feat: Bump aapt2 to build-tools 35.0.2 #2489
Conversation
This solve the issue of revanced crashing when rebuilding the app when it has grammatical gender string https://developer.android.com/about/versions/14/features/grammatical-inflection Source: aapt2 repository Attestation: gh attestation verify <bin>
Taknok
force-pushed
the
fix-grammatical-gender-rebuild
branch
from
40aa361 to
635993b
Compare
Taknok
changed the title
There was a problem hiding this comment.
🔥 DO NOT SUBMIT
Hello, thanks for your PR but we would definitely not going to merge this until ReVanced themselves has generated an attestation of the prebuilt libraries.
For your PR, all of your binary is affected.
- libaapt2.so (arm64-v8a)
- libaapt2.so (armeabi-v7a)
- libaapt2.so (x86_64)
For now try to get your PR from ReVanced/aapt2#16 merged to the main branch of the repository first then wait for next release.
|
I don't know what the problem is. Do you know if the asset can be verified already as instructed in the PR OP body? I agree, that this PR should be merged once the aapt2#16 is closed. |
|
The bin are already attested and can be verified by `gh attestation verify ". But I agree that the bin pushed to main can be the one built by the aapt repo of revanced. |
The binaries is indeed signed, but they're not by us, the binaries need to be build by ours if we want to attest the authentically of the file. See binaries attestation below: PS C:\Users\havef\Downloads> gh at verify '.\libaapt2.so'
at least one of the flags in the group [owner repo] is required
PS C:\Users\havef\Downloads> gh at verify .\libaapt2.so --owner revanced
Loaded digest sha256:ca5d69aee0ed190178ab472e7ec7eacb98bbd3ef945963085a6d545e1bb3083e for file://libaapt2.so
✗ Loading attestations from GitHub API failed
Error: failed to fetch attestations from revanced: HTTP 404: Not Found (https://api.github.com/orgs/revanced/attestations/sha256:ca5d69aee0ed190178ab472e7ec7eacb98bbd3ef945963085a6d545e1bb3083e?per_page=30)
PS C:\Users\havef\Downloads> gh at verify '.\libaapt2 (1).so' --owner revanced
Loaded digest sha256:a8275554beb9e6ae77a4b8f343c0c614bf3a42253f835a59da0bd8b4e2c0ac39 for file://libaapt2 (1).so
✗ Loading attestations from GitHub API failed
Error: failed to fetch attestations from revanced: HTTP 404: Not Found (https://api.github.com/orgs/revanced/attestations/sha256:a8275554beb9e6ae77a4b8f343c0c614bf3a42253f835a59da0bd8b4e2c0ac39?per_page=30)
PS C:\Users\havef\Downloads> gh at verify '.\libaapt2 (2).so' --owner revanced
Loaded digest sha256:b6b692fc8bd5ccdac8fb0b221e42b74dd2583c7119f0d9a542a3ae9406cd9e7d for file://libaapt2 (2).so
✗ Loading attestations from GitHub API failedAttestation logs (if we use Taknok as the owner)```ps PS C:\Users\havef\Downloads> gh at verify '.\libaapt2 (2).so' --owner Taknok Loaded digest sha256:b6b692fc8bd5ccdac8fb0b221e42b74dd2583c7119f0d9a542a3ae9406cd9e7d for file://libaapt2 (2).so Loaded 2 attestations from GitHub APIThe following policy criteria will be enforced:
✓ Verification succeeded! The following 2 attestations matched the policy criteria
PS C:\Users\havef\Downloads> gh at verify '.\libaapt2 (1).so' --owner Taknok The following policy criteria will be enforced:
✓ Verification succeeded! The following 2 attestations matched the policy criteria
PS C:\Users\havef\Downloads> gh at verify '.\libaapt2.so' --owner Taknok The following policy criteria will be enforced:
✓ Verification succeeded! The following 2 attestations matched the policy criteria
|
The attestation links the binaries to a source. If the source is good, so is the binary. It's not a matter of that, but rather that we may want the source to be different, hence the binaries, so we should wait for the PR to be merged. If technically no changes are needed, the binaries here can technically be merged as is thanks to the attestation. |
This solve the issue of revanced crashing when rebuilding the app when it has grammatical gender string
https://developer.android.com/about/versions/14/features/grammatical-inflection
Source: aapt2 repository
Attestation: gh attestation verify
This should fix some case of #2142 as the old aapt binary crashed when gendered string are used. Example: