dependency git access via https

pubspec.lock

@@ -266,7 +266,7 @@ packages:
       path: "."
       ref: HEAD
       resolved-ref: e0380a550c4be0ef52a70f398c2211fc503094e8
-      url: "git://github.com/deckerst/expansion_tile_card.git"
+      url: "https://github.com/deckerst/expansion_tile_card.git"
     source: git
     version: "2.0.0"
   fake_async:
@@ -289,7 +289,7 @@ packages:
       path: "."
       ref: aves
       resolved-ref: "2aa0f5f08135de00966e9b71e58cddb61f93e81c"
-      url: "git://github.com/deckerst/fijkplayer.git"
+      url: "https://github.com/deckerst/fijkplayer.git"
     source: git
     version: "0.10.0"
   file:
@@ -1047,7 +1047,7 @@ packages:
       path: "."
       ref: HEAD
       resolved-ref: cd5ccd925d0348218aaf156f0b9dc4f8caaec7cc
-      url: "git://github.com/deckerst/aves_streams_channel.git"
+      url: "https://github.com/deckerst/aves_streams_channel.git"
     source: git
     version: "0.3.0"
   string_scanner:

pubspec.yaml

@@ -12,6 +12,9 @@ publish_to: none
 environment:
   sdk: '>=2.16.0 <3.0.0'
 
+# following https://github.blog/2021-09-01-improving-git-protocol-security-github/
+# dependency GitHub repos should be referenced via `https://`, not `git://`
+
 # use `scripts/apply_flavor_{flavor}.sh` to set the right dependencies for the flavor
 dependencies:
   flutter:
@@ -34,10 +37,10 @@ dependencies:
   event_bus:
   expansion_tile_card:
     git:
-      url: git://github.com/deckerst/expansion_tile_card.git
+      url: https://github.com/deckerst/expansion_tile_card.git
   fijkplayer:
     git:
-      url: git://github.com/deckerst/fijkplayer.git
+      url: https://github.com/deckerst/fijkplayer.git
       ref: aves
   flex_color_picker:
   fluster:
@@ -68,7 +71,7 @@ dependencies:
   sqflite:
   streams_channel:
     git:
-      url: git://github.com/deckerst/aves_streams_channel.git
+      url: https://github.com/deckerst/aves_streams_channel.git
   transparent_image:
   tuple:
   url_launcher: