adaptive_svg

New: borderRadius parameter

• borderRadius — rounds the corners of the rendered SVG.
• On web, applied as CSS border-radius + overflow: hidden on the wrapper <div> that hosts the platform view. Flutter's ClipRRect doesn't reliably clip HtmlElementView content, so the rounding is baked into the DOM container directly.
• On native, falls back to wrapping the rendered widget in a ClipRRect.
• Available on both AdaptiveSvg(...) and AdaptiveSvg.asset(...).

feat: add interceptPointer option for web platform view click-through…

New: interceptPointer option (removed in 0.4.0)

• Added an interceptPointer parameter that overlaid a PointerInterceptor on top of the HtmlElementView. Removed in 0.4.0 in favor of gestures: true — see above.

Dependency

• Added pointer_interceptor: ^0.10.1 as a dependency.

fix(web): DOMParser + cached factories + CORS + pointer-events opt-in…

Web rendering fixes

• Parse SVG with DOMParser('image/svg+xml') instead of div.innerHTML = svg. innerHTML parses input as HTML — SVG namespaces on child elements were inconsistently preserved, and <image href> elements could be misparsed as HTML <img> fallbacks (which silently dropped cross-origin loads). DOMParser parses the input as real XML, preserves every namespace, and exposes parse errors through a <parsererror> element.
• Cache HtmlElementView view factories keyed by (svg, interactive, imageCrossOrigin). Previously every widget rebuild incremented a global _viewId counter and registered a brand-new platform view, leaking a factory per frame on any list / scroll-based UI.

New web-only options

• interactive (default true) — when false, applies pointer-events: none to both the container <div> and the injected <svg> root so taps and hovers flow through to the Flutter widget layer underneath. Useful for static thumbnails inside a GestureDetector.
• imageCrossOrigin (default null) — when set to CrossOrigin.anonymous or CrossOrigin.useCredentials, applies the crossorigin attribute to every <image> child of the parsed SVG. Required for cross-origin images to load under Cross-Origin-Embedder-Policy: require-corp (used by apps that need SharedArrayBuffer, including Flutter Rust Bridge's threaded wasm mode) when the origin server only sends Access-Control-Allow-Origin and not Cross-Origin-Resource-Policy.

Both parameters are web-only and silently ignored on native platforms.

Replace broken base64 data with valid Python-generated PNG and JPEG.
Remove unnecessary PUB_TOKEN secret from CI — pub.dev OIDC handles auth
via id-token permission.

• Initial release
• DOM <svg> rendering on web
• flutter_svg delegation on native platforms