build: (deps): bump dart-lang/setup-dart from 1.4.0 to 1.8.1

[dependabot]

Bumps dart-lang/setup-dart from 1.4.0 to 1.8.1.

Release notes

Sourced from dart-lang/setup-dart's releases.

v1.8.1

• Update workflows to pin actions/checkout to a commit SHA.
• Harden workflow permissions to contents: read.
• Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
• Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

What's Changed

• Install a Flutter SDK in the publish workflow allowing for publication of flutter packages.

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code to include changes from v1.6.3

v1.6.3

• Roll undici dependency to address CVE-2024-30260 and CVE-2024-30261.

v1.6.2

• Switch to running the workflow on node20 from node16. See also Transitioning from Node 16 to Node 20.

... (truncated)

Changelog

Sourced from dart-lang/setup-dart's changelog.

v1.8.1

• Update workflows to pin actions/checkout to a commit SHA.
• Harden workflow permissions to contents: read.
• Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
• Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

• Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
• Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
• Update GitHub Action dependencies (actions/checkout v7).
• Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

• Install flutter sdk in publishing step, allowing Flutter packages to be published (#68[])

  #68: dart-lang/setup-dart#68

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code.

v1.6.3

... (truncated)

Commits

• 6afc89d Pin actions/checkout to a commit SHA and harden workflow permissions (#196)
• b653b3c Prepare v1.8.1 release (#195)
• 45165d2 Bump the github-actions group across 1 directory with 2 updates (#194)
• 9af6bba Pin actions/checkout to a commit SHA in publish.yml (#193)
• ddca5d2 Bump @​vercel/ncc in the npm-dependencies group across 1 directory (#185)
• 5c116a3 Bump undici from 6.27.0 to 6.28.0 (#190)
• 7654d45 chore: prepare v1.8.0 release (#188) (#189)
• 43c102f Bump actions/checkout from 6 to 7 in the github-actions group (#184)
• 10b57ef Bump the npm-dependencies group across 1 directory with 2 updates (#179)
• a73965b Bump undici from 6.24.1 to 6.27.0 (#182)
• Additional commits viewable in compare view

---

Note

Low Risk
CI-only change to the Dart setup action pin with no application code or runtime behavior changes.

Overview
Updates the pinned dart-lang/setup-dart action commit in integrate.yml from the v1.4.0 SHA to 6afc89df92d6eb3834022f73cd65adc8cdfcb92d (v1.8.1).

The same bump is applied across six CI jobs that install the Dart SDK: e2ee_test, coverage_without_olm, coverage, dart_web_compatible, database_web_tests, and pub-dev-dry-run. Each job still uses sdk: ${{ env.dart_version }} from versions.env; only the setup action version changes.

Upstream v1.8.x brings dart analyze problem matchers for PR annotations, Node 24 runtime, and dependency/security updates in the action itself.

^{Reviewed by Cursor Bugbot for commit c06bd48. Bugbot is set up for automated code reviews on this repo. Configure here.}