aboutsummaryrefslogtreecommitdiff
path: root/ci/verify-repro.sh
AgeCommit message (Collapse)AuthorFilesLines
7 daysci: check the Kotlin pin and refuse a dirty repro buildLena1-2/+0
Every other version repeated outside ./versions is asserted in test.sh. KOTLIN_VERSION was not, so bumping it would leave a stale version in a license notice with nothing to catch it. In verify-repro the two git diff calls preceded the status check, so under set -eu a dirty tree exited 1 with no output and the message below was never reached. git status --porcelain already covers staged, unstaged and untracked changes.
14 daysbuild: pin and verify release inputsLena1-14/+37
Support Alpine/musl and Debian/glibc hosts, lock downloaded and Gradle artifacts, and verify native and APK security properties.
2026-07-13ci: pin toolchains and verify release artifactsLena1-10/+14
Checksum-pin every downloaded toolchain archive. Before publishing, verify the APK was built from HEAD, the tag matches versionName, apksigner passes, and the tree is clean; publish a sha256 sidecar and treat published assets as immutable. Compare full unsigned APKs in verify-repro and run the Android unit tests in CI.
2026-01-01rsend: push phone folders to a home SSH host over rsyncLena1-0/+23
A small Android app for one-way folder backup, a KISS alternative to Syncthing. It bundles rsync (built from pinned source via the NDK) and a pure-Go SSH transport, both shipped in the APK as lib*.so and run from the native library directory. rsend pins the host key, stores the ed25519 identity Keystore-encrypted, pushes each folder additively or as a mirror, and runs on demand or on a WiFi-only schedule. The build is self-contained and reproducible: make setup provisions the toolchain, make builds rsync, rsh, and the APK.