feat: added subscription check

Author: Raj-StepSecurity

.github/FUNDING.yaml

@@ -5,7 +5,6 @@ on:
   push:
     branches:
       - main
-      - dev
   pull_request:
     paths:
       - setup.sh
@@ -17,32 +16,26 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run shellcheck
-        uses: ludeeus/action-shellcheck@master
+        uses: step-security/action-shellcheck@v2
 
   test_channel:
     runs-on: ${{ matrix.operating-system }}
 
     strategy:
       matrix:
-        operating-system:
-          - ubuntu-latest
-          - windows-latest
-          - macos-latest
-        channel: [stable, beta, master]
-        dry-run: [true, false]
-        git-source:
-          - https://github.com/flutter/flutter.git
-          - https://github.com/Flutter-Foundation/flutter.git
-          - https://gitee.com/harmonycommando_flutter/flutter.git
+        operating-system: ${{ github.actor == 'dependabot[bot]' && fromJSON('["ubuntu-latest"]') || fromJSON('["ubuntu-latest", "macos-latest", "windows-latest"]') }}
+        channel: ${{ github.actor == 'dependabot[bot]' && fromJSON('["stable"]') || fromJSON('["stable", "beta", "master"]') }}
+        dry-run: ${{ github.actor == 'dependabot[bot]' && fromJSON('[false]') || fromJSON('[true, false]') }}
+        git-source: ${{ github.actor == 'dependabot[bot]' && fromJSON('["https://github.com/flutter/flutter.git"]') || fromJSON('["https://github.com/flutter/flutter.git", "https://github.com/Flutter-Foundation/flutter.git", "https://gitee.com/harmonycommando_flutter/flutter.git"]') }}
         include:
           - operating-system: ubuntu-latest
             channel: main
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - id: flutter-action
         uses: ./
         with:
@@ -78,12 +71,11 @@ jobs:
 
     strategy:
       matrix:
-        operating-system:
-          [ubuntu-latest, windows-latest, macos-latest]
+        operating-system: ${{ github.actor == 'dependabot[bot]' && fromJSON('["ubuntu-latest"]') || fromJSON('["ubuntu-latest", "windows-latest", "macos-latest"]') }}
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./
         with:
           channel: stable
@@ -99,11 +91,11 @@ jobs:
 
     strategy:
       matrix:
-        operating-system: [ubuntu-latest]
+        operating-system: ${{ github.actor == 'dependabot[bot]' && fromJSON('["ubuntu-latest"]') || fromJSON('["ubuntu-latest"]') }}
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./
         with:
           channel: stable
@@ -120,11 +112,11 @@ jobs:
 
     strategy:
       matrix:
-        operating-system: [ubuntu-latest, macos-latest]
+        operating-system: ${{ github.actor == 'dependabot[bot]' && fromJSON('["ubuntu-latest"]') || fromJSON('["ubuntu-latest", "macos-latest"]') }}
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - id: flutter-action
         uses: ./
         with:
@@ -152,7 +144,7 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - run: ./setup.sh -t -p -f test/pubspec.yaml   | grep '3.3.10'
         shell: bash
       - run: ./setup.sh -t -p                        | grep 'stable'
@@ -242,14 +234,15 @@ jobs:
 
 
   test_print_output_arm64:
+    if: github.actor != 'dependabot[bot]'
     runs-on: macos-latest
 
     # These calls to setup.sh sepcify the -t flag, which enables test mode.
     # Test mode uses hardcoded Flutter release manifests from test/ directory.
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - run: ./setup.sh -t -p -f test/pubspec.yaml   | grep '3.3.10'
         shell: bash
       - run: ./setup.sh -t -p                        | grep 'stable'

.github/ISSUE_TEMPLATE/enforce-sha-pinning.md

@@ -1,5 +1,6 @@
 The MIT License (MIT)
 
+Copyright (c) 2019 Alif Rachmawadi <arch@subosito.com>
 Copyright (c) 2026 StepSecurity
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

.github/PULL_REQUEST_TEMPLATE.md

@@ -5,8 +5,6 @@
 Flutter environment for use in GitHub Actions.
 It works on Linux, Windows, and macOS.
 
-Originally created by [Alif Rachmawadi]. Maintained by [Bartek Pacia].
-
 The following sections show how to configure this action.
 
 ## Specifying Flutter version
@@ -16,7 +14,7 @@ The following sections show how to configure this action.
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -32,7 +30,7 @@ This is inspired by [`actions/setup-go`](https://github.com/actions/setup-go).
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -74,7 +72,7 @@ steps:
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -87,7 +85,7 @@ steps:
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -101,7 +99,7 @@ steps:
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -115,7 +113,7 @@ steps:
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -131,7 +129,7 @@ You can get more infomation from [Flutter official docs](https://docs.flutter.de
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     env:
       FLUTTER_STORAGE_BASE_URL: https://storage.flutter-io.cn
@@ -152,7 +150,7 @@ This action supports "alternative Flutters" in addition to the official
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -173,7 +171,7 @@ You can apply your patch like this:
 ```yaml
 steps:
 - name: Clone repository
-  uses: actions/checkout@v6
+  uses: actions/checkout@v7
 - uses: step-security/flutter-action@v2
   with:
     flutter-version: 3.22.2
@@ -185,18 +183,14 @@ steps:
     git status
 ```
 
-> [!NOTE]
->
-> This was first discussed in [this issue](https://github.com/step-security/flutter-action/issues/310).
-
 ## Build targets
 
 Build **Android** APK and app bundle:
 
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -219,7 +213,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Flutter
         uses: step-security/flutter-action@v2
         with:
@@ -234,7 +228,7 @@ jobs:
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -252,7 +246,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Flutter
         uses: step-security/flutter-action@v2
         with:
@@ -268,7 +262,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Flutter
         uses: step-security/flutter-action@v2
         with:
@@ -291,7 +285,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up Flutter
         uses: step-security/flutter-action@v2
         with:
@@ -311,7 +305,7 @@ Integration with [`actions/cache`](https://github.com/actions/cache):
 ```yaml
 steps:
   - name: Clone repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     with:
@@ -365,7 +359,7 @@ Example usage (inspired by [actions/cache@v5](https://github.com/actions/cache/b
 ```yaml
 steps:
   - name: Checkout repository
-    uses: actions/checkout@v6
+    uses: actions/checkout@v7
 
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
@@ -389,7 +383,7 @@ Use outputs from `flutter-action`:
 ```yaml
 steps:
   - name: Clone repository
-  - uses: actions/checkout@v6
+  - uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     id: flutter-action
@@ -415,7 +409,7 @@ If you don't need to install Flutter and just want the outputs, you can use the
 ```yaml
 steps:
   - name: Clone repository
-  - uses: actions/checkout@v6
+  - uses: actions/checkout@v7
   - name: Set up Flutter
     uses: step-security/flutter-action@v2
     id: flutter-action
@@ -435,5 +429,3 @@ steps:
     shell: bash
 ```
 
-[Alif Rachmawadi]: https://github.com/subosito
-[Bartek Pacia]: https://github.com/bartekpacia

.github/workflows/audit_package.yml

@@ -1,6 +1,6 @@
 name: Set up Flutter
 description: Setup your runner with Flutter environment
-author: Alif Rachmawadi
+author: 'step-security'
 branding:
   icon: maximize
   color: blue