Android: drop the DependencyInfoBlock from release APKs so F-Droid accepts
updates again. No functional changes to the proxy itself — desktop binaries and
Docker images are unaffected.
Why
AGP injects a DependencyInfoBlock into every APK it builds — a v2
signing block
encrypted with Google's public key, so only Google can read it. F-Droid
recently started scanning
updates (not just new apps) for this block and rejects APKs that carry it,
which would have blocked every future update of the Android app.
Changes
- Disabled dependency metadata in the Android build
(android/app/build.gradle.kts):dependenciesInfo.includeInApk = falseand
includeInBundle = false, so neither APKs nor App Bundles carry the block. - Version bump to 2.3.3 (version code
203030).
What it costs
Google Play uses this block to track dependency versions across app updates.
This app is distributed through F-Droid and GitHub Releases, never Play, so
nothing is lost — the metadata only ever served Google.