From 39cdfbcb71ed3c7a6700f8d2cff1bfe291a27ae4 Mon Sep 17 00:00:00 2001 From: Jean-Luc Makiola Date: Sat, 27 Jun 2026 23:44:31 +0200 Subject: [PATCH] settings: drop foojay toolchain resolver (reproducible-build safe) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Calendula consumes the kit as an included build and publishes via official F-Droid reproducible builds, whose offline source scanner rejects the foojay toolchain resolver (it can fetch a JDK at build time). The kit never used a Java toolchain block — modules set jvmTarget directly — so the resolver was dead weight that would have broken Calendula's reproducibility invariant. Co-Authored-By: Claude Opus 4.8 (1M context) --- settings.gradle.kts | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/settings.gradle.kts b/settings.gradle.kts index c4006a0..db040bb 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -11,9 +11,12 @@ pluginManagement { gradlePluginPortal() } } -plugins { - id("org.gradle.toolchains.foojay-resolver-convention") version "1.0.0" -} + +// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an +// included build, and Calendula publishes via official F-Droid reproducible +// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver +// (it can fetch a JDK at build time). Modules here set jvmTarget directly and +// must not use a Java toolchain block that would need a resolver. dependencyResolutionManagement { repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)