dependency_validator
Checks for missing, under-promoted, over-promoted, and unused dependencies.
5.0.5
259K downloads/mo
#745 most downloaded on pub.dev
Workiva/dependency_validator
What this package is like to depend on
Last release 5 months ago
23 Mar 2026
Release timing varies
gaps range from 5 weeks to 1.2 years
Most releases are documented
notes for 28 of 33 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
34 releases · first in 2017
3 releases in the last 12 months
see the full history below
Release timeline
34 releases · Nov 2017 to Mar 2026Releases
latest 34-
5.0.523 Mar 2026Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#177 Bump analyzer from 10.2.0 to 12.0.0 in the major group
-
#178 RM-379823 Release dependency_validator 5.0.5
- RM-379823 RELEASE dependency_validator 5.0.5
Notes created on Monday, March 23 06:40 PM UTC
-
-
5.0.409 Feb 2026Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#170 Bump the gha group with 4 updates
-
#174 Bump the major group across 1 directory with 3 updates
-
#175 RM-361227 Release dependency_validator 5.0.4
- RM-361227 RELEASE dependency_validator 5.0.4
Notes created on Monday, February 09 11:22 PM UTC
-
-
5.0.317 Oct 2025Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#151 FEDX-2777: Fixed formatting
- FEDX-2777 Fixed formatting
-
#152 FEDX-2723: correctly ignore unused deps
- FEDX-2723 Correctly ignore unused deps
-
#154 Bump Workiva/gha-dart-oss from 0.1.7 to 0.1.9 in the gha group
-
#157 Bump analyzer from 7.7.1 to 8.1.1 in the major group
-
#162 Reformat with correct dependencies
-
#164 Bump Workiva/gha-dart-oss from 0.1.12 to 0.1.13 in the gha group
-
#166 RM-307870 Release dependency_validator 5.0.3
- RM-307870 RELEASE dependency_validator 5.0.3
Notes created on Friday, October 17 06:04 PM UTC
-
-
5.0.210 Jan 2025Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#146 Updated changelog to fix release
-
#147 RM-307841 Release dependency_validator 5.0.2
- RM-307841 RELEASE dependency_validator 5.0.2
Notes created on Friday, January 10 05:45 PM UTC
-
-
4.1.306 Mar 2025Nothing published for this version
-
4.1.207 Dec 2024Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#131 Workiva Analysis Options v2
-
#133 Bump Workiva/gha-dart-oss from 0.1.6 to 0.1.7 in the gha group
-
#135 raise_min_dart_sdk_2_19
-
#136 RM-285950 Release dependency_validator 4.1.2
- RM-285950 RELEASE dependency_validator 4.1.2
Notes created on Saturday, December 07 12:20 AM UTC
-
-
4.1.124 Sep 2024Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This patch release includes the following changes:Miscellaneous
-
#124 FEA-3927: Updated changelog for v4.1.0
- FEA-3927 Updated changelog for v4.1.0
-
#126 fedx_codeowners_file
-
#127 FEDX-1587: implemented gha-dart-oss
- FEDX-1587 implemented gha-dart-oss
-
#128 FEDX-1589: Include file path on parse error
- FEDX-1589 Include file path on parse error
-
#129 RM-263537 Release dependency_validator 4.1.1
- RM-263537 RELEASE dependency_validator 4.1.1
-
#130 Bump Workiva/gha-dart-oss from 0.1.5 to 0.1.6 in the gha group
Notes created on Tuesday, September 24 04:07 PM UTC
Release notes
Open source →- Update the output of parse failures to include the path to the file which failed to parse
-
-
4.1.003 Jun 2024Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This minor release includes the following changes:Miscellaneous
-
#114 v4 Changelog update
-
#115 FEA-3685: Reverted non-dev bin import usage errors
- FEA-3685 Reverted non-dev bin import usage errors
-
#116 Revert "FEA-3685: Reverted non-dev bin import usage errors"
- FEA-3685 Reverted non-dev bin import usage errors
-
#117 Update analyzer constraint
-
#120 Fixed broken GHA and updated installation instructions
-
#121 Add dependabot.yml
-
#122 GHA: Bump actions/checkout from 2 to 4 in the gha-dependencies group
-
#123 RM-256973 Release dependency_validator 4.1.0
- RM-256973 RELEASE dependency_validator 4.1.0
Notes created on Monday, June 03 05:25 PM UTC
Release notes
Open source →- Update specified analyzer range to support
v6.0.0+. This supports dependency_validator running on dart 3 better
-
-
