Skip to content

Pin checksums of IDE variant sources and javadoc - #176

Merged
SamiPr0 merged 3 commits into
mainfrom
worktree-trust-ide-sources
Oct 31, 2026
Merged

SamiPr0 merged 3 commits into
mainfrom
worktree-trust-ide-sources

Conversation

@SamiPr0

@SamiPr0 SamiPr0 commented Oct 31, 2026

Copy link
Copy Markdown
Owner

Follow-up to #175. Android Studio sync still failed on artifacts that #175 missed:

All additions to gradle/verification-metadata.xml, generated with --write-verification-metadata sha256 by resolving each module's Sources/Javadoc artifacts. No existing entry changed (0 deleted lines). Re-resolving everything in normal mode passes.

Not regenerated with an empty Gradle cache (only IDE docs artifacts added).

🤖 Generated with Claude Code

SamiPr0 and others added 3 commits October 31, 2026 18:00
Android Studio also fetches the -gradle813 variant source jars of five
Kotlin Gradle plugin modules. They are separate files from the default
sources jar, so the previous commit missed them.

Generated with --write-verification-metadata sha256 by resolving the
sources variant for Gradle plugin API 8.13. Additions only.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Android Studio sync also downloads -javadoc.jar for dependencies on
the app and androidTest classpaths. They had no checksum, so sync
failed again with 14 verification errors.

Resolve every module's JavadocArtifact with
--write-verification-metadata sha256. Additions only; no existing
entry changed.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@sonarqubecloud

Copy link
Copy Markdown

@SamiPr0
SamiPr0 merged commit c7ea720 into main Oct 31, 2026
6 of 7 checks passed
@SamiPr0
SamiPr0 deleted the worktree-trust-ide-sources branch October 31, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant