Point the recipe at 1.11.4 - #56
Merged
Merged
Conversation
Verified locally with fdroidserver 2.4.2: all three ABIs reproduce the published APK byte for byte, carry the version codes the new scheme is supposed to produce (4021/4022/4023), and hold only 0x7109871A and 0x42726577 in their signing block. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Both facts SECURITY.md leads with had drifted. The tile server arrived with the map and AGENTS.md went on describing "exactly one host"; the five permissions androidx work-runtime merges in through home_widget's Glance dependency left SECURITY.md saying four where the APK declares nine. The second surfaced only because F-Droid's code-quality report prints the permission list off the built APK -- which is also what their store page shows, so the manifest merger's output is published whether or not this repository mentions it. Hence the note on where to read the number: the APK, never the count of uses-permission lines in the app's own manifest. Measured on the published 1.11.4 arm64 APK: nine entries, and DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION carries protectionLevel 0x2, which is PROTECTION_SIGNATURE. None of the five appears anywhere in lib/. Nothing about the app changes; only what is claimed about it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Verified locally with fdroidserver 2.4.2: all three ABIs reproduce the
published APK byte for byte, carry the version codes the new scheme is
supposed to produce (4021/4022/4023), and hold only 0x7109871A and
0x42726577 in their signing block.
Co-Authored-By: Claude Opus 5 noreply@anthropic.com