From 38db3401283b4947557dde680ebd55279f94feb3 Mon Sep 17 00:00:00 2001
From: ZhuchkaTriplesix <mrlololoshka94@gmail.com>
Date: Fri, 9 Oct 2026 11:33:02 +0300
Subject: [PATCH] ci: install bubblewrap for the extension sandbox tests

The sandbox security tests skip when bwrap is missing, so the one check that
the sandbox stops a write to the host never ran in CI.
---
 .github/workflows/ci.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7cdf1294..c99f4525 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -49,7 +49,8 @@ jobs:
         run: |
           APT="-o Acquire::Retries=3 -o Acquire::http::Timeout=20 -o Acquire::https::Timeout=20"
           sudo apt-get $APT update
-          sudo apt-get $APT install -y libsecret-1-dev
+          # bubblewrap runs the extension sandbox tests; without it they skip.
+          sudo apt-get $APT install -y libsecret-1-dev bubblewrap
 
       - name: Get dependencies
         run: flutter pub get