aboutsummaryrefslogtreecommitdiffstats
path: root/build.gradle.kts
AgeCommit message (Collapse)AuthorFilesLines
19 hoursbuild: limit Bouncy Castle alignment to -jdk18on modulesDanilo M.1-3/+6
The resolution rule also rewrote the legacy -jdk15on artifacts that metalava's tooling depends on to 1.86, a version that line never had (it ended at 1.70), so metalavaCheckCompatibilityRelease failed to resolve in CI. Only align the -jdk18on modules the app ships. Add the metalava check to the pre-commit command in AGENTS.md so local runs cover the same tasks as CI. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursbuild(deps): update Bouncy Castle to 1.86 and PGPainless to 1.7.8Danilo M.1-0/+10
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479, GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root resolution rule keeps every Bouncy Castle module on the catalog version; before, bcpg 1.77 shipped next to bcprov 1.78.1. The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by default, which the old one rejected as "non-standard AEAD". Drop the NonStandardAEAD error, its bottom sheet and strings, and replace the mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message that the tests now decrypt. The new fixture is a throwaway test key, so it is allowlisted in .gitleaksignore by fingerprint. Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so accepted every key that parsed, including keys with no encryption subkey. A signing-only key fixture now covers the rejection path. Also: migrate the removed SelectUserId.firstMatch and deprecated addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle META-INF/LICENSE.md in the APK, and move the existing InvalidPackage lint baseline entries to the bcpkix 1.86 jar. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2024-08-14chore: add missing copyright headers and update existing onesHarsh Shandilya1-1/+1
2024-08-14feat(build): replace homebrew ktfmt formatter with SpotlessHarsh Shandilya1-1/+1
Spotless has fixed their Gradle Configuration Cache woes in the past couple months which gets rid of my primary complaint.
2024-03-22feat(build): add back dependency updates pluginHarsh Shandilya1-0/+1
2023-07-12fix(build): properly resolve JavaPoet version resolution issueHarsh Shandilya1-1/+0
2023-07-12refactor(build): move dependency updates to a `Settings` pluginHarsh Shandilya1-1/+0
2023-03-21fix(build): remove `DSL_SCOPE_VIOLATION` suppressionHarsh Shandilya1-2/+0
This was a Gradle bug that is now fixed https://docs.gradle.org/8.1-rc-1/release-notes.html#:~:text=Access%20to%20version%20catalog%20for%20plugins%20in%20the%20plugins%20%7B%7D%20block
2022-10-29feat: rip out SpotlessHarsh Shandilya1-1/+0
Spotless' configuration cache support is irritating since it requires you to wipe config cache every time you initialise a Gradle daemon.
2022-10-29feat(build): add a homebrew ktfmt pluginHarsh Shandilya1-1/+2
The general idea of the implementation is borrowed from https://github.com/cortinico/ktfmt-gradle
2022-10-21Migrate to Metalava for validating API (#2195)Harsh Shandilya1-1/+0
2022-07-07build-logic: introduce versions pluginHarsh Shandilya1-0/+1
2022-05-09Tighten down dependency resolution (#1903)Harsh Shandilya1-10/+0
2022-04-26build-logic: remove explicit Dokka dependency (#1873)Harsh Shandilya1-1/+0
2022-04-25Workaround AGP and Dokka conflict (#1872)Harsh Shandilya1-0/+1
2022-02-21Switch to R8 dev releases (#1738)Harsh Shandilya1-0/+10
2022-02-17chore(deps): update com.google.dagger to v2.41 (#1732)renovate[bot]1-5/+2
* chore(deps): update com.google.dagger to v2.41 * build: switch Hilt to new plugin syntax Co-authored-by: Renovate Bot <bot@renovateapp.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2022-02-08chore(deps): update dependency gradle to v7.4 (#1717)renovate[bot]1-1/+0
Co-authored-by: Renovate Bot <bot@renovateapp.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2021-12-03build: use Hilt through buildscript classpathHarsh Shandilya1-0/+6
2021-12-03all: switch to new convention pluginsHarsh Shandilya1-2/+2
2021-11-16build: switch root project to convention pluginsHarsh Shandilya1-2/+4
2021-11-15build-logic: migrate Spotless to a convention pluginHarsh Shandilya1-2/+1
2021-06-01Configure Spotless for all projects and tweak Dagger flags (#1427)Harsh Shandilya1-1/+1
2021-05-25Add compose dependencies (#1421)Aditya Wasan1-2/+0
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2021-05-09build: bump kgp-leak-patcherHarsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-05-09build: switch to Spotless for formattingHarsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-05-06Upgrade Kotlin and AndroidX dependencies (#1402)Harsh Shandilya1-0/+2
2021-04-12Update to Gradle 7.0 (#1381)Harsh Shandilya1-22/+0
2021-04-01Update all dependencies (#1358)Harsh Shandilya1-0/+11
