From 0f88f2c1e5e108021ccddeee24f1216107115791 Mon Sep 17 00:00:00 2001 From: Lena Date: Wed, 1 Jul 2026 00:00:00 +0000 Subject: build: verify release inputs Pin and verify what goes into a release: JitPack confined to the SPAKE2 module via exclusiveContent, the vendored subtree pulled by commit SHA instead of a mutable tag, a pinned Docker base digest with a checksummed cmdline-tools download, and a verifyScrcpyServer task wired into every assets merge. The expected server checksum can be overridden with -PscrcpyServerSha256 when the jar is built from source. build-apk now requires apksigner and fails unless independent signature verification succeeds. Split the test image into unit and e2e targets so JVM-only test runs do not download an emulator. Ship THIRD_PARTY_NOTICES and the LGPL text for SPAKE2 in the APK. Add scripts/check as the host quality gate. --- app/proguard-rules.pro | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'app/proguard-rules.pro') diff --git a/app/proguard-rules.pro b/app/proguard-rules.pro index a2c74bf..5c99914 100644 --- a/app/proguard-rules.pro +++ b/app/proguard-rules.pro @@ -31,7 +31,7 @@ -keep class org.conscrypt.** { *; } -dontwarn org.conscrypt.** -dontwarn com.android.org.conscrypt.** -# Legacy Apache Harmony JSSE; unreachable on minSdk 35 but +# Legacy Apache Harmony JSSE; unreachable on minSdk 31 but # referenced in libadb's PRNGFixes. -dontwarn org.apache.harmony.** -- cgit v1.2.3