Merge branch 'main' into feat/eleventy-migration

Author: parlough

.github/workflows/codeql-analysis.yml

@@ -33,7 +33,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0b21cf2492b6b02c465a3e5d7c473717ad7721ba
+        uses: github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -44,7 +44,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0b21cf2492b6b02c465a3e5d7c473717ad7721ba
+        uses: github/codeql-action/autobuild@b7bf0a3ed3ecfa44160715d7c442788f65f0f923
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -58,4 +58,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0b21cf2492b6b02c465a3e5d7c473717ad7721ba
+        uses: github/codeql-action/analyze@b7bf0a3ed3ecfa44160715d7c442788f65f0f923

.github/workflows/scorecards-analysis.yml

@@ -49,6 +49,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0b21cf2492b6b02c465a3e5d7c473717ad7721ba
+        uses: github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923
         with:
           sarif_file: results.sarif

.github/workflows/test.yml

@@ -40,7 +40,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           submodules: recursive
-      - uses: dart-lang/setup-dart@ca7e6fee45ffbd82b555a7ebfc236d2c86439f5b
+      - uses: dart-lang/setup-dart@fedb1266e91cf51be2fdb382869461a434b920a3
         with:
           sdk: ${{ matrix.sdk }}
       - name: Fetch Dart packages
@@ -61,7 +61,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           submodules: recursive
-      - uses: dart-lang/setup-dart@ca7e6fee45ffbd82b555a7ebfc236d2c86439f5b
+      - uses: dart-lang/setup-dart@fedb1266e91cf51be2fdb382869461a434b920a3
         with:
           sdk: stable
       - name: Fetch Dart packages

examples/language/lib/patterns/pattern_types.dart

@@ -187,13 +187,13 @@ void miscDeclAnalyzedButNotTested() {
       case (:var untyped, :int typed): // ...
     }
 
-    // Record pattern wih null-check and null-assert subpatterns:
+    // Record pattern with null-check and null-assert subpatterns:
     switch (record) {
       case (checked: var checked?, asserted: var asserted!): // ...
       case (:var checked?, :var asserted!): // ...
     }
 
-    // Record pattern wih cast subpattern:
+    // Record pattern with cast subpattern:
     var (untyped: untyped as int, typed: typed as String) = record;
     var (:untyped as int, :typed as String) = record;
     // #enddocregion record-getter

src/content/index.html

@@ -265,7 +265,7 @@
                                 </div>
                             </div>
                         </li>
-                        <li tabindex="0" data-banner="assets/dash/svg/1-2 language optimized.svg">
+                        <li tabindex="0" data-banner="assets/dash/svg/1-2-language-optimized.svg">
                             <div>
                                 <div class="bullet-container">
                                     <div class="animated-bullet"></div>
@@ -277,7 +277,7 @@
                                 </div>
                             </div>
                         </li>
-                        <li tabindex="0" data-banner="assets/dash/svg/1-3 familiar syntax.svg">
+                        <li tabindex="0" data-banner="assets/dash/svg/1-3-familiar-syntax.svg">
                             <div>
                                 <div class="bullet-container">
                                     <div class="animated-bullet"></div>

src/content/language/functions.md

@@ -453,6 +453,8 @@ To return multiple values in a function, aggregate the values in a [record][].
 }
 ```
 
+[record]: /language/records#multiple-returns
+
 ## Generators
 
 When you need to lazily produce a sequence of values,
@@ -499,9 +501,38 @@ Iterable<int> naturalsDownFrom(int n) sync* {
 }
 ```
 