4.0.029 Apr 2024Release notes
Open source →Info
Build: (waiting for build to complete)
Skynet Results: (waiting for Skynet results)
Pipeline: (waiting for pipeline to start)
This major release includes the following changes:Miscellaneous
- #110 FEDX-687 : GHA OSS changes to dependency_validator
- FEDX-687 GHA OSS changes
- #111 FEA-3682: v4
- FEA-3682 v4
- #113 RM-215560 Release dependency_validator 4.0.0
- RM-215560 RELEASE dependency_validator 4.0.0
Notes created on Monday, April 29 03:51 PM UTC
Release notes
Open source →- Breaking Change: Added "non-dev packages that are only used within bin/" check to cover this edge case. This is enabled by default, and will break the execution of dependency_validator if it occurs within the codebase. Resolution is to either ignore the dependency, or demote the dependency to a dev_dep
- Fixed bug where uris declared within comments and strings would register as dependency "usages"
- #110 FEDX-687 : GHA OSS changes to dependency_validator
-
3.2.327 Sep 2023Nothing published for this version
-
3.2.206 Jul 2022 -
3.2.006 Apr 2022Release notes
Open source →- Feature: Added option
allow_pinsfor disabling/enabling checks for pins. Pins not allowed by default.
- Feature: Added option
-
3.1.230 Nov 2021 -
3.1.021 Apr 2021Release notes
Open source →- Deprecate static configuration in
pubspec.yaml(becausepub publishwarns about unrecognized keys) and instead read it from adart_dependency_validator.yamlfile when possible.
- Deprecate static configuration in
-
3.0.021 Apr 2021Release notes
Open source →- Breaking: removed the public
package:dependency_validator/dependency_validator.dartentrypoint. It was only intended for this package to provide an executable and the Dart APIs don't need to be public. - Null safety.
- Breaking: removed the public
-
2.0.320 Dec 2021Nothing published for this version
-
2.0.230 Nov 2021Nothing published for this version
-
2.0.101 Dec 2020 -
2.0.013 Nov 2020Release notes
Open source →-
Breaking Change: Excluded paths and ignored packages must now be configured statically in your project's
pubspec.yamlinstead of via command-line arguments. See the README for more information. -
Detect packages with one or more executables and consider them to be used. In other words, you no longer need to ignore packages that are only used for their executable(s).
-
Detect packages that provide one or more builders that are configured to be auto-applied by the dart build system and consider them to be used. In other words, you no longer need to ignore packages that are only used for their builder(s).
-
-
2.0.0-beta17 Aug 2020 pre-releaseNothing published for this version
-
1.5.007 Apr 2020 -
1.4.226 Nov 2019 -
1.4.105 Nov 2019Release notes
Open source →- Add
dart_devto common binaries list so that it is automatically ignored.
- Add
-
1.4.016 Sep 2019 -
1.3.015 Aug 2019Release notes
Open source →- Improvement: Ignore commonly used binary packages by default. This can be
disabled via
--no-ignore-common-binaries. Runpub run dependency_validator -hto see which packages will be ignored by this flag. #47
- Improvement: Ignore commonly used binary packages by default. This can be
disabled via
-
1.2.410 Jan 2019Release notes
Open source →- Bug Fix: Ignoring a package via
--ignoreor-iwill now also work as expected for the "over-promoted" failure. #44
- Bug Fix: Ignoring a package via
-
1.2.320 Sep 2018Nothing published for this version
-
1.2.202 Aug 2018Release notes
Open source →- Bug Fix: Ignoring a package via
--ignoreor-iwill now also work as expected for the "pinned dependency" failure. #39
- Bug Fix: Ignoring a package via
-
1.2.131 Jul 2018 -
1.1.209 Apr 2018 -
1.1.128 Feb 2018 -
1.1.027 Feb 2018Release notes
Open source →-
Feature: Added flags to control the types of validations that this tool enforces. They all default to true, but can be opted out of like so:
-
--no-fatal-missing -
--no-fatal-under-promoted -
--no-fatal-over-promoted -
--no-fatal-unused
-
-
Feature: Added
--exclude-dirto allow excluding an entire directory from the dependency validator checks. #15
-
-
1.0.109 Feb 2018 -
1.0.017 Nov 2017