mirror of
https://github.com/austinried/subtracks.git
synced 2026-11-11 15:29:15 +01:00
build: make the release APK reproducible
AGP's dependency-metadata signing block (0x504b4453) is encrypted per build, so two otherwise byte-identical release APKs differed in that block. Disable it in the APK with dependenciesInfo.includeInApk = false; the bundle keeps its copy for Play.
This commit is contained in:
@@ -36,6 +36,12 @@ android {
|
|||||||
generateLocaleConfig = true
|
generateLocaleConfig = true
|
||||||
}
|
}
|
||||||
|
|
||||||
|
dependenciesInfo {
|
||||||
|
// The APK signing-block copy is encrypted per build, breaking APK reproducibility, and
|
||||||
|
// F-Droid rejects it; the bundle keeps its copy for Play.
|
||||||
|
includeInApk = false
|
||||||
|
}
|
||||||
|
|
||||||
compileOptions {
|
compileOptions {
|
||||||
sourceCompatibility = JavaVersion.VERSION_17
|
sourceCompatibility = JavaVersion.VERSION_17
|
||||||
targetCompatibility = JavaVersion.VERSION_17
|
targetCompatibility = JavaVersion.VERSION_17
|
||||||
|
|||||||
Reference in New Issue
Block a user