summaryrefslogtreecommitdiffstats
path: root/fdroid
Commit message (Collapse)AuthorAgeFilesLines
* Android: no Google dependency-metadata block in the APK; 1.8 (code 9).fdroid-v1.8Adam Soltys2026-09-171-5/+5
| | | | | | | | F-Droid's APK check refuses the Play-only dependency-metadata signing block AGP adds by default. Off for every flavor. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01JuwQqNWtDJcxPWtEm9134z
* F-Droid recipe: wrapping as their rewritemeta wants it.Adam Soltys2026-09-171-2/+4
| | | | | Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01JuwQqNWtDJcxPWtEm9134z
* F-Droid recipe as fdroid rewritemeta formats it.Adam Soltys2026-09-171-3/+4
| | | | | Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01JuwQqNWtDJcxPWtEm9134z
* F-Droid: fastlane metadata in-repo, text lockfile, version 1.7 (code 8).fdroid-v1.7Adam Soltys2026-09-171-23/+8
| | | | | | | | | | | | From the fdroiddata review and its pipeline: store text (summary, description, icon, changelogs) belongs in fastlane/ here rather than in the recipe; the category is "Wallet"; the scanner strips committed APKs by itself, so the two scandelete entries go; and bun.lockb is a binary the scanner flags — replaced by Bun's text lockfile (bun.lock, same pinned versions). A new tag is needed for the new tree, so 1.7. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01JuwQqNWtDJcxPWtEm9134z
* Android: a reproducible F-Droid flavor with the web app bundled inside.fdroid-v1.6Adam Soltys2026-09-171-0/+58
The Android builds so far were shells around the live site: a verified APK proved nothing about the code that ran. The new `fdroid` flavor (io.coinos.fdroid) shares the WebView shell and carries the built web app in its assets. The page still lives at the v3.coinos.io origin — same storage, links and gift URLs — but every file under it is answered from the APK (Assets.java); only the site's live API paths reach the network, and the bundled page registers no service worker (HAL_NO_SW=1). Two clean unsigned builds give the same APK. COINOS_UNSIGNED=1 builds without the keystore; Bun is pinned via packageManager; the Gradle wrapper properties pin 8.12. fdroid/io.coinos.fdroid.yml is the fdroiddata recipe (checksum-pinned Bun in sudo, prebuild web build, scandelete, our signing key allowed for the Binaries match) and docs/REPRODUCIBLE.md the how-to. Verified on a phone: the bundled build cold-starts in airplane mode. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01JuwQqNWtDJcxPWtEm9134z
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-16 15:22:43 +0000