dart sdk roll breaks cocoon via transitive dep `uuid_enhanced`

[christopherfujino]

The validate_ci_yaml test broke on the engine roll #82070 because a transitive dependency (uuid_enhanced, depended on by graphql) extended an UnmodifiableUint8ListView, which is no longer permitted by https://dart.googlesource.com/sdk.git/+/3e9cdc56440bded76d8078a2567910236ad6f7b9%5E%21/#F1

https://ci.chromium.org/p/flutter/builders/try/Linux%20validate_ci_config/1769?

../../../x/w/.pub-cache/hosted/pub.dartlang.org/uuid_enhanced-3.0.2/lib/uuid.dart:9:7: Error: 'UnmodifiableUint8ListView' is restricted and can't be extended or implemented.
class Uuid extends UnmodifiableUint8ListView {
      ^

To clarify, the validate_ci_yaml script does not require graphql; however, the cocoon service itself DOES, so landing this change would probably would lead to cocoon being unable to build with the latest Flutter. I am not sure why customer_testing did not fail.

[christopherfujino]

Cocoon depends on package uuid_enhanced transitively through package https://pub.dev/packages/graphql

[christopherfujino]

I'm not sure how customer_testing passed on the engine roll, when I run the unit tests of the pinned cocoon version in the test registry with the dart sdk from the engine roll, the unit tests fail.

[christopherfujino]

This is the dart commit that causes this failure: https://dart.googlesource.com/sdk.git/+/3e9cdc56440bded76d8078a2567910236ad6f7b9%5E%21/#F1

Breaking change request: dart-lang/sdk#45115

cc @lrhn

[zanderso]

cocoon's graphql dependency is a bit old. It looks like if graphql can be updated to at least 4.1.0-beta.1, then it doesn't use uuid_enhanced anymore, and uses uuid instead, which doesn't have this problem.

/cc @CaseyHillers

I'll try to make a PR for cocoon that just bumps the graphql dependency and link it here.

[zanderso]

After some investigation, the versions of graphql that drop the dependence on uuid_enhanced add a dependence on package:http at ^0.13.0, which conflicts with the version of package:http wanted by metrics_center, gcloud, and possibly others---I stopped looking there. I think we're stuck unless a whole slew of packages have new versions published.