mirror of
https://github.com/austinried/subtracks.git
synced 2026-11-10 15:11:58 +01:00
build: make the release APK reproducible
AGP's dependency-metadata signing block (0x504b4453) is encrypted per build, so two otherwise byte-identical release APKs differed in that block. Disable it in the APK with dependenciesInfo.includeInApk = false; the bundle keeps its copy for Play.
This commit is contained in:
@@ -36,6 +36,12 @@ android {
|
||||
generateLocaleConfig = true
|
||||
}
|
||||
|
||||
dependenciesInfo {
|
||||
// The APK signing-block copy is encrypted per build, breaking APK reproducibility, and
|
||||
// F-Droid rejects it; the bundle keeps its copy for Play.
|
||||
includeInApk = false
|
||||
}
|
||||
|
||||
compileOptions {
|
||||
sourceCompatibility = JavaVersion.VERSION_17
|
||||
targetCompatibility = JavaVersion.VERSION_17
|
||||
|
||||
Reference in New Issue
Block a user