release: 0.0.40

[anilcancakir]

Release of the catalogue-driven billing screen and the social sign-in client that landed on main since 0.0.38. This is the last wave of the 2026-10-09 batch, after magic 0.0.27, magic_notifications 0.3.8 and magic_payments 0.0.8 (all live).

What ships

• feat(billing)!: catalogue-driven billing screen with product-key purchases on both rails #174. The billing screen is driven by the catalogue's products: both rails purchase by catalogue product key, a store build offers and prices only the products its own store carries, and a store purchase reports the rail's own change timing. BREAKING for a host that implements WebBillingService or StoreBillingService, or a slot that read MagicStarterPlan.monthly, annual or currency.
• feat(social)!: social sign-in, connected accounts, step-up confirmation and scheduled deletion #173. Social sign-in through the MagicStarterSocialAuth bridge, connected accounts, step-up confirmation and scheduled account deletion. This was tagged 0.0.39 from that merge commit; its CHANGELOG section is already in place.

Floors

Dependency	From	To
magic_payments	^0.0.7	^0.0.8 (a real requirement: product-key purchases, PurchaseContext, lastChangeTiming)
magic	^0.0.24	^0.0.27
magic_notifications	^0.3.6	^0.3.8
fluttersdk_wind	^1.8.0	^1.8.1
fluttersdk_artisan	^0.0.17	^0.0.19

Each pubspec comment that explains a floor keeps its reason and gains the batch note. magic_payments 0.0.8 is BREAKING and this package adopts it in this release (#174); none of magic 0.0.25 to 0.0.27, magic_notifications 0.3.7 and 0.3.8, wind 1.8.1 or artisan 0.0.18 and 0.0.19 is breaking.

Stamps

• pubspec.yaml, CLAUDE.md **Version:**, and the README.md and doc/getting-started/installation.md install snippets.
• .github/ISSUE_TEMPLATE/bug_report.yml: the Magic Starter Version field reads 0.0.40 and the Magic Framework Version field, which still read 1.0.0-alpha.3, reads 0.0.27.
• magicStarterVersion, which is test-guarded.
• magicNotificationsConstraint (^0.3.8), which has a parity test with the pubspec floor.
• magic 0.0.27 stamped plugin-starter.md v0.0.40 ahead of this release (checked by hand: the worktree skips skill_reference_stamp_test).

git grep -nF 0.0.39 -- ':!CHANGELOG.md' ':!*.lock' is empty, and so is a grep for each old floor.

Gates

Run on the hosted graph (no pubspec_overrides.yaml; resolved magic 0.0.27, magic_notifications 0.3.8, magic_payments 0.0.8, wind 1.8.1, artisan 0.0.19):

• dart format --output=none --set-exit-if-changed .: 388 files, 0 changed.
• flutter analyze: no issues.
• flutter test: +1884, with the one skip (skill_reference_stamp_test, no sibling checkout beside the worktree).
• flutter pub publish --dry-run: 0 warnings.

Tag

git tag 0.0.40 <merge-oid> && git push origin 0.0.40

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!