build(deps): bump dart-lang/setup-dart from 1.7.2 to 1.8.1 in /.github/actions/setup-publish

[dependabot]

Bumps dart-lang/setup-dart from 1.7.2 to 1.8.1.

Release notes

Sourced from dart-lang/setup-dart's releases.

v1.8.1

• Update workflows to pin actions/checkout to a commit SHA.
• Harden workflow permissions to contents: read.
• Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
• Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

Changelog

Sourced from dart-lang/setup-dart's changelog.

v1.8.1

• Update workflows to pin actions/checkout to a commit SHA.
• Harden workflow permissions to contents: read.
• Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
• Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

• Install flutter sdk in publishing step, allowing Flutter packages to be published (#68[])

  #68: dart-lang/setup-dart#68

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code.

v1.6.3

... (truncated)

Commits

• 6afc89d Pin actions/checkout to a commit SHA and harden workflow permissions (#196)
• b653b3c Prepare v1.8.1 release (#195)
• 45165d2 Bump the github-actions group across 1 directory with 2 updates (#194)
• 9af6bba Pin actions/checkout to a commit SHA in publish.yml (#193)
• ddca5d2 Bump @​vercel/ncc in the npm-dependencies group across 1 directory (#185)
• 5c116a3 Bump undici from 6.27.0 to 6.28.0 (#190)
• 7654d45 chore: prepare v1.8.0 release (#188) (#189)
• 43c102f Bump actions/checkout from 6 to 7 in the github-actions group (#184)
• 10b57ef Bump the npm-dependencies group across 1 directory with 2 updates (#179)
• a73965b Bump undici from 6.24.1 to 6.27.0 (#182)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 092feb93-15b1-47ee-8da7-e169c1e2d9f0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[utkrishtsahu]

approve