From cc948034f3f8421e3dc37a1666fc59a87a880dc7 Mon Sep 17 00:00:00 2001 From: Harry Bond Date: Sat, 12 Jul 2025 01:50:02 +0100 Subject: [PATCH] [android] Don't include dependenciesInfo blobs This metadata is encrypted with a public key owned by Google (only Google can read it). It's unauditable and there's no benefit to keeping it. see https://android.izzysoft.de/articles/named/iod-scan-apkchecks#blobs for more info Signed-off-by: Harry Bond --- android/app/build.gradle | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/android/app/build.gradle b/android/app/build.gradle index 6878419b9..548788f2f 100644 --- a/android/app/build.gradle +++ b/android/app/build.gradle @@ -65,6 +65,13 @@ project.ext.appName = 'CoMaps' android { namespace 'app.organicmaps' + dependenciesInfo { + // Disables dependency metadata when building APKs (for IzzyOnDroid/F-Droid) + includeInApk = false + // Disables dependency metadata when building Android App Bundles (for Google Play) + includeInBundle = false + } + buildFeatures { dataBinding = true buildConfig = true