Commit Graph

9303 Commits

Author SHA1 Message Date
Michael Pöhn
d152b394fd 🛡️ add pip-audit to gitlab ci 2025-12-03 14:16:43 +00:00
Hans-Christoph Steiner
c081012781 Merge branch 'misc' into 'master'
Consistency & verbose

See merge request fdroid/fdroidserver!1497
2025-12-03 14:01:09 +00:00
g0t mi1k
53719f7737 makebuildserver: Be more verbose with actions/stages 2025-12-03 14:39:55 +01:00
linsui
d4c7eb2b7f Merge branch 'scanner--binary--allow-debuggable' into 'master'
scanner: check binaries for debuggable/testOnly

See merge request fdroid/fdroidserver!1744
2025-12-02 17:25:46 +00:00
Hans-Christoph Steiner
f64f9c82ca scanner: check binaries for debuggable/testOnly
This used to be enforced by !1734, but that bitrotted away and no longer
works.  This is a better place to enforce this, since it is easier to
reliably find it in the APK rather than the source code.
2025-12-02 18:11:24 +01:00
Hans-Christoph Steiner
72732c1f9b Merge branch 'lint-https-enforcing' into 'master'
lint: https enforcing

See merge request fdroid/fdroidserver!1748
2025-12-01 18:41:34 +00:00
Hans-Christoph Steiner
5712438809 lint: update list of URL shorteners 2025-12-01 18:39:44 +01:00
Hans-Christoph Steiner
13874b9f4f lint: use PEP8 upper case names for global vars 2025-12-01 16:24:58 +01:00
Hans-Christoph Steiner
34a6e2cfee lint: require https:// and no shorteners in Donate: links 2025-12-01 16:11:17 +01:00
Hans-Christoph Steiner
4a1af27ab2 lint: if Binaries:/binary: then enforce reproducible srclib refs
If the app is meant to be reproducible to the upstream signature, then the
build metadata must supply the commit IDs for srclibs.  Or it will be
impossible to reproduce in the future.  For other cases, this is less
important so it is not strictly enforced.
2025-12-01 16:11:17 +01:00
Hans-Christoph Steiner
40a5d8ecf8 lint: require Binaries:/binary: use https:// and no URL shorteners 2025-12-01 16:11:17 +01:00
Hans-Christoph Steiner
7a9bb1d0d8 lint: fix false positives on URL shorteners 2025-12-01 16:11:15 +01:00
Hans-Christoph Steiner
cfb5d022d2 Merge branch 'buildserver-scheduling' into 'master'
🏗️ subcommands scheduling and sending buildcycles

See merge request fdroid/fdroidserver!1724
2025-11-26 13:44:25 +00:00
Michael Pöhn
d5a558d04e Apply 1 suggestion(s) to 1 file(s)
Co-authored-by: Hans-Christoph Steiner <hans@eds.org>
2025-11-26 13:14:17 +00:00
Michael Pöhn
87e030e475 🎼 silence bandit 2025-11-26 13:14:17 +00:00
Michael Pöhn
709c8fe675 🏗️ subcommands scheduling and sending buildcycles
This adds 2 new sub commands:
* schedule_buildcycle - create a json format schedule for the next
  buildserver build cycle
* send_buildcycle - submit build requests from schedule json to buildbot
2025-11-26 13:14:17 +00:00
Hans-Christoph Steiner
0360a9bd94 Merge branch 'cleanup-get-virt-container-type' into 'master'
🧹 cleanup get_virt_container_type() fail with exception instead exiting

See merge request fdroid/fdroidserver!1728
2025-11-26 13:07:29 +00:00
Michael Pöhn
6f1c253b09 🧹 cleanup get_virt_container_type() fail with exception instead exiting 2025-11-26 12:57:35 +00:00
Hans-Christoph Steiner
fec90282a7 Merge branch 'streamline-execute-sudo' into 'master'
🚗 streamline execute_sudo

See merge request fdroid/fdroidserver!1740
2025-11-26 12:42:46 +00:00
Michael Pöhn
12f9de6697 🚗 streamline execute_sudo
Adding missing execption handling boiler-plate to execute_sudo.py
2025-11-26 12:42:09 +00:00
Hans-Christoph Steiner
afa513bb6e Merge branch 'purge-remove_debuggable_flags' into 'master'
purge remove_debuggable_flags(), upstreams should handle this

See merge request fdroid/fdroidserver!1734
2025-11-26 12:37:34 +00:00
Hans-Christoph Steiner
40d1113898 purge remove_debuggable_flags(), upstreams should handle this
Also, there might be valid use cases for using fdroidserver to build APKs
that are debuggable.  There are other checks to ensure that debuggable APKs
are not published, e.g. in `fdroid update`.

