summaryrefslogtreecommitdiffstats
path: root/app/lint-baseline.xml
AgeCommit message (Collapse)AuthorFilesLines
17 hoursbuild(deps): update JGit from 4.5.7 to 5.13.5Danilo M.1-3/+10
JGit 4.5.7 dates from 2019. 5.13 is the last line that needs only Java 8 APIs, so it works with Android's desugaring; it also fixes GHSA-3p86-9955-h393 (arbitrary file overwrite on checkout). GHSA-vrpq-qp53-qv56 (XXE in repo manifest parsing) has no 5.x fix but the app never parses repo manifests. API changes: - SshSessionFactory now requires getType(). - CheckoutCommand.setForce is deprecated; setForceRefUpdate is its documented replacement with the same meaning. JGit 5 references java.lang.management and javax.management, which Android lacks; R8 flagged them. Both paths are made unreachable rather than only silenced: - WindowCache registers JMX statistics by default; Application.onCreate now installs a WindowCacheConfig with exposeStatsViaJmx = false. - GC.gc() takes a PID lock that queries ManagementFactory and would throw NoClassDefFoundError on a device. GcOperation now runs the GC steps (packRefs, repack, prune) directly; the lock only guards against concurrent gc processes, which cannot happen in the app. Aggressive packing is dropped. The R8 -dontwarn rules and the lint baseline entries are added only for those two now-unreachable references. JGitBehaviourTest covers the operations' command chains plus the GC steps and passes on 5.13.5. It now ignores the developer's global git config, which JGit 5 reads (commit.gpgsign made test commits try to sign). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursbuild(deps): update Bouncy Castle to 1.86 and PGPainless to 1.7.8Danilo M.1-2/+2
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479, GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root resolution rule keeps every Bouncy Castle module on the catalog version; before, bcpg 1.77 shipped next to bcprov 1.78.1. The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by default, which the old one rejected as "non-standard AEAD". Drop the NonStandardAEAD error, its bottom sheet and strings, and replace the mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message that the tests now decrypt. The new fixture is a throwaway test key, so it is allowlisted in .gitleaksignore by fingerprint. Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so accepted every key that parsed, including keys with no encryption subkey. A signing-only key fixture now covers the rejection path. Also: migrate the removed SelectUserId.firstMatch and deprecated addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle META-INF/LICENSE.md in the APK, and move the existing InvalidPackage lint baseline entries to the bcpkix 1.86 jar. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2024-09-14chore: refresh Lint baselineHarsh Shandilya1-2/+2
2024-09-13chore: refresh Lint baselineHarsh Shandilya1-0/+33
2024-09-03fix(deps): update dependency com.android.tools.build:gradle to v8.6.0 (#3192)renovate[bot]1-13/+13
* fix(deps): update dependency com.android.tools.build:gradle to v8.6.0 * chore: regenerate Lint baselines --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-06-14fix(deps): update dependency com.android.tools.build:gradle to v8.5.0 (#3094)renovate[bot]1-47/+25
* fix(deps): update dependency com.android.tools.build:gradle to v8.5.0 * chore: refresh Lint baseline --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-02-04Sync localisations from Crowdin (#2888)Harsh Shandilya1-1/+34
* strings: sync with crowdin * chore: refresh Lint baseline --------- Co-authored-by: GitHub Actions <noreply@github.com>
2023-11-27fix(deps): upgrade to JGit 4.5.7.201904151645-rHarsh Shandilya1-1/+8
Currently requires deleting and re-cloning the repository to properly detect symlink support, this will be fixed in the future to auto-detect on existing repositories as well. Fixes #2594 Fixes #2396 Fixes #636 Fixes #387 Fixes #98
2023-09-27fix(deps): update dependency com.slack.lint:slack-lint-checks to v0.6.0 (#2697)renovate[bot]1-78/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2023-09-04fix(deps): update dependency com.hierynomus:sshj to v0.36.0 (#2670)renovate[bot]1-4/+4
* fix(deps): update dependency com.hierynomus:sshj to v0.36.0 * refactor(build): drop unnecessary explicit dependency * chore(idea): cruft * fix(app): ensure SLF4J v1 is used * fix(build): disable illegal BindsCanBeExtensionFunction lint * chore: refresh Lint baselines --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2023-08-30fix(deps): update dependency org.pgpainless:pgpainless-core to v1.6.2 (#2667)renovate[bot]1-5/+5
* fix(deps): update dependency org.pgpainless:pgpainless-core to v1.6.2 * fix(deps): use `-jdk18on` artifacts for BouncyCastle * chore: re-roll Lint baseline --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2023-07-31fix(deps): update bouncycastle to v1.76 (#2632)renovate[bot]1-3/+3
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2023-07-23chore: refresh Lint baselineHarsh Shandilya1-17/+17
2023-06-21fix(deps): update bouncycastle to v1.75 (#2557)renovate[bot]1-4/+4
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-06-15fix(deps): update bouncycastle to v1.74renovate[bot]1-2/+2
2023-06-15fix: address `ComposeUnstableCollections` lintHarsh Shandilya1-13/+2
2023-06-04fix: replace `Stack` with `ArrayDeque` in `SearchableRepositoryViewModel`Harsh Shandilya1-11/+0
2023-06-04fix: start clearing violations of `DenyListedApi`Harsh Shandilya1-33/+0
2023-06-04fix: clear violations of `RawDispatcherUse`Harsh Shandilya1-181/+5
2023-06-04fix: clear violations of `FullyQualifiedResource`Harsh Shandilya1-11/+0
2023-06-04chore: refresh lint baselineHarsh Shandilya1-1/+298
2023-05-16chore: refresh Lint baseline with AGP 8.1.0-beta02Harsh Shandilya1-12/+45
2023-04-27feat(build): add Slack's Compose LintsHarsh Shandilya1-0/+11
2023-04-27feat(lint): update baselinesHarsh Shandilya1-1/+150
2023-03-01chore: refresh Lint baselinesHarsh Shandilya1-70/+8
2022-12-19chore: refresh Lint baselineHarsh Shandilya1-16/+2
2022-09-05fix(lint): resolve and suppress lints to fix canary buildsHarsh Shandilya1-0/+14
2022-09-01Fix reported Lint issues (#2101)Harsh Shandilya1-1/+12
2022-07-18Misc cleanups and bugfixes (#2019)Harsh Shandilya1-1/+63
* Fix decrypt activity items being editable * Remove unused resources and re-roll lint baseline * Make lint mark all warnings as errors
2022-04-24app: address SetTextI18n lintHarsh Shandilya1-11/+0
2022-04-24app: address LabelFor lintHarsh Shandilya1-11/+0
2022-04-24app: address ContentDescription lintHarsh Shandilya1-33/+0
2022-04-24app: address Autofill lintHarsh Shandilya1-11/+0
2022-04-24app: address MissingQuantity lintHarsh Shandilya1-22/+0
2022-04-24app: address Overdraw lintHarsh Shandilya1-44/+0
2022-04-24app: address TrustAllX509TrustManager lintHarsh Shandilya1-35/+0
2022-04-24app: address Deprecated lintHarsh Shandilya1-11/+0
2022-04-24app: address VectorRaster lintHarsh Shandilya1-11/+0
2022-04-24app: address InlinedApi lintHarsh Shandilya1-66/+0
2022-04-24app: address UnusedResources lintHarsh Shandilya1-242/+0
2022-04-24app: setup Lint baselineHarsh Shandilya1-0/+501