lichess-org / mobile

Lichess mobile app v2
GNU General Public License v3.0
1.1k stars 150 forks source link

Remove Dependency Info Block #746

Closed ldeso closed 3 weeks ago

ldeso commented 3 weeks ago

The Dependency Info Block is an encrypted proprietary blob from Google that is added to every APK and AAB file by default, and that is not reproducible.

As discussed in #743, this pull request removes this blob from APK files by adding the following in build.gradle:

android {
    …

    dependenciesInfo {
        includeInApk false    # APK files
        includeInBundle true  # AAB files
    }
}

This pull request does not remove the Dependency Info Block from AAB files because, at the moment, those files are not shared with anyone else than the Google Play. If AAB files are to be published to other stores in the future (such as Accrescent), it might be worth it to remove the Dependency Info Block from them as well.

ldeso commented 3 weeks ago

Rebased to #747 to pass CI tests.