ソースを参照

docs: pin the release signing certificate

Krasimir Kazakov 1 週間 前
親
コミット
da7a52593a
1 ファイル変更、1 行追加、1 行削除
  1. 1 1
      AGENTS.md

+ 1 - 1
AGENTS.md

@@ -124,4 +124,4 @@ Release checklist:
    `https://git.krasi.net/api/v1/repos/kkazakov/car-interface-android/releases`,
    selects the highest published semver tag, and downloads
    `/raw/main/releases/cardash-android-<version>.apk`. No app-side release configuration is needed.
-7. The current release build uses the debug signing config. Android still requires the user to confirm installation and allow unknown-app installs once; never attempt silent installation.
+7. The current release build uses the project debug signing config. Reuse the existing debug keystore (certificate SHA-256 `C2:8E:5B:0B:E0:F8:27:EE:12:22:B0:62:9F:EE:1C:F2:7E:14:3F:78:95:86:1E:3F:34:15:A6:E5:3A:06:BE:ED`); never let Gradle generate a fresh debug key for a release, or in-place updates will fail. Android still requires the user to confirm installation and allow unknown-app installs once; never attempt silent installation.