build: (deps): bump dart-lang/setup-dart from 1.4.0 to 1.8.0

[dependabot]

Bumps dart-lang/setup-dart from 1.4.0 to 1.8.0.

Release notes

Sourced from dart-lang/setup-dart's releases.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

What's Changed

• Install a Flutter SDK in the publish workflow allowing for publication of flutter packages.

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code to include changes from v1.6.3

v1.6.3

• Roll undici dependency to address CVE-2024-30260 and CVE-2024-30261.

v1.6.2

• Switch to running the workflow on node20 from node16. See also Transitioning from Node 16 to Node 20.

v1.6.1

• Updated the google storage url for main channel releases.

v1.6.0

• Enable provisioning of the latest Dart SDK patch release by specifying just the major and minor version (e.g. 3.2).

... (truncated)

Changelog

Sourced from dart-lang/setup-dart's changelog.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

• Install flutter sdk in publishing step, allowing Flutter packages to be published (#68[])

  #68: dart-lang/setup-dart#68

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code.

v1.6.3

• Roll undici dependency to address CVE-2024-30260 and CVE-2024-30261.

v1.6.2

... (truncated)

Commits

• 7654d45 chore: prepare v1.8.0 release (#188) (#189)
• 43c102f Bump actions/checkout from 6 to 7 in the github-actions group (#184)
• 10b57ef Bump the npm-dependencies group across 1 directory with 2 updates (#179)
• a73965b Bump undici from 6.24.1 to 6.27.0 (#182)
• 2bd1170 Fix failure of new matcher (#180)
• 23b5a66 feat: add problem matcher for dart analyze and integration tests (#178)
• cb71272 Bump the github-actions group with 2 updates (#177)
• 65eb853 chore: prepare v1.7.2 release (#175)
• 6e0ff0b Node 24 (#174)
• 03a180d Group npm dependency updates (#172)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cursor]

PR Summary

Low Risk
Only GitHub Actions workflow pins change; runtime product behavior is unaffected, with minor CI risk if the new action runner or SDK install behavior differs.

Overview
Updates six jobs in integrate.yml (e2ee_test, coverage_without_olm, coverage, dart_web_compatible, database_web_tests, pub-dev-dry-run) to pin dart-lang/setup-dart at the v1.8.0 commit (7654d458…), replacing the previous pin (a57a6c04…, v1.4.0). The sdk: ${{ env.dart_version }} inputs are unchanged.

This is CI-only: no Dart SDK or application code changes. The newer action brings Node 24, dependency/security updates in the action itself, and optional dart analyze problem-matcher behavior when that action runs analyze.

^{Reviewed by Cursor Bugbot for commit 4850ec3. Bugbot is set up for automated code reviews on this repo. Configure here.}

[dependabot]

Superseded by #2471.