48df58854c/fdroidserver/update.py (L1978)
2025-11-26 12:35:01 +00:00
Hans-Christoph Steiner
68d7a1de59 Merge branch 'rewritemeta' into 'master'
rewritemeta: support read from stdin

See merge request fdroid/fdroidserver!1742
2025-11-26 12:23:17 +00:00
linsui
146f2b93fe rewritemeta: support read from stdin 2025-11-26 12:22:39 +00:00
Michael Pöhn
cbb7698f55 Merge branch 'schedule_verify-if-no-Repo' into 'master'
schedule_verify: do not schedule if no Repo: is provided

See merge request fdroid/fdroidserver!1718
2025-11-26 12:06:19 +00:00
Hans-Christoph Steiner
2112858185 schedule_verify: do not schedule if no Repo: is provided 2025-11-26 11:55:11 +00:00
Michael Pöhn
280eee9be1 Merge branch 'buildserver-set-fs.inotify.max_user_watches' into 'master'
buildserver: set fs.inotify.max_user_watches globally

See merge request fdroid/fdroidserver!1720
2025-11-26 11:53:03 +00:00
Hans-Christoph Steiner
1bffcff5d9 buildserver: set fs.inotify.max_user_watches globally
Some builds need to track a lot of files, so this needs to be set for
them to succeed.
2025-11-26 11:52:04 +00:00
Michael Pöhn
c1356ec635 Merge branch 'rm-CACHEDIR-config.buildserver.yml' into 'master'
remove internal CACHEDIR env var, _config.buildserver.yml_

See merge request fdroid/fdroidserver!1727
2025-11-26 11:51:30 +00:00
Hans-Christoph Steiner
9f3f912e9c buildserver: remove /opt/gradle/bin from PATH, it is no more 2025-11-26 11:50:58 +00:00
Hans-Christoph Steiner
171cf77cc3 rm config.buildserver.yml, ANDROID_HOME set in /etc/profile.d/bsenv.sh
`fdroid build_local_run` has been running without this for a long time.
2025-11-26 11:50:58 +00:00
Hans-Christoph Steiner
97769ad8cb remove internal CACHEDIR env var, it was only used for gradle
fdroidserver!1725
gradlew-fdroid!10
2025-11-26 11:50:58 +00:00
Michael Pöhn
303d038de9 Merge branch 'checkupdates-cleanups' into 'master'
checkupdates cleanups following new subcommand style

See merge request fdroid/fdroidserver!1721
2025-11-26 11:50:30 +00:00
Hans-Christoph Steiner
5bed7b48e6 checkupdates does not need common.config 2025-11-26 11:49:49 +00:00
Hans-Christoph Steiner
be27b58114 checkupdates: standardize on "from fdroidserver import X"
This is the code style used in most of the rest of the submodules.
2025-11-26 11:49:49 +00:00
Hans-Christoph Steiner
5660a06740 checkupdates: remove status JSON, it is no longer used 2025-11-26 11:49:49 +00:00
Hans-Christoph Steiner
0b4764504d checkupdates: fix pylint invalid-name use-dict-literal no-else-return/raise 2025-11-26 11:49:49 +00:00
Michael Pöhn
729a971fdd Merge branch 'log-commit-id' into 'master'
log actual commit ID from git Repo: and srclibs:

See merge request fdroid/fdroidserver!1733
2025-11-26 11:34:19 +00:00
Hans-Christoph Steiner
67b03c5d4c log actual commit ID from git Repo: and srclibs: 2025-11-26 11:30:04 +00:00
linsui
48df58854c Merge branch 'prepare-to-enforce-lint' into 'master'
lint: maintenance towards reenabling the `fdroid lint` CI job in _fdroiddata_

See merge request fdroid/fdroidserver!1735
2025-11-25 14:09:24 +00:00
Hans-Christoph Steiner
062e7ca4f2 lint: isolate "options" var to only main() and lint_metadata()
This means lint no longer uses fdroidserver.common.options at all, and the
"options" are is isolated to only fdroidserver/lint.py.  Running rewritemeta
separately also allows for line numbers in all the check functions that
return a generator.
2025-11-24 12:32:04 +01:00
Hans-Christoph Steiner
185c4ff38a lint: mediawiki-style links are no longer supported
fdroidserver!828
2025-11-24 12:32:04 +01:00
Hans-Christoph Steiner
b43faa8c75 lint: port to common.config, remove local config var 2025-11-24 12:31:28 +01:00
Hans-Christoph Steiner
b90fd68794 lint: remove "Invalid bulleted list", there is no list syntax 2025-11-24 12:01:48 +01:00
Hans-Christoph Steiner
379e293320 lint; fix double execution of tests 2025-11-24 12:01:48 +01:00
Hans-Christoph Steiner
9abb716e48 lint: check git/srclib Repo URLs for proper format 2025-11-24 12:01:48 +01:00
Hans-Christoph Steiner
ef72c886bc lint: leave leading/trailing space enforcement to yamllint 2025-11-24 12:01:48 +01:00
Hans-Christoph Steiner
09a229f662 lint: master or main is actually preferred in URLs over HEAD 2025-11-24 12:01:48 +01:00
Hans-Christoph Steiner
048d7d8386 Merge branch 'fix-test-deploy-to-s3-with-rclone-ci-job' into 'master'
Change debian:bookworm-slim instance to use debian:trixie-slim for rclone_tests

See merge request fdroid/fdroidserver!1731
2025-11-21 19:03:37 +00:00
thefuture
f274ff38e7 change debian instance to use debian:trixie-slim 2025-11-21 15:43:32 +03:00