From 80a4a209d63e55ff09c7f31b59358bfe56b055b4 Mon Sep 17 00:00:00 2001 From: Lena Date: Wed, 1 Jul 2026 00:00:00 +0000 Subject: ci: fail when gradle pins drift from versions The gradle files and go.mod repeat pins from versions because gradle cannot source a shell file. Compare them in ci/test.sh so a bump that misses a copy fails loud instead of silently building with the old version. --- metadata/reproducible-builds.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'metadata') diff --git a/metadata/reproducible-builds.md b/metadata/reproducible-builds.md index 9830957..91b34f6 100644 --- a/metadata/reproducible-builds.md +++ b/metadata/reproducible-builds.md @@ -6,8 +6,10 @@ How rsend stays reproducible and what F-Droid needs to build it. Pinning ------- Every tool and source version lives in ./versions: the rsync source and its -sha256, the Go version, the Android NDK, SDK platform, build-tools, Gradle, the -Android Gradle Plugin, and Kotlin. The build never floats a version. +sha256, the Go version, the JDK release, the Android NDK, SDK platform, +build-tools, Gradle, the Android Gradle Plugin, and Kotlin. The build never +floats a version. The gradle files and go.mod repeat some pins because gradle +cannot source a shell file; ci/test.sh fails if they drift from ./versions. Determinism -- cgit v1.2.3