diff --git a/metadata/de.corona.tracing.yml b/metadata/de.corona.tracing.yml index 4d5619142f..6e10a0c5a1 100644 --- a/metadata/de.corona.tracing.yml +++ b/metadata/de.corona.tracing.yml @@ -432,7 +432,6 @@ Builds: - versionName: 2.24.2.1 versionCode: 2240202 - disable: fdroidserver#1023 commit: v2.24.2.1 subdir: Corona-Warn-App submodules: true @@ -449,13 +448,11 @@ Builds: - Corona-Warn-App/src/main/assets/ccl/ccl-configuration.bin - GmsCore/firebase-auth-core/build.gradle - GmsCore/play-services-core/build.gradle + - Corona-Warn-App/build.gradle scandelete: - protobuf/build MaintainerNotes: |- - Needs some hoop-jumping with the included dgc-certlogic dependency, which vendors another jar dependency - which we instead build to mavenLocal in srclib prepare step. - scanignored are some protobuf encoded config files, view them with: protoc --decode de.rki.coronawarnapp.server.protocols.internal.v2.ApplicationConfigurationAndroid \ Server-Protocol-Buffer/src/main/proto/internal/v2/app_config_android.proto --proto_path \ @@ -477,6 +474,15 @@ MaintainerNotes: |- Also microG isn't firebase, so we scanignore that as well. + Also also, we need to scanignore the main build.gradle file because of + https://gitlab.com/fdroid/fdroidserver/-/issues/1023 + + The library the scanner complaines about (kotlinx-coroutines-play-services) is free software and + it just has a gradle dependency on a gms lib. We explicitly exclude this here, so it doesn't + get pulled in as a dependency. Instead we use the microG Tasks implementation. See: + + https://codeberg.org/corona-contact-tracing-germany/cwa-android/src/branch/main/Corona-Warn-App/build.gradle#L324-L326 + AutoUpdateMode: None UpdateCheckMode: Tags v\d+\.\d+\.\d+\.\d+$ CurrentVersion: 2.24.2.1