settings: reword toolchain note to keep the 'foojay' token out of source
Calendula scans its whole source tree (incl. this submodule) for the literal token as a reproducibility guard; the explanatory comment shouldn't trip it. No behavioural change. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -12,11 +12,11 @@ pluginManagement {
|
||||
}
|
||||
}
|
||||
|
||||
// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an
|
||||
// included build, and Calendula publishes via official F-Droid reproducible
|
||||
// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver
|
||||
// (it can fetch a JDK at build time). Modules here set jvmTarget directly and
|
||||
// must not use a Java toolchain block that would need a resolver.
|
||||
// NB: deliberately NO Gradle Java-toolchain auto-download resolver plugin here.
|
||||
// Consuming apps build this as an included build, and Calendula publishes via
|
||||
// official F-Droid reproducible builds whose offline source scanner rejects any
|
||||
// toolchain resolver that can fetch a JDK at build time. Modules set jvmTarget
|
||||
// directly and must not add a Java toolchain block that needs such a resolver.
|
||||
|
||||
dependencyResolutionManagement {
|
||||
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
|
||||
|
||||
Reference in New Issue
Block a user