Merge branch 'main' into html-gradient

Author: xtyxtyx

.ci.yaml

@@ -7,5 +7,11 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+      time: "22:00" # 10 PM MTV
+      timezone: "America/Los_Angeles"
     labels:
       - "autosubmit"
+    ignore:
+      # ignore patch versions, just rely on minor in order to update fewer times
+      - dependency-name: "github/codeql-action"
+        update-types: ["version-update:semver-minor"]

.github/autosubmit.yml

@@ -0,0 +1,40 @@
+# Copyright 2013 The Flutter Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# See https://github.com/actions/labeler/blob/main/README.md for docs.
+'affects: desktop':
+  - shell/platform/darwin/common/**/*
+  - shell/platform/darwin/macos/**/*
+  - shell/platform/linux/**/*
+  - shell/platform/windows/**/*
+
+embedder:
+  - shell/platform/embedder
+
+'e: impeller':
+  - impeller/**/*
+
+platform-android:
+  - shell/platform/android/**/*
+
+platform-ios:
+  - shell/platform/darwin/common/**/*
+  - shell/platform/darwin/ios/**/*
+
+platform-fuchsia:
+  - shell/platform/fuchsia/**/*
+
+platform-linux:
+  - shell/platform/linux/**/*
+
+platform-macos:
+  - shell/platform/darwin/common/**/*
+  - shell/platform/darwin/macos/**/*
+
+platform-web:
+  - lib/web_ui/**/*
+  - '**/web_sdk/**/*'
+
+platform-windows:
+  - shell/platform/windows/**/*

.github/dependabot.yml

@@ -0,0 +1,20 @@
+# Copyright 2013 The Flutter Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+name: "Pull Request Labeler"
+on:
+- pull_request_target
+
+# Declare default permissions as read only.
+permissions: read-all
+
+jobs:
+  triage:
+    if: ${{ github.repository == 'flutter/engine' }}
+    permissions:
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+    # Source available at https://github.com/actions/labeler/blob/main/README.md
+    - uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594

.github/labeler.yml

@@ -22,7 +22,7 @@ jobs:
       id-token: write
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
         with:
           persist-credentials: false
       - name: "Run analysis"
@@ -49,6 +49,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866
+        uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a
         with:
           sarif_file: results.sarif

.github/workflows/labeler.yml

@@ -4,6 +4,8 @@ on:
   branch_protection_rule:
   push:
     branches: [ main ]
+  pull_request:
+    types: [ labeled ]
 
 # Declare default permissions as read only.
 permissions: read-all
@@ -12,7 +14,8 @@ jobs:
   vuln-scan:
     name: Vulnerability scanning
     runs-on: ubuntu-20.04
-    if: ${{ github.repository == 'flutter/engine' }}
+    # run on flutter/engine push to main or PRs with 'vulnerability patch' label 
+    if: ${{  github.repository == 'flutter/engine' && (github.event_name == 'push' || github.event.label.name == 'vulnerability scan') }}
     permissions:
       # Needed to upload the SARIF results to code-scanning dashboard.
       security-events: write
@@ -22,11 +25,11 @@ jobs:
       id-token: write
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
         with:
           persist-credentials: false
       - name: "setup python"
-        uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0
+        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
         with:
           python-version: '3.7.7' # install the python version needed
       - name: "extract and flatten deps"
@@ -42,6 +45,6 @@ jobs:
           retention-days: 5
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to security tab"
-        uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866
+        uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a
         with:
           sarif_file: osvReport.sarif

.github/workflows/scorecards-analysis.yml

@@ -23,3 +23,4 @@ Koutaro Mori <koutaro.mo@gmail.com>
 TheOneWithTheBraid <the-one@with-the-braid.cf>
 Twin Sun, LLC <google-contrib@twinsunsolutions.com>
 Qixing Cao <qixing.cao.83@gmail.com>
+LinXunFeng <linxunfeng@yeah.net>

.github/workflows/third_party_scan.yml

@@ -116,6 +116,7 @@ group("flutter") {
     public_deps += [
       "//flutter/display_list:display_list_benchmarks",
       "//flutter/display_list:display_list_builder_benchmarks",
+      "//flutter/display_list:display_list_region_benchmarks",
       "//flutter/fml:fml_benchmarks",
       "//flutter/impeller/geometry:geometry_benchmarks",
       "//flutter/lib/ui:ui_benchmarks",
@@ -186,7 +187,7 @@ group("unittests") {
     if (is_mac) {
       public_deps += [
         "//flutter/impeller/golden_tests:impeller_golden_tests",
-        "//flutter/shell/platform/darwin:flutter_channels_unittests",
+        "//flutter/shell/platform/darwin/common:framework_common_unittests",
         "//flutter/third_party/spring_animation:spring_animation_unittests",
       ]
     }