Skip to content

Conversation

@UjuiUjuMandan
Copy link
Contributor

We find that there is a DependencyInfoBlock in your APK.

It's a Signing block added by AGP and encrypted with the Google public key so it can't be read by anyone else except Google. You can read more about it here, here and here.

While this was added a while ago, we were only enforcing it for new apps, and recently we started scanning updates too.

Could you please disable it with the following code?

android {
    dependenciesInfo {
        // Disables dependency metadata when building APKs.
        includeInApk = false
        // Disables dependency metadata when building Android App Bundles.
        includeInBundle = false
    }
}

Thanks!

@JStone2934
Copy link
Collaborator

OK, thank you

@JStone2934 JStone2934 merged commit 0517d6c into Live-GalGame:main Nov 14, 2025
2 checks passed
@UjuiUjuMandan UjuiUjuMandan deleted the patch-2 branch November 14, 2025 15:27
@UjuiUjuMandan
Copy link
Contributor Author

UjuiUjuMandan commented Dec 3, 2025

@JStone2934 Can you release a new tag now? Just update the versionName and versionCode and I'll push a new build on F-Droid MR.

@JStone2934
Copy link
Collaborator

@JStone2934 Can you release now? Just update the versionName and versionCode and I'll push a new build on F-Droid MR.

@UjuiUjuMandan Done. Thank you for your advice, call me if there is any problem.

Chen-speculation pushed a commit that referenced this pull request Dec 13, 2025
Remove DependencyInfoBlock for F-Droid
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants