Use official Dart publishing

[nohli]

Switches android_id from the third-party publishing action to Dart's official OIDC workflow. Releases now have to pass a publish dry run and the package tests before pub.dev receives them. OIDC uses a short-lived token, so the repository no longer needs a stored pub credential.

One-time pub.dev setup

Before the first release from this workflow:

1. Open the android_id Admin page.
2. Under Automated publishing, enable publishing from GitHub Actions.
3. Set Repository to fluttercommunity/android_id.
4. Set Tag pattern to {{version}}.
5. Enable publishing from push events. Leave workflow-dispatch publishing and a required GitHub Actions environment disabled.
6. Save the configuration and confirm that pub.dev shows success.

The workflow expects a bare version tag such as 1.2.3, and that tag must match version: in pubspec.yaml. No PUB_CREDENTIALS secret is needed. The full setup is covered in the official Dart publishing guide.

Validation

Validated locally with Flutter 3.47.5: package and example analysis and tests, a publish dry run with no warnings, and an Android release build.

This PR is stacked on #126 and should be merged after it.

[Copilot]

🟡 Changes recommended

The publish workflow’s tag trigger pattern won’t match intended semver tags (glob vs regex), and the publish job is missing required contents: read permissions for checkout within the reusable workflow.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

This PR updates the package publishing automation to use Dart’s official OIDC-based publishing workflow (reusable workflow) instead of a third-party publisher, and adds a pre-publish verification job to run dart pub publish --dry-run and flutter test before publishing.

Changes:

• Switch the release publish workflow to call dart-lang/setup-dart’s official publish.yml reusable workflow with OIDC (id-token).
• Add a verify job that installs Flutter, disables analytics, runs a publish dry run, and runs tests before the publish job.
• Update the standalone “dry run” workflow to use the same local dry-run + test steps (no stored pub credentials).

File summaries

File	Description
.github/workflows/pub_publish.yml	Moves publishing to the official Dart reusable workflow and adds a verify gate before publishing.
.github/workflows/pub_publish_dry_run.yml	Replaces third-party dry-run publishing with dart pub publish --dry-run plus flutter test.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 2
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved blocking issues were identified.

Review effort: Lite
Findings: None

Resolved since last review (2)

• The caller job sets permissions to only id-token: write. For reusable workflows, the called…
• The tag filter uses GitHub Actions glob matching (not regex). In a glob, + is treated literally,…

[Copilot]

Copilot review overview

🟡 Changes recommended

Fix the release tag glob and add dependency resolution before dry runs.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 1

Open (1)

• Use glob syntax for release tag filters · New

[Copilot]

Copilot review overview

🟡 Changes recommended

Add dependency installation before tests in both workflows.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 2

Open (2)

• Install Flutter dependencies before running tests · New
• Install Flutter dependencies before running tests · New

Resolved since last review (1)

• Use glob syntax for release tag filters

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved review issues were identified.

Review effort: Lite
Findings: None

Resolved since last review (2)

• Install Flutter dependencies before running tests
• Install Flutter dependencies before running tests