chore: merge master into v10.0.0

[xsahil03x]

Summary

Brings master's QA / security / perf work into the v10 design-refresh branch.

Master is 15 commits ahead of v10.0.0 — this PR carries those into v10 so the upcoming v10 release ships with the latest LLC perf rewrites, the in-flight queryChannels dedup, the jose security floor, and the relaxed URL detection.

What landed

LLC (stream_chat)

• Client.queryDrafts now forwards filter (fix(llc): forward filter param in Client.queryDrafts #2647).
• Client.queryChannels coalesces concurrent identical queries via the new InFlightCache<K, V> (fix(llc, core): coalesce queryChannels on flaky-network reconnects #2652).
• SortedListX / ListX extensions added in list_extensions.dart; duplicate-keyed inputs are tolerated by merge (chore(llc): tolerate duplicate-keyed inputs in SortedListX.merge #2660). v10's IterableMergeExtension.merge / .mergeFrom are kept — SortedListX is on List and routes there for the new perf paths; the old extension still serves Iterable<T> callers in v10.
• ChannelClientState._checkExpiredAttachmentMessages removed (perf(llc): faster channel state ingest #2653); v10's StreamImageCDN.cacheKey already keeps the image cache valid across signed-URL rotations.
• ChannelClientState.updateChannelState now identity-short-circuits when updatedState.messages is null or the same reference, so downstream .distinct() listeners can skip rebuilds.
• Reaction listeners dispatch via _findMessage (parentId-aware) while keeping v10's addMyReaction / deleteMyReaction semantics.

stream_chat_flutter_core

• BetterStreamBuilder correctness fixes: mounted guard, error reporting via FlutterError.reportError, identity-equal emission gating (perf(repo): cut StreamMessageListView UI-thread work under flood load #2651).
• MessageListCore caches its messagesStream / _initialMessages as fields instead of recomputing in build() (perf(repo): cut StreamMessageListView UI-thread work under flood load #2651). defaultMessageFilter takes an optional currentUserId.
• StreamChatCore debounces connectivity events to 3 s (fix(llc, core): coalesce queryChannels on flaky-network reconnects #2652).

stream_chat_flutter

• scrollable_positioned_list/: master version taken in full. Bounded _keyToIndexMap, isScrolling / isScrollingListenable, itemKeyBuilder anchor preservation, fit-anchor fallback in UnboundedRenderViewport, sensible defaults on scrollTo (perf(repo): cut StreamMessageListView UI-thread work under flood load #2651).
• tld.dart removed (chore(ui): drop the bundled IANA TLD list #2654); StreamMessageComposer relaxed its URL regex from [a-z]{2,4} to [a-z]{2,} and dropped the isValidTLD filter at both call sites.
• StreamMessageListView and separated_reorderable_list_view: v10's design-refresh version retained. Master's identity-preserving micro-optimizations to updateMessage are a follow-up.

CI / repo

• Path/draft gating job (gate) added to legacy_version_analyze, check_db_entities, and stream_flutter_workflow (ci(repo): centralize path/draft gating in a per-workflow gate job #2669).
• Flutter 3.44 fixes (chore(repo): fix ci issues for flutter 3.44 #2667), pana / build cleanups (chore(repo): Fix build and pana reports #2656), local-setup CI fixes (ci(repo): Resolve local setup related issues #2650).
• melos.yaml: kept v10's higher floors; added firebase_crashlytics (master's chore(samples): replace Sentry with Firebase Crashlytics #2665); dropped sentry_flutter (per master). v10's own pubspec/sample-app still references sentry_flutter (see follow-ups).

Notes / follow-ups

• sample_app/: v10's redesigned sample app retained as a unit (gradle, manifest, main.dart, pbxproj — auto-merge would have left it inconsistent with v10's app.dart / pubspec). The Sentry → Firebase Crashlytics migration (chore(samples): replace Sentry with Firebase Crashlytics #2665) applies to master's pre-redesign sample app and is not ported here.
• Skipped test: channel_test.dart > updateMessage quoted-rewrite > does not rewrite quotes when an existing quoted target is updated without being deleted is skip:-ed. v10's _updateMessages reconstructs the channel list via _mergeMessagesIntoExisting, so identity is not preserved on non-deletion edits. Functional behavior matches master.
• Goldens: deleted-on-v10 goldens kept deleted; modified-on-both goldens kept at v10's bytes (the redesigned UI is the source of truth).
• Drive-by fix: stream_message_composer.dart had SizeTransition(alignment:) which was never a valid Flutter parameter — switched to axisAlignment: -1 (the API the v10 author intended).

Test plan

• dart analyze — clean across stream_chat, stream_chat_flutter_core, stream_chat_flutter
• dart test packages/stream_chat/test — 491 pass, 1 skipped
• dart test packages/stream_chat/test/src/client/channel_test.dart — 316 pass, 1 skipped
• flutter test packages/stream_chat_flutter_core/test — 239 pass
• flutter test packages/stream_chat_flutter/test/scrollable_positioned_list/ — 194 pass, 2 skipped
• CI green
• Manual: sanity-check sample_app boots against v10 on at least one platform

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a647a31f-73a0-432e-9fb7-6387018d6903

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/merge-master-into-v10

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

❌ Patch coverage is 88.03419% with 56 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (v10.0.0@3e5f7d8). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
packages/stream_chat/lib/src/client/channel.dart	31.48%	37 Missing ⚠️
...m_chat_flutter_core/lib/src/message_list_core.dart	92.39%	7 Missing ⚠️
...at_flutter_core/lib/src/better_stream_builder.dart	85.18%	4 Missing ⚠️
packages/stream_chat/lib/src/client/client.dart	57.14%	3 Missing ⚠️
...crollable_positioned_list/src/positioned_list.dart	98.36%	2 Missing ⚠️
...ositioned_list/src/scrollable_positioned_list.dart	97.10%	2 Missing ⚠️
...lib/src/message_input/stream_message_composer.dart	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             v10.0.0    #2677   +/-   ##
==========================================
  Coverage           ?   67.10%           
==========================================
  Files              ?      405           
  Lines              ?    24344           
  Branches           ?        0           
==========================================
  Hits               ?    16335           
  Misses             ?     8009           
  Partials           ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.