@dvai-bridge/android-shared-core 4.0.1 → 4.0.2

package/android/build.gradle

@@ -22,7 +22,7 @@ buildscript {
         // Maven Central publishing — wraps maven-publish + signing + the
         // Central Portal upload API into one config block. See the
         // mavenPublishing { ... } block below.
-        classpath 'com.vanniktech:gradle-maven-publish-plugin:0.33.0'
+        classpath 'com.vanniktech:gradle-maven-publish-plugin:0.36.0'
     }
 }
 
@@ -128,7 +128,7 @@ dependencies {
 // validation passing) or `publishToMavenLocal` for a dry-run that
 // writes the artifacts + signatures to ~/.m2/repository/.
 mavenPublishing {
-    publishToMavenCentral(com.vanniktech.maven.publish.SonatypeHost.CENTRAL_PORTAL, true)
+    publishToMavenCentral(true)
     // Only sign when the PGP key is actually configured — in CI we run
     // `publishToMavenLocal` to verify the build, and the signing key
     // isn't available there. The real Sonatype publish is driven from
@@ -142,7 +142,7 @@ mavenPublishing {
     coordinates(
         'co.deepvoiceai',
         'android-shared-core',
-        (project.findProperty('dvaiBridgeVersion') ?: '4.0.1').toString(),
+        (project.findProperty('dvaiBridgeVersion') ?: '4.0.2').toString(),
     )
 
     pom {
@@ -175,3 +175,18 @@ mavenPublishing {
         }
     }
 }
+
+// Switch Gradle signing from BouncyCastle-based in-memory mode to
+// shell-out-to-gpg mode. The in-memory path can't parse GnuPG 2.4+
+// keys that carry pref-aead-algos (subpkt 34) in their user-ID
+// self-signature — `gpg --list-packets` of our v4.0.1 signing key
+// confirms that subpacket is present. useGpgCmd() shells out to the
+// local gpg binary (imported into the runner's keyring by the
+// publish.yml workflow), which can parse it. Passphrase is supplied
+// via ~/.gradle/gradle.properties (signing.gnupg.passphrase).
+if (project.findProperty('signing.gnupg.keyName') ||
+        System.getenv('ORG_GRADLE_PROJECT_USE_GPG_CMD_SIGNING') == 'true') {
+    signing {
+        useGpgCmd()
+    }
+}

package/android/gradle.properties

@@ -2,4 +2,4 @@ android.useAndroidX=true
 kotlin.code.style=official
 android.nonTransitiveRClass=true
 org.gradle.jvmargs=-Xmx4096m
-dvaiBridgeVersion=4.0.1
+dvaiBridgeVersion=4.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvai-bridge/android-shared-core",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "DVAI-Bridge Android shared core — Ktor HTTP server + handler dispatch + CORS config shared by every Android backend module (llama / mediapipe / litert).",
   "author": "Deep Chakraborty <https://github.com/dk013>",
   "license": "Custom (See LICENSE)",