chore: vendor markdown_quill fork into third_party/ (#1743) #1746

Merged

brenno merged 1 commit from fork/markdown-quill-1743-v2 into main

2026-08-23 13:51:35 +00:00

brenno commented

2026-08-23 09:59:14 +00:00

Owner

Summary

Vendored markdown_quill 4.3.0 into third_party/markdown_quill/ as a path dependency — the published package is 17 months stale, has an unverified publisher, and issue creation is restricted upstream
Dropped the charcode transitive dependency (three ASCII constants replaced with local const ints) and fixed four lint issues for the --fatal-infos analyzer
Updated SBOM, THIRD_PARTY_NOTICES.md, sbom_build.dart fork origins, and the l10n string ("two vendored plugins" → "three vendored packages" in 31 languages)
A custom codec built directly on the markdown and flutter_quill APIs remains a viable long-term alternative, tracked in a separate issue

Test plan

make check groen (10496 tests, 87.3% coverage)
SBOM regenereert met 3 vendored-forks
flutter analyze --fatal-infos clean
l10n parity tests passed

Closes #1743

Generated with Devin

## Summary - Vendored `markdown_quill` 4.3.0 into `third_party/markdown_quill/` as a path dependency — the published package is 17 months stale, has an unverified publisher, and issue creation is restricted upstream - Dropped the `charcode` transitive dependency (three ASCII constants replaced with local `const int`s) and fixed four lint issues for the `--fatal-infos` analyzer - Updated SBOM, `THIRD_PARTY_NOTICES.md`, `sbom_build.dart` fork origins, and the l10n string ("two vendored plugins" → "three vendored packages" in 31 languages) - A custom codec built directly on the `markdown` and `flutter_quill` APIs remains a viable long-term alternative, tracked in a separate issue #### Test plan - [x] `make check` groen (10496 tests, 87.3% coverage) - [x] SBOM regenereert met 3 vendored-forks - [x] `flutter analyze --fatal-infos` clean - [x] l10n parity tests passed Closes #1743 Generated with [Devin](https://devin.ai)

brenno added 1 commit

2026-08-23 09:59:14 +00:00

chore: vendor markdown_quill fork into third_party/ (#1743 )

scans / scans (pull_request) Successful in 5m12s

Details

static-gate / static-gate (pull_request) Successful in 52m9s

Details

edf282d445

markdown_quill is 17 months stale, has an unverified publisher, and
issue creation is restricted on the upstream repo. OciDeck depends on
it for the WYSIWYG editor's markdown↔Quill bridge — core functionality.

Vendoring the package as a path dependency gives us control over bug
fixes and compatibility with future flutter_quill releases. The fork
drops the charcode transitive dependency (three ASCII constants replaced
with local const ints) and fixes four lint issues for the --fatal-infos
analyzer.

SBOM, THIRD_PARTY_NOTICES, sbom_build.dart fork origins, and the l10n
string ("two vendored plugins" → "three vendored packages" in 31
languages) are updated to reflect the third vendored fork.

A custom codec built directly on the markdown and flutter_quill APIs
remains a viable long-term alternative, tracked in a separate issue.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

brenno force-pushed fork/markdown-quill-1743-v2 from edf282d445

scans / scans (pull_request) Successful in 5m12s

Details

static-gate / static-gate (pull_request) Successful in 52m9s

Details

to 4f868c1e38

scans / scans (pull_request) Successful in 3m12s

Details

static-gate / static-gate (pull_request) Successful in 45m31s

Details

2026-08-23 11:03:15 +00:00

Compare