Jean-Luc Makiola
39cdfbcb71
Calendula consumes the kit as an included build and publishes via official F-Droid reproducible builds, whose offline source scanner rejects the foojay toolchain resolver (it can fetch a JDK at build time). The kit never used a Java toolchain block — modules set jvmTarget directly — so the resolver was dead weight that would have broken Calendula's reproducibility invariant. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
35 lines
1.2 KiB
Kotlin
35 lines
1.2 KiB
Kotlin
pluginManagement {
|
|
repositories {
|
|
google {
|
|
content {
|
|
includeGroupByRegex("com\\.android.*")
|
|
includeGroupByRegex("com\\.google.*")
|
|
includeGroupByRegex("androidx.*")
|
|
}
|
|
}
|
|
mavenCentral()
|
|
gradlePluginPortal()
|
|
}
|
|
}
|
|
|
|
// NB: deliberately NO foojay toolchain resolver. Consuming apps build this as an
|
|
// included build, and Calendula publishes via official F-Droid reproducible
|
|
// builds, whose offline source scanner rejects org.gradle.toolchains.foojay-resolver
|
|
// (it can fetch a JDK at build time). Modules here set jvmTarget directly and
|
|
// must not use a Java toolchain block that would need a resolver.
|
|
|
|
dependencyResolutionManagement {
|
|
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
|
|
repositories {
|
|
google()
|
|
mavenCentral()
|
|
}
|
|
}
|
|
|
|
// floret-kit — the shared Material 3 Expressive design system + plumbing for the
|
|
// Floret family of apps (Calendula, Agendula, …). Consumed by each app as a git
|
|
// submodule wired in via Gradle `includeBuild`, built from source (F-Droid-safe).
|
|
rootProject.name = "floret-kit"
|
|
|
|
include(":core-time")
|