrency: 1
       packageFilters:
         dirExists: test
 
     test-coverage:
       description: Run tests with coverage in every package that has tests.
-      run: flutter test --coverage
       exec:
+        command: flutter test --coverage
         concurrency: 1
       packageFilters:
         dirExists: test

From 5122f1a9056b0f5a7127900e05f627c70d2f8902 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 14 Sep 2026 13:40:23 +0000
Subject: [PATCH 11/11] docs: separate the repo's Dart floor from the published
 package's
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The root pubspec comment and README both read "Dart 3.6+", which is the
floor for pub workspaces and for the published `formbricks` package — not
for working in this repo, whose root pins `sdk: ^3.12.0`. Someone on Dart
3.6-3.11 would read either line and fail to resolve the workspace.

State the repo requirement (Dart 3.12+) as the binding one and keep the
lower floors where they actually apply. Also corrects the Melos floor:
8.6.0 needs Dart 3.9+, not 3.6+.

Addresses CodeRabbit's review comment on pubspec.yaml#L6.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DyooLoWXm3dWMyLzwfRu34
---
 README.md    | 6 +++++-
 pubspec.yaml | 9 +++++++--
 2 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 28181d3..f93e498 100644
--- a/README.md
+++ b/README.md
@@ -116,7 +116,11 @@ A standard `packages/*` + `apps/*` monorepo split.
 
 ## Monorepo tooling
 
-Uses **Dart pub workspaces** (Dart ≥ 3.6) + **[Melos](https://melos.invertase.dev) 8**.
+Uses **Dart pub workspaces** + **[Melos](https://melos.invertase.dev) 8**.
+Developing in this repo needs **Dart ≥ 3.12** (the root `pubspec.yaml`
+constraint). The published `formbricks` package keeps a lower floor of
+Dart ≥ 3.6 / Flutter ≥ 3.27 for consumers — workspaces need Dart ≥ 3.6 and
+Melos 8.6.0 needs Dart ≥ 3.9, so the repo constraint is the binding one.
 
 - The root `pubspec.yaml` declares `workspace:` members. Each member sets
   `resolution: workspace`, so the whole repo shares **one** lockfile and one
diff --git a/pubspec.yaml b/pubspec.yaml
index c1f58d9..9a599a1 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -3,8 +3,13 @@ publish_to: none
 
 # Root of the Formbricks Flutter monorepo.
 # This package is never published; it only declares the pub workspace
-# (Dart 3.6+ / Melos 8) that ties the SDK package and demo app together
-# under a single resolved dependency graph + lockfile.
+# (Melos 8) that ties the SDK package and demo app together under a single
+# resolved dependency graph + lockfile.
+#
+# Working in this repo needs Dart 3.12+ (the `sdk` constraint below). That is
+# stricter than what the pieces themselves require — pub workspaces need
+# Dart 3.6+ and Melos 8.6.0 needs Dart 3.9+ — and stricter than the published
+# `formbricks` package, which keeps a Dart 3.6 / Flutter 3.27 floor.
 environment:
   sdk: ^3.12.0