+
 [`Iterable`]: {{site.dart-api}}/{{site.sdkInfo.channel}}/dart-core/Iterable-class.html
 [`Stream`]: {{site.dart-api}}/{{site.sdkInfo.channel}}/dart-async/Stream-class.html
-[record]: /language/records#multiple-returns
+
+## External functions {#external}
+
+An external function is a function whose body is implemented separately from its
+declaration. Include the `external` keyword before a function declaration, like so:
+
+```dart
+external void someFunc(int i);
+```
+
+An external function's implementation can come from another Dart library,
+or, more commonly, from another language. In interop contexts, `external`
+introduces type information for foreign functions or values,
+making them usable in Dart. Implementation and usage is
+heavily platform specific, so check out the interop docs on, for example,
+[C][] or [JavaScript][] to learn more.
+
+External functions can be top-level functions, [instance methods][],
+[getters or setters][], or [non-redirecting constructors][].
+An [instance variable][] can be `external` too,
+which is equivalent to an external getter and (if the variable
+is not `final`) an external setter.
+
+[instance methods]: /language/methods#instance-methods
+[getters or setters]: /language/methods#getters-and-setters
+[non-redirecting constructors]: /language/constructors#redirecting-constructors
+[instance variable]: /language/classes#instance-variables
+[C]: /interop/c-interop
+[JavaScript]: /interop/js-interop
 
 [Function API reference]: {{site.dart-api}}/{{site.sdkInfo.channel}}/dart-core/Function-class.html
 [Callable objects]: /language/callable-objects

src/content/language/keywords.md

@@ -60,7 +60,7 @@ The following table lists the words that the Dart language treats specially.
 [export]: /guides/libraries/create-packages
 [extends]: /language/extend
 [extension]: /language/extension-methods
-[external]: https://spec.dart.dev/DartLangSpecDraft.pdf#External%20Functions
+[external]: /language/functions#external
 [factory]: /language/constructors#factory-constructors
 [false]: /language/built-in-types#booleans
 [final (variable)]: /language/variables#final-and-const

src/content/language/pattern-types.md

@@ -383,13 +383,13 @@ switch (record) {
   case (:var untyped, :int typed): // ...
 }
 
-// Record pattern wih null-check and null-assert subpatterns:
+// Record pattern with null-check and null-assert subpatterns:
 switch (record) {
   case (checked: var checked?, asserted: var asserted!): // ...
   case (:var checked?, :var asserted!): // ...
 }
 
-// Record pattern wih cast subpattern:
+// Record pattern with cast subpattern:
 var (untyped: untyped as int, typed: typed as String) = record;
 var (:untyped as int, :typed as String) = record;
 ```

src/content/tools/pub/pubspec.md

@@ -96,7 +96,7 @@ A pubspec can have the following fields:
 
 `ignored_advisories`
 : Optional. List of ignored security advisories.
-  [_Learn more._](/tools/pub/security-advisories)
+  [_Learn more._](#ignored_advisories)
 
 Pub ignores all other fields.
 
@@ -449,6 +449,28 @@ Pub.dev requires topics to follow these specifications:
 When choosing topics, consider if [existing topics]({{site.pub}}/topics)
 are relevant. Tagging with existing topics helps users discover your package.
 
+### Ignored_advisories
+
+If a package has a dependency that is affected by a security advisory,
+pub warns about the advisory during dependency resolution.
+Package authors can use the `ignored_advisories` field as an allowlist
+of triggered advisories that are not relevant for the package.
+
+To suppress the warning about an advisory,
+add the advisory identifier to the `ignored_advisories` list.
+For example:
+
+```yaml
+name: myapp
+dependencies:
+  foo: ^1.0.0
+ignored_advisories:
+ - GHSA-4rgh-jx4f-qfcq
+```
+
+For more information, check out
+[Security advisories](/tools/pub/security-advisories).
+
 ### SDK constraints
 
 A package can indicate which versions of its dependencies it supports, but

src/content/tools/pub/security-advisories.md

@@ -44,7 +44,7 @@ If a security advisory is not relevant for your application,
 you can suppress the warning by adding the advisory identifier to
 the `ignored_advisories` list in the `pubspec.yaml` of your package.
 For example, the following ignores the advisory
-with the CVE identifier `GHSA-4rgh-jx4f-qfcq`:
+with the GHSA identifier `GHSA-4rgh-jx4f-qfcq`:
 
 ```yaml
 name: myapp
@@ -56,4 +56,4 @@ ignored_advisories:
 
 The `ignored_advisories` list only affects the root package. Ignored
 advisories in your dependencies will have no effect on package resolution
-for your own packages.
+for your own package.