F-Droid Reproducible Builds

[ldeso]

If the app is to be included in the F-Droid repository in the future (#686), it would be nice to have reproducible builds.

Here are a few things that are required for F-Droid to be able to reproduce the builds:

• [x] when publishing a release on GitHub, attaching an APK built from the corresponding tag
• [x] naming this APK file consistently (it is currently app-release{versionCode}.apk)
• [ ] adding the Flutter repo as a submodule (pointing to the latest commit of the beta branch)
• [ ] using this Flutter submodule when building the APK

Here is an example of an app implementing the Flutter submodule approach: https://github.com/amake/orgro

---

Although not required by F-Droid, it might also be worth it to add [the following](https://developer.android.com/reference/tools/gradle-api/8.4/com/android/build/api/dsl/DependenciesInfo#includeInApk()) in the file build.gradle:

android {
    …

    dependenciesInfo {
        includeInApk false
    }
}

This removes the Dependency Info Block from the APK, which is an encrypted proprietary blob from Google that is not reproducible.

Edit: the Dependency Info Block was removed by merging #746.

[veloce]

Thanks you for this well written issue.

I don't have the time to work in this right now but I would accept a PR.