@gpc-cli/core 0.10.7 → 0.10.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +7 -7
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -6808,7 +6808,7 @@ var manifestScanner = {
|
|
|
6808
6808
|
ruleId: "geofencing-foreground-service",
|
|
6809
6809
|
severity: "warning",
|
|
6810
6810
|
title: `Possible geofencing via foreground service "${service.name}"`,
|
|
6811
|
-
message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (sensitive-permissions policy announced April 15, 2026)
|
|
6811
|
+
message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (sensitive-permissions policy announced April 15, 2026).`,
|
|
6812
6812
|
suggestion: 'If this service performs geofencing, migrate to the Geofencing API (LocationServices.getGeofencingClient) or WorkManager/AlarmManager. If this is legitimate background location tracking (navigation, fitness), suppress this rule via .preflightrc.json: "disabledRules": ["geofencing-foreground-service"].',
|
|
6813
6813
|
policyUrl: "https://support.google.com/googleplay/android-developer/answer/16926792"
|
|
6814
6814
|
});
|
|
@@ -6898,7 +6898,7 @@ var RESTRICTED_PERMISSIONS = [
|
|
|
6898
6898
|
permission: "android.permission.READ_CALL_LOG",
|
|
6899
6899
|
severity: "critical",
|
|
6900
6900
|
title: "READ_CALL_LOG requires declaration form",
|
|
6901
|
-
message: "READ_CALL_LOG is restricted to default phone/assistant handler apps.
|
|
6901
|
+
message: "READ_CALL_LOG is restricted to default phone/assistant handler apps. From January 27, 2027, account verification via phone call is no longer an accepted use case for the Call Log permissions.",
|
|
6902
6902
|
suggestion: "Remove READ_CALL_LOG unless your app is a default phone or assistant handler. For phone-number verification, use the Digital Credentials API; for one-time codes, use the SMS Retriever API instead of reading the call log.",
|
|
6903
6903
|
policyUrl: "https://support.google.com/googleplay/android-developer/answer/10208820"
|
|
6904
6904
|
},
|
|
@@ -7041,14 +7041,14 @@ var permissionsScanner = {
|
|
|
7041
7041
|
].filter((p) => manifest.permissions.includes(p) && !allowed.has(p));
|
|
7042
7042
|
if (contactsPerms.length > 0) {
|
|
7043
7043
|
const names = contactsPerms.map((p) => p.split(".").pop()).join(", ");
|
|
7044
|
-
const enforced = manifest.targetSdk >= 37 ? ` Your app targets API ${manifest.targetSdk}, so this
|
|
7044
|
+
const enforced = manifest.targetSdk >= 37 ? ` Your app targets API ${manifest.targetSdk}, so this applies to it.` : "";
|
|
7045
7045
|
findings.push({
|
|
7046
7046
|
scanner: "permissions",
|
|
7047
7047
|
ruleId: "contacts-permission-broad",
|
|
7048
7048
|
severity: "warning",
|
|
7049
7049
|
title: "Broad contacts access requires migration to Contact Picker",
|
|
7050
|
-
message: `Your app declares ${names}. Google Play's Contacts Permissions policy requires the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) unless broad access is core to your app. Mandatory for apps targeting Android 17 (API 37+) on
|
|
7051
|
-
suggestion: "Migrate to the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) for user-initiated contact selection, or
|
|
7050
|
+
message: `Your app declares ${names}. Google Play's Contacts Permissions policy requires the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) unless broad access is core to your app and you submit a Play Console declaration. Mandatory for apps targeting Android 17 (API 37+) on January 27, 2027.${enforced}`,
|
|
7051
|
+
suggestion: "Migrate to the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) for user-initiated contact selection, or submit the contacts declaration in Play Console before January 27, 2027 if the picker cannot serve your core functionality. Remove READ_CONTACTS/WRITE_CONTACTS unless your app is a dialer, messaging, or contacts management app.",
|
|
7052
7052
|
policyUrl: "https://support.google.com/googleplay/android-developer/answer/16935362"
|
|
7053
7053
|
});
|
|
7054
7054
|
}
|
|
@@ -7060,8 +7060,8 @@ var permissionsScanner = {
|
|
|
7060
7060
|
ruleId: "location-minimal-scope",
|
|
7061
7061
|
severity: targetsApi37 ? "warning" : "info",
|
|
7062
7062
|
title: "Precise location \u2014 consider the location button (minimum scope)",
|
|
7063
|
-
message: `Your app declares ACCESS_FINE_LOCATION. Google Play's Location Permissions policy
|
|
7064
|
-
suggestion: 'For one-time/transactional precise location, use the system location button instead of requesting ACCESS_FINE_LOCATION up front. Only keep continuous fine location if navigation, fitness, or a similar feature is core functionality. Suppress via .preflightrc.json "disabledRules": ["location-minimal-scope"] if fine location is essential.',
|
|
7063
|
+
message: `Your app declares ACCESS_FINE_LOCATION. Google Play's Location Permissions policy requires the Android location button for one-time or infrequent precise location, and a Play Console declaration explaining why coarse location or the location button is not enough. Mandatory for apps targeting Android 17 (API 37+) on January 27, 2027.${targetsApi37 ? ` Your app targets API ${manifest.targetSdk}.` : ""}`,
|
|
7064
|
+
suggestion: 'For one-time/transactional precise location, use the system location button instead of requesting ACCESS_FINE_LOCATION up front. Only keep continuous fine location if navigation, fitness, or a similar feature is core functionality, and complete the precise location declaration in Play Console. Suppress via .preflightrc.json "disabledRules": ["location-minimal-scope"] if fine location is essential.',
|
|
7065
7065
|
policyUrl: "https://support.google.com/googleplay/android-developer/answer/17033915"
|
|
7066
7066
|
});
|
|
7067
7067
|
}
|