@dvai-bridge/android-litert-core 4.0.1 → 4.0.2

package/android/build.gradle

@@ -54,7 +54,7 @@ buildscript {
         // Maven Central publishing — wraps maven-publish + signing + the
         // Central Portal upload API into one config block. See the
         // mavenPublishing { ... } block below.
-        classpath 'com.vanniktech:gradle-maven-publish-plugin:0.33.0'
+        classpath 'com.vanniktech:gradle-maven-publish-plugin:0.36.0'
     }
 }
 
@@ -182,7 +182,7 @@ mavenPublishing {
         /* publishJavadoc  = */ false,
     ))
 
-    publishToMavenCentral(com.vanniktech.maven.publish.SonatypeHost.CENTRAL_PORTAL, true)
+    publishToMavenCentral(true)
     // Sign only when the PGP key is configured — see shared-core for rationale.
     if (project.findProperty('signingInMemoryKey') ||
             System.getenv('ORG_GRADLE_PROJECT_signingInMemoryKey')) {
@@ -192,7 +192,7 @@ mavenPublishing {
     coordinates(
         'co.deepvoiceai',
         'android-litert-core',
-        (project.findProperty('dvaiBridgeVersion') ?: '4.0.1').toString(),
+        (project.findProperty('dvaiBridgeVersion') ?: '4.0.2').toString(),
     )
 
     pom {
@@ -229,6 +229,21 @@ mavenPublishing {
     }
 }
 
+// Switch Gradle signing from BouncyCastle-based in-memory mode to
+// shell-out-to-gpg mode. The in-memory path can't parse GnuPG 2.4+
+// keys that carry pref-aead-algos (subpkt 34) in their user-ID
+// self-signature — `gpg --list-packets` of our v4.0.1 signing key
+// confirms that subpacket is present. useGpgCmd() shells out to the
+// local gpg binary (imported into the runner's keyring by the
+// publish.yml workflow), which can parse it. Passphrase is supplied
+// via ~/.gradle/gradle.properties (signing.gnupg.passphrase).
+if (project.findProperty('signing.gnupg.keyName') ||
+        System.getenv('ORG_GRADLE_PROJECT_USE_GPG_CMD_SIGNING') == 'true') {
+    signing {
+        useGpgCmd()
+    }
+}
+
 // Empty javadoc.jar to satisfy Sonatype Central Portal validation while
 // AGP 9.2.0's bundled Dokka is incompatible with our sealed-class bytecode.
 // See the `configure(AndroidSingleVariantLibrary ...)` comment above.

package/android/gradle.properties

@@ -2,4 +2,4 @@ android.useAndroidX=true
 kotlin.code.style=official
 android.nonTransitiveRClass=true
 org.gradle.jvmargs=-Xmx4096m
-dvaiBridgeVersion=4.0.1
+dvaiBridgeVersion=4.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvai-bridge/android-litert-core",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "DVAI-Bridge Android LiteRT core — wraps Google's LiteRT (TFLite) runtime with HuggingFace tokenizers, exposes the OpenAI-compatible HTTP surface via android-shared-core. Capacitor-free.",
   "author": "Deep Chakraborty <https://github.com/dk013>",
   "license": "Custom (See LICENSE)",