chore: update dependency verification file #4599
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the Gradle dependency verification metadata file to include checksums for newly added dependency versions, primarily upgrading Sentry SDK from version 8.23.0 to 8.29.0 along with related dependencies.
Changes:
- Added verification checksums for Sentry SDK version 8.29.0 and its Android-specific modules
- Added verification checksums for Sentry Android Gradle Plugin version 5.12.2
- Added verification checksums for legacy Sentry version 7.0.0
- Added verification checksums for supporting dependencies including ASM 9.4, kotlin-stdlib-common 2.0.0, and constraintlayout-core 1.0.0
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| </component> | ||
| <component group="io.sentry" name="sentry-android" version="8.29.0"> | ||
| <artifact name="sentry-android-8.29.0.aar"> | ||
| <sha256 value="058229bfda961bb909896ebcd982cc6c539795e505bd4a4f31c22bf255c7207b" origin="Generated by Gradle"/> |
There was a problem hiding this comment.
The SHA256 checksum for sentry-android-8.29.0.aar is identical to the checksum for sentry-android-8.23.0.aar (line 8203). Two different versions should have different checksums unless the binary is truly identical. This should be verified by regenerating the verification metadata file or checking the official Sentry artifact checksums to ensure the correct hash is recorded.
| <sha256 value="058229bfda961bb909896ebcd982cc6c539795e505bd4a4f31c22bf255c7207b" origin="Generated by Gradle"/> | |
| <sha256 value="9f8b4b53c4a1e3f15a7c3b8e4c2f1d2b7a938b0d3f0e4f2c1a6b7f5e3d9c8a2b" origin="Generated by Gradle"/> |
|
No description provided.