Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft: add gradle dependency verification #1386

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

David-Development
Copy link
Member

@David-Development David-Development commented Feb 21, 2024

Adding checksums to Android repos like android-common for gradle based build toolchain, see https://docs.gradle.org/current/userguide/dependency_verification.html.

Reference: nextcloud/android-common#252

TODO: We'll have to move to renovatebot which is capable of update checksums when updating dependencies, see https://docs.renovatebot.com/modules/manager/gradle/ -> nextcloud/Android-SingleSignOn#640

Signed-off-by: David Luhmer <david-dev@live.de>
@AndyScherzinger
Copy link
Member

Also useful to add

org.gradle.dependency.verification.console=verbose

to

gradle.properties

to make gradle a bit more chatty when it comes to verification output when failing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants