@gpc-cli/core 0.9.72 → 0.9.73

package/dist/index.js

@@ -4659,19 +4659,12 @@ async function diffAchievementConfig(client, achievementId, localData) {
   validateResourceId(achievementId, "achievement");
   const remote = await client.achievements.get(achievementId);
   const diffs = [];
-  const fields = [
-    "achievementType",
-    "initialState",
-    "stepsToUnlock",
-    "draft"
-  ];
+  const fields = ["achievementType", "initialState", "stepsToUnlock", "draft"];
   for (const field of fields) {
     const localVal = JSON.stringify(
       localData[field] ?? null
     );
-    const remoteVal = JSON.stringify(
-      remote[field] ?? null
-    );
+    const remoteVal = JSON.stringify(remote[field] ?? null);
     if (localVal !== remoteVal) {
       diffs.push({ field, local: localVal, remote: remoteVal });
     }
@@ -4707,9 +4700,7 @@ async function diffLeaderboardConfig(client, leaderboardId, localData) {
     const localVal = JSON.stringify(
       localData[field] ?? null
     );
-    const remoteVal = JSON.stringify(
-      remote[field] ?? null
-    );
+    const remoteVal = JSON.stringify(remote[field] ?? null);
     if (localVal !== remoteVal) {
       diffs.push({ field, local: localVal, remote: remoteVal });
     }
@@ -4964,7 +4955,7 @@ async function initProject(options) {
   const preflightrc = JSON.stringify(
     {
       failOn: "error",
-      targetSdkMinimum: 35,
+      targetSdkMinimum: 36,
       maxDownloadSizeMb: 150,
       allowedPermissions: [],
       disabledRules: [],
@@ -5582,8 +5573,8 @@ var manifestScanner = {
             ruleId: "geofencing-foreground-service",
             severity: "warning",
             title: `Possible geofencing via foreground service "${service.name}"`,
-            message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (April 2026 policy). Compliance deadline: May 15, 2026.`,
-            suggestion: 'If this service performs geofencing, migrate to WorkManager or AlarmManager. If this is legitimate background location tracking (navigation, fitness), suppress this rule via .preflightrc.json: "disabledRules": ["geofencing-foreground-service"].',
+            message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (sensitive-permissions policy announced April 15, 2026); enforcement for apps targeting Android 17 (API 37+) begins October 28, 2026.`,
+            suggestion: 'If this service performs geofencing, migrate to the Geofencing API (LocationServices.getGeofencingClient) or WorkManager/AlarmManager. If this is legitimate background location tracking (navigation, fitness), suppress this rule via .preflightrc.json: "disabledRules": ["geofencing-foreground-service"].',
             policyUrl: "https://support.google.com/googleplay/android-developer/answer/16926792"
           });
         }
@@ -5812,14 +5803,28 @@ var permissionsScanner = {
     ].filter((p) => manifest.permissions.includes(p) && !allowed.has(p));
     if (contactsPerms.length > 0) {
       const names = contactsPerms.map((p) => p.split(".").pop()).join(", ");
+      const enforced = manifest.targetSdk >= 37 ? ` Your app targets API ${manifest.targetSdk}, so this is enforced.` : "";
       findings.push({
         scanner: "permissions",
         ruleId: "contacts-permission-broad",
         severity: "warning",
         title: "Broad contacts access requires migration to Contact Picker",
-        message: `Your app declares ${names}. Google Play now requires the Android Contact Picker instead of broad contacts access. Compliance deadline: May 15, 2026.`,
-        suggestion: "Migrate to the Android Contact Picker API for user-initiated contact selection. Remove READ_CONTACTS/WRITE_CONTACTS unless your app is a dialer, messaging, or contacts management app.",
-        policyUrl: "https://support.google.com/googleplay/android-developer/answer/16926792"
+        message: `Your app declares ${names}. Google Play's Contacts Permissions policy requires the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) unless broad access is core to your app. Mandatory for apps targeting Android 17 (API 37+) on October 28, 2026.${enforced}`,
+        suggestion: "Migrate to the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) for user-initiated contact selection, or file a Permissions Declaration Form before October 28, 2026 if the picker cannot serve your core functionality. Remove READ_CONTACTS/WRITE_CONTACTS unless your app is a dialer, messaging, or contacts management app.",
+        policyUrl: "https://support.google.com/googleplay/android-developer/answer/16935362"
+      });
+    }
+    const fineLocation = "android.permission.ACCESS_FINE_LOCATION";
+    if (manifest.permissions.includes(fineLocation) && !allowed.has(fineLocation)) {
+      const targetsApi37 = manifest.targetSdk >= 37;
+      findings.push({
+        scanner: "permissions",
+        ruleId: "location-minimal-scope",
+        severity: targetsApi37 ? "warning" : "info",
+        title: "Precise location \u2014 consider the location button (minimum scope)",
+        message: `Your app declares ACCESS_FINE_LOCATION. Google Play's Location Permissions policy makes the Android location button the recommended minimum scope for transactional (one-time) precise location. Mandatory for apps targeting Android 17 (API 37+) on October 28, 2026.${targetsApi37 ? ` Your app targets API ${manifest.targetSdk}.` : ""}`,
+        suggestion: 'For one-time/transactional precise location, use the system location button instead of requesting ACCESS_FINE_LOCATION up front. Only keep continuous fine location if navigation, fitness, or a similar feature is core functionality. Suppress via .preflightrc.json "disabledRules": ["location-minimal-scope"] if fine location is essential.',
+        policyUrl: "https://support.google.com/googleplay/android-developer/answer/17033915"
       });
     }
     const broadHealthPerm = "android.permission.health.READ_ALL_HEALTH_DATA";