Update pub.

CHANGELOG.md

 ## 1.12.0
 
 ### Core library changes
 
 * `dart:html`
   * `NodeTreeSanitizer` added the `const trusted` field. It can be used
     instead of defining a `NullTreeSanitizer` class when calling
     `setInnerHtml` or other methods that create DOM from text. It is
     also more efficient, skipping the creation of a `DocumentFragment`.
 
 * `dart:io`
   * Added two new file modes, `WRITE_ONLY` and `WRITE_ONLY_APPEND` for
     opening a file write only.
     [eaeecf2](https://github.com/dart-lang/sdk/commit/eaeecf2ed13ba6c7fbfd653c3c592974a7120960)
   * Change stdout/stderr to binary mode on Windows.
     [4205b29](https://github.com/dart-lang/sdk/commit/4205b2997e01f2cea8e2f44c6f46ed6259ab7277)
 
 ### Tool changes
 
 * Pub
 
-  * Pub will now generate a ".packages" file in addition to the "packages"
-    directory when running `pub get` or similar operations, per the
-    [package spec proposal][]. Pub now has a `--no-package-symlinks` flag that
-    will stop "packages" directories from being generated at all.
-
-  * When `pub publish` finds a violation, it will emit a non-zero exit code.
-
   * `pub run` starts up faster for executables that don't import transformed
     code.
 
-  * An issue where HTTP requests were sometimes made even though `--offline` was
-    passed to `pub get` or `pub upgrade` has been fixed.
+  * `pub get` and `pub upgrade`
 
-  * A bug with `--offline` that caused an unhelpful error message has been
-    fixed.
+    * Pub will now generate a ".packages" file in addition to the "packages"
+      directory when running `pub get` or similar operations, per the
+      [package spec proposal][]. Pub now has a `--no-package-symlinks` flag that
+      will stop "packages" directories from being generated at all.
 
-  * A crashing bug involving transformers that only apply to non-public code has
-    been fixed.
+    * An issue where HTTP requests were sometimes made even though `--offline`
+      was passed has been fixed.
+
+    * A bug with `--offline` that caused an unhelpful error message has been
+      fixed.
+
+    * Pub will no longer time out when a package takes a long time to download.
+
+  * `pub publish`
+
+    * Pub will emit a non-zero exit code when it finds a violation while
+      publishing.
+
+    * `.gitignore` files will be respected even if the package isn't at the top
+      level of the Git repository.
+
+  * Barback integration
+
+    * A crashing bug involving transformers that only apply to non-public code
+      has been fixed.
+
+    * A stack overflow caused by a transformer being run multiple times on the
+      package that defines it has been fixed.
 
 [package spec proposal]: https://github.com/lrhn/dep-pkgspec
 
 ## 1.11.1
 
 ### Tool changes
 
 * Pub will always load Dart SDK assets from the SDK whose `pub` executable was
   run, even if a `DART_SDK` environment variable is set.
 
@@ skipping 333 matching lines @@
     they will keep the Dart process alive until they time out. This fixes the
     handling of persistent connections. Previously, the client would shut down
     immediately after a request.
 
   * **Breaking change:** `HttpServer` no longer compresses all traffic by
     default. The new `autoCompress` property can be set to `true` to re-enable
     compression.
 
 * `dart:isolate`: `Isolate.spawnUri` added the optional `packageRoot` argument,
   which controls how it resolves `package:` URIs.