* build: update all dependencies Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * autofill-parser: add new hints Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: force the right annotation version manually Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> Co-authored-by: Fabian Meumertzheim <fabian@meumertzhe.im>
2021-03-18all: reformat with ktfmtHarsh Shandilya1-15/+9
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-03-18all: update copyrightsHarsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-03-18build: apply Ktfmt Gradle pluginHarsh Shandilya1-0/+10
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-03-17Update Gradle and tighten repository inclusion rules (#1347)Harsh Shandilya1-0/+9
* build: remove now migrated indirect dependencies from JCenter Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: update Gradle 6.8.3 Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: set explicit inclusions for Jitpack Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2021-02-03Rework buildSrc and update some dependencies (#1296)Harsh Shandilya1-17/+0
2020-11-14Update runtime dependencies to latest revisions (#1203)Harsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-11-04build: update openpgp-ktx and versions plugin (#1185)Harsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-10-16Revamp build configuration (#1156)Harsh Shandilya1-59/+7
* release: move scripts to scripts directory Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * Move CI secrets to secrets directory Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * gradle: uprev to 6.7 Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * gradle: suppress warnings about unsupported options Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: update dependencies Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: move Gradle plugins to ext Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: move configuration tasks to buildSrc Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * CHANGELOG: add entry for #1137 Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * Fix lint warnings Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-10-07build: update runtime dependencies and Gradle plugins (#1139)Harsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-10-01build: configure binary-compatibility-validatorHarsh Shandilya1-0/+12
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-09-10build: update Kotlin and dependency-updates plugin (#1094)Harsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-09-06Update dependencies and add EditorConfig file (#1082)Harsh Shandilya1-4/+3
* build: uprev Gradle Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * editorconfig: init Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: remove unused dependency analysis plugin Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: update ConstraintLayout and AndroidX testing libraries Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-09-03Refactor Git operations and auth (#1066)Fabian Henneke1-1/+1
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2020-08-11Uprev Gradle and dependencies (#1007)Harsh Shandilya1-3/+3
* build: uprev Gradle Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: uprev dependencies Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * app/proguard: remove Tink rules I'm assuming the R8 problems fixed by the Tink upgrade cover this as well Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
2020-07-29Upgrade to Kotlin 1.4 (#978)Harsh Shandilya1-0/+1
* build: uprev to Kotlin 1.4 Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * Remove explicit type argument Not required anymore with Kotlin 1.4 Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * build: enable Kotlin 1.4 language features Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> * all: add trailing commas where reasonable Signed-off-by: Harsh Shandilya <me@msfjarvis.dev> Co-authored-by: Fabian Henneke <FabianHenneke@users.noreply.github.com>
2020-07-23Migrate to Gradle Kotlin DSL (#936)Harsh Shandilya1-0/+65
2019-11-06Revert back to Groovy DSLHarsh Shandilya1-53/+0
The Kotlin DSL's API is extremely terrible and makes the simplest tasks annoying. It also introduces a very noticeable build overhead that I'd rather not have. Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
2019-10-24Update dependenciesHarsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
2019-10-18Uprev to Gradle 5.6.3Harsh Shandilya1-1/+1
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
2019-10-02treewide: Fix typo in license headerHarsh Shandilya1-1/+1
While we're here, also clarify we're strictly GPL-3.0 and not automatically opting into future revisions of the license. Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
2019-10-02treewide: Add copyrightsHarsh Shandilya1-0/+4
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>