🧹 Dead Code Removal & WASM Compatibility #

• Removed legacy unused file_system_provider.dart and default_file_system_provider.dart files containing unconditional dart:io imports to ensure 100% pure WASM compatibility on pub.flutter-io.cn.

🌐 WASM Runtime Compatibility #

• Decoupled share_plus and path_provider transitive dependencies from file_helper_web.dart on Web/WASM targets to achieve 100% WASM compatibility score (20/20 platform points) on pub.flutter-io.cn.

⚡ Improvements & Static Analysis Fixes #

• Added await to all async returns inside try-catch blocks in SuperClipboardHandler to resolve pub.flutter-io.cn static analysis warnings.
• Added conditional platform file helper abstraction (PlatformFileHelper) to ensure full Web / WASM runtime compatibility without unconditional dart:io imports.
• Bump hyper_render_core dependency to ^1.7.0.

🚀 Update #

• Bump hyper_render_core dependency to ^1.6.0 to support multi-platform constraints.

🐛 Packaging Fix #

• Republished without the dev-only dependency_overrides block that slipped into the 1.5.0 archive and broke pub.flutter-io.cn dependency resolution (pub get could not find the local ../hyper_render_core path). No code changes from 1.5.0.

🏗️ Maintenance #

• Updated hyper_render_core dependency to ^1.5.0

🏗️ Maintenance #

• Updated hyper_render_core dependency to ^1.4.0

🔧 Dependency Widening #

• Widened share_plus dependency constraint to ^12.0.2 || ^13.0.0 to resolve pub.flutter-io.cn out-of-date package scoring.
• Updated hyper_render_core dependency to ^1.3.4.

🏗️ Maintenance #

• Updated hyper_render_core dependency to ^1.3.3

🔒 Security — Path Traversal #

• saveImageBytes(filename:) and shareImageBytes(filename:) now sanitise the caller-supplied filename. _getFilenameFromUrl already stripped URL-decoded path separators (%2F → /), but a malicious app dev who passed filename: '../../etc/passwd.png' through to the public API would still escape the storage directory. Every code path that lands in File('${dir.path}/$name') now runs through a single _sanitiseFilename helper that replaces / and \ with _. Self-supplied filenames remain untouched in spirit (extensions, dots, dashes preserved).

🧪 Tests #

• +8 tests added in filename_safety_test: URL-encoded slash, URL-encoded backslash, plain filename pass-through, extensionless URL fallback, caller-supplied traversal payloads (../../etc/passwd.png, Windows backslash variants), safe filename round-trip, mixed separator handling.

🏗️ Packaging #

• Opt-in add-on: hyper_render_clipboard is no longer bundled with the root hyper_render package. Add it explicitly to your pubspec.yaml if you use SuperClipboardHandler. This removes the compileSdk = 34 requirement from default hyper_render users.

✨ New Features #

• share_plus: ^10.0.0: Upgraded from ^7.2.0 — resolves mime version conflict with newer Flutter projects
• Image copy: SuperClipboardHandler.copyImage() supports PNG byte data via super_clipboard
• Image share: SuperClipboardHandler.shareImage() via share_plus

🐛 Bug Fixes #

• Race condition: Copy operation now guards against concurrent calls with a lock flag — prevents duplicate clipboard writes
• Static analysis: Replaced deprecated Share.shareXFiles() with SharePlus.instance.share() — 0 analyzer issues
• Directory convention: Renamed docs/ → doc/ (pub.flutter-io.cn singular directory convention)

• Initial release: image clipboard and share support for HyperRender selections