From a68328dc115a0dcc8334d54342a6b1fbbc04bbfe Mon Sep 17 00:00:00 2001
From: Thibault Deckers <thibault.deckers@gmail.com>
Date: Wed, 16 Mar 2022 21:06:03 +0900
Subject: [PATCH] dependency git access via https

---
 pubspec.lock | 6 +++---
 pubspec.yaml | 9 ++++++---
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/pubspec.lock b/pubspec.lock
index b5cae8fce..3c3328fce 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -266,7 +266,7 @@ packages:
       path: "."
       ref: HEAD
       resolved-ref: e0380a550c4be0ef52a70f398c2211fc503094e8
-      url: "git://github.com/deckerst/expansion_tile_card.git"
+      url: "https://github.com/deckerst/expansion_tile_card.git"
     source: git
     version: "2.0.0"
   fake_async:
@@ -289,7 +289,7 @@ packages:
       path: "."
       ref: aves
       resolved-ref: "2aa0f5f08135de00966e9b71e58cddb61f93e81c"
-      url: "git://github.com/deckerst/fijkplayer.git"
+      url: "https://github.com/deckerst/fijkplayer.git"
     source: git
     version: "0.10.0"
   file:
@@ -1047,7 +1047,7 @@ packages:
       path: "."
       ref: HEAD
       resolved-ref: cd5ccd925d0348218aaf156f0b9dc4f8caaec7cc
-      url: "git://github.com/deckerst/aves_streams_channel.git"
+      url: "https://github.com/deckerst/aves_streams_channel.git"
     source: git
     version: "0.3.0"
   string_scanner:
diff --git a/pubspec.yaml b/pubspec.yaml
index 8db73db97..8fdcf6faa 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -12,6 +12,9 @@ publish_to: none
 environment:
   sdk: '>=2.16.0 <3.0.0'
 
+# following https://github.blog/2021-09-01-improving-git-protocol-security-github/
+# dependency GitHub repos should be referenced via `https://`, not `git://`
+
 # use `scripts/apply_flavor_{flavor}.sh` to set the right dependencies for the flavor
 dependencies:
   flutter:
@@ -34,10 +37,10 @@ dependencies:
   event_bus:
   expansion_tile_card:
     git:
-      url: git://github.com/deckerst/expansion_tile_card.git
+      url: https://github.com/deckerst/expansion_tile_card.git
   fijkplayer:
     git:
-      url: git://github.com/deckerst/fijkplayer.git
+      url: https://github.com/deckerst/fijkplayer.git
       ref: aves
   flex_color_picker:
   fluster:
@@ -68,7 +71,7 @@ dependencies:
   sqflite:
   streams_channel:
     git:
-      url: git://github.com/deckerst/aves_streams_channel.git
+      url: https://github.com/deckerst/aves_streams_channel.git
   transparent_image:
   tuple:
   url_launcher: