settings: reword toolchain note to keep the 'foojay' token out of source
Calendula scans its whole source tree (incl. this submodule) for the literal token as a reproducibility guard; the explanatory comment shouldn't trip it. No behavioural change. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -12,11 +12,11 @@ pluginManagement {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an
|
// NB: deliberately NO Gradle Java-toolchain auto-download resolver plugin here.
|
||||||
// included build, and Calendula publishes via official F-Droid reproducible
|
// Consuming apps build this as an included build, and Calendula publishes via
|
||||||
// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver
|
// official F-Droid reproducible builds whose offline source scanner rejects any
|
||||||
// (it can fetch a JDK at build time). Modules here set jvmTarget directly and
|
// toolchain resolver that can fetch a JDK at build time. Modules set jvmTarget
|
||||||
// must not use a Java toolchain block that would need a resolver.
|
// directly and must not add a Java toolchain block that needs such a resolver.
|
||||||
|
|
||||||
dependencyResolutionManagement {
|
dependencyResolutionManagement {
|
||||||
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
|
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
|
||||||
|
|||||||
Reference in New Issue
Block a user