[Security Feature Request]: F-Droid build

[Edward202511]

Describe the feature you'd like to request

Please finalize the F-Droid build.

F-Droid has very good security model and is widely trusted.
It provides secure build environment including APK signing and keeps copy of each build source code.
https://f-droid.org/docs/Security_Model/

Describe the solution you'd like

Probably continue work in https://gitlab.com/fdroid/fdroiddata/-/merge_requests/30107

Describe alternatives you've considered

F-Droid is the best option for secure build environment.

[Edward202511]

There was a pull request in F-Droid data repo https://gitlab.com/fdroid/fdroiddata/-/merge_requests/30107

@yuliskov Can we together continue work on it?

Does libj2v8.so come from Maven Central or is it built from source?

And could melautils.jar be replaced by a more Github and F-Droid integrated solution?

[yuliskov]

For FDroid

[haroondilshad]

@yuliskov could you please confirm does the status completed mean that the f-droid release has been done?

[haroondilshad]

I see the pull request at the f-droid repository was closed without merging, so I'm a bit confused with this completed status

[yuliskov]

This was my previous failed attempt. I'll add another one soon. Regards, Yuriy

…

On Sun, Jan 25, 2026, 04:19 H D ***@***.***> wrote: *haroondilshad* left a comment (yuliskov/SmartTube#5213) <#5213 (comment)> I see the pull request at the f-droid repository was closed without merging, so I'm a bit confused with this completed status — Reply to this email directly, view it on GitHub <#5213 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABM7Z6HINGDWCVJH6AYVJB34IQR2DAVCNFSM6AAAAACO7LSWJ2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTOOJVHA2DENBZHE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[yuliskov]

Does anybody understand fdroid build logs?
Is it failed because of old gradle version?

https://gitlab.com/yuliskov/fdroiddata/-/commit/20f9b05e1a351e64c5b72f46db335376337fb0d3

[yuliskov]

@Edward202511 hi, friend. Can you help me to find what could cause this mr to fail?

https://gitlab.com/fdroid/fdroiddata/-/merge_requests/32435

[haroondilshad]

Hey, I have reproduced successful fdroid builds with a small PR in the sub module here and the fdroid merge request which demonstrates successful fdroid builds. I don't plan on merging on GitLab myself as I created that merge request only for demonstration purposes so that you could follow that. Let me know if you have any problems or if you need support for the fdroid merge request.

[yuliskov]

@haroondilshad the build is failed on test phase https://gitlab.com/fdroid/fdroiddata/-/merge_requests/32435/pipelines

[haroondilshad]

@yuliskov that's because of metadata formatting. Here's my notes on this:

Local Testing

Test locally using Python venv (no Docker needed on macOS):

cd ~/Projects/fdroiddata

# Set up venv (one-time)
python3 -m venv /tmp/fdroid-venv
source /tmp/fdroid-venv/bin/activate
pip install fdroidserver

# Test rewritemeta
fdroid rewritemeta org.smarttube.fdroid

Or use the cloned fdroidserver repo:

cd ~/Projects/fdroiddata
PYTHONPATH="/tmp/fdroidserver:/tmp/fdroidserver/examples" /tmp/fdroidserver/fdroid rewritemeta org.smarttube.fdroid

Exit code 0 = success. Any output from rewritemeta means formatting needs fixing.

Note: Full build requires F-Droid buildserver VM. Use CI pipeline for complete testing.

[yuliskov]

@haroondilshad, many thanks, friend. I really appreciate your efforts.