settings: reword toolchain note to keep the 'foojay' token out of source

Calendula scans its whole source tree (incl. this submodule) for the literal
token as a reproducibility guard; the explanatory comment shouldn't trip it.
No behavioural change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-06-27 23:45:28 +02:00
parent 39cdfbcb71
commit 554d536b2f

View File

@@ -12,11 +12,11 @@ pluginManagement {
} }
} }
// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an // NB: deliberately NO Gradle Java-toolchain auto-download resolver plugin here.
// included build, and Calendula publishes via official F-Droid reproducible // Consuming apps build this as an included build, and Calendula publishes via
// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver // official F-Droid reproducible builds whose offline source scanner rejects any
// (it can fetch a JDK at build time). Modules here set jvmTarget directly and // toolchain resolver that can fetch a JDK at build time. Modules set jvmTarget
// must not use a Java toolchain block that would need a resolver. // directly and must not add a Java toolchain block that needs such a resolver.
dependencyResolutionManagement { dependencyResolutionManagement {
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)