diff options
| author | Lena <lena@omega> | 2026-07-01 00:00:00 +0000 |
|---|---|---|
| committer | Lena <lena@omega> | 2026-07-01 00:00:00 +0000 |
| commit | 80a4a209d63e55ff09c7f31b59358bfe56b055b4 (patch) | |
| tree | 612799ea46cdb45f7ab2d0f7c9d288f7b8da3221 /metadata | |
| parent | f8253eace9d231b276024dd66406d890c1d954e1 (diff) | |
| download | rsend-80a4a209d63e55ff09c7f31b59358bfe56b055b4.tar.gz | |
ci: fail when gradle pins drift from versions
The gradle files and go.mod repeat pins from versions because gradle
cannot source a shell file. Compare them in ci/test.sh so a bump that
misses a copy fails loud instead of silently building with the old
version.
Diffstat (limited to 'metadata')
| -rw-r--r-- | metadata/reproducible-builds.md | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/metadata/reproducible-builds.md b/metadata/reproducible-builds.md index 9830957..91b34f6 100644 --- a/metadata/reproducible-builds.md +++ b/metadata/reproducible-builds.md @@ -6,8 +6,10 @@ How rsend stays reproducible and what F-Droid needs to build it. Pinning ------- Every tool and source version lives in ./versions: the rsync source and its -sha256, the Go version, the Android NDK, SDK platform, build-tools, Gradle, the -Android Gradle Plugin, and Kotlin. The build never floats a version. +sha256, the Go version, the JDK release, the Android NDK, SDK platform, +build-tools, Gradle, the Android Gradle Plugin, and Kotlin. The build never +floats a version. The gradle files and go.mod repeat some pins because gradle +cannot source a shell file; ci/test.sh fails if they drift from ./versions. Determinism |