Post AQ3lfdM3QsdRthyXsu by ArneBab@rollenspiel.social
(DIR) More posts by ArneBab@rollenspiel.social
(DIR) Post #AQ3bdZdDIzvkEHNf3A by eighthave@social.librem.one
2022-11-28T08:43:15Z
0 likes, 2 repeats
After years of being one of the few to keep pushing dependency verification and even #PGP signatures on binaries, while getting responses like "gpg in 2022? wtf?", it is gratifying to see that not only has #Gradle full adopted this workflow, but also #Android developers at Google:https://android.googlesource.com/platform/frameworks/support/+/HEAD/gradle/verification-keyring.keys
(DIR) Post #AQ3lfdM3QsdRthyXsu by ArneBab@rollenspiel.social
2022-11-28T10:35:40Z
0 likes, 0 repeats
@eighthave Thank you!
(DIR) Post #AQ4BxsXsI45R1zrgXI by Aurimas@androiddev.social
2022-11-28T15:30:12Z
0 likes, 0 repeats
@eighthave there are still a few bugs in Gradle in signature verification feature that I'd like fixed. We had to write https://cs.android.com/androidx/platform/frameworks/support/+/androidx-main:development/update-verification-metadata.sh to work around them
(DIR) Post #AQ4EEGzTN5vXO7icyG by eighthave@social.librem.one
2022-11-28T15:55:41Z
0 likes, 0 repeats
@Aurimas wow that's quite a script! Thanks for sharing it, I think it might help solve a really annoying problem that @grote and I have been struggling with https://gitlab.com/fdroid/fdroidclient/-/issues/2475
(DIR) Post #AQ4HmJuvIRigAnW8VE by eighthave@social.librem.one
2022-11-28T16:35:26Z
0 likes, 0 repeats
@Aurimas @grote ok, no luck so far, there are still bugs with #Kotlin #Multiplatform and #Gradle verification.
(DIR) Post #AQ4rsRuq4EnD4GhRdw by Aurimas@androiddev.social
2022-11-28T23:19:55Z
0 likes, 0 repeats
@eighthave The bugs we have filed so far have been https://github.com/gradle/gradle/issues?q=is%3Aissue+is%3Aopen+author%3Aliutikas+signature and https://github.com/gradle/gradle/issues?q=is%3Aissue+is%3Aopen+author%3Amathjeff+signature+We managed to fix a few things for Gradle 8.0, but this feature still needs a fair bit of love.