From 554d536b2fb678f670069648e156cc2c3b015bea Mon Sep 17 00:00:00 2001 From: Jean-Luc Makiola Date: Sat, 27 Jun 2026 23:45:28 +0200 Subject: [PATCH] settings: reword toolchain note to keep the 'foojay' token out of source Calendula scans its whole source tree (incl. this submodule) for the literal token as a reproducibility guard; the explanatory comment shouldn't trip it. No behavioural change. Co-Authored-By: Claude Opus 4.8 (1M context) --- settings.gradle.kts | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/settings.gradle.kts b/settings.gradle.kts index db040bb..75008f4 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -12,11 +12,11 @@ pluginManagement { } } -// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an -// included build, and Calendula publishes via official F-Droid reproducible -// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver -// (it can fetch a JDK at build time). Modules here set jvmTarget directly and -// must not use a Java toolchain block that would need a resolver. +// NB: deliberately NO Gradle Java-toolchain auto-download resolver plugin here. +// Consuming apps build this as an included build, and Calendula publishes via +// official F-Droid reproducible builds whose offline source scanner rejects any +// toolchain resolver that can fetch a JDK at build time. Modules set jvmTarget +// directly and must not add a Java toolchain block that needs such a resolver. dependencyResolutionManagement { repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)