F-Droid prep: dependency-info blob, reproducibility, metadata

app/build.gradle.kts

@@ -13,8 +13,8 @@ android {
         applicationId = "dev.debene.gopher"
         minSdk = 24
         targetSdk = 35
-        versionCode = 1
-        versionName = "2.0"
+        versionCode = 2
+        versionName = "2.0.2"
 
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
     }
@@ -62,6 +62,12 @@ android {
             excludes += "/META-INF/{AL2.0,LGPL2.1}"
         }
     }
+
+    // F-Droid / IzzyOnDroid: omit the AGP dependency-metadata blob from build artifacts.
+    dependenciesInfo {
+        includeInApk = false
+        includeInBundle = false
+    }
 }
 
 dependencies {

fastlane/metadata/android/en-US/changelogs/2.txt

@@ -0,0 +1,4 @@
+Packaging fixes for F-Droid / IzzyOnDroid.
+
+Omit the AGP dependency-info blob from the APK, pin the Gradle distribution by
+SHA-256 for reproducible builds. No user-facing changes.

fdroid/dev.debene.gopher.yml

@@ -32,14 +32,14 @@ RepoType: git
 Repo: https://github.com/felipedbene/deburrow.git
 
 Builds:
-  - versionName: "2.0"
-    versionCode: 1
-    commit: v2.0
+  - versionName: "2.0.2"
+    versionCode: 2
+    commit: v2.0.2
     subdir: app
     gradle:
       - yes
 
 AutoUpdateMode: Version v%v
 UpdateCheckMode: Tags
-CurrentVersion: "2.0"
-CurrentVersionCode: 1
+CurrentVersion: "2.0.2"
+CurrentVersionCode: 2

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,7 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 distributionUrl=https\://services.gradle.org/distributions/gradle-8.13-bin.zip
+distributionSha256Sum=20f1b1176237254a6fc204d8434196fa11a4cfb387567519c61556e8710aed78
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME