Closed Poussinou closed 6 years ago
Merged this patch. Thanks!
Will a new version need to be released for F-Droid with distributionSha256Sum
set or is it sufficient to have it in the next version?
It's totally sufficient to have it in the next version, this isn't really related to F-Droid, just a more secured way to deal with gradle (and F-Droid love security ;) )
Hi,
This small PR adds the
distributionSha256Sum
property togradle-wrapper.properties
. It allows for verification of the downloaded Gradle distribution via SHA-256 hash sum comparison.You can find some documentation about this security improvement here, and the sums for each version of gradle here.
Note that you need to update this property every time you change your version of gradle.