question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

The 0.12.0 release on Google Play cannot be verified

See original GitHub issue

Again there is a tagging issue. The versionName is 0.12.0 yet there is no revision with that tag. Could you please make sure the versionName matches the tag? It would help to automate testing.

I tried with 0.12 and failed to verify the build. 638 files differ.

See my full review here.

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:7 (4 by maintainers)

github_iconTop GitHub Comments

2reactions
Giszmocommented, May 16, 2020

Thanks for the hint. Just looked into how to check for signature schemes …

$ apksigner verify --verbose --print-certs Unstoppable_0.12.0.apk | grep scheme
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Verified using v3 scheme (APK Signature Scheme v3): false
$ apksigner verify --verbose --print-certs Unstoppable_0.13.0.apk | grep scheme
Verified using v1 scheme (JAR signing): false
Verified using v2 scheme (APK Signature Scheme v2): true
Verified using v3 scheme (APK Signature Scheme v3): false

I’m slightly surprised the latest version is only signed using v2. v2 and v3 allow to include the lower versions in a safe way but if you guys reach all users with only v2, that’s probably fine then. Just got me confused.

Unstoppable is back in the top category. Thanks for caring about verifiability!

1reaction
abdrasulovcommented, May 3, 2020

Hi @Giszmo,

We released the new version 0.13.0. Could you please review this new version? Also we’ve changed our release process to have matching version and tag names.

As for the version 0.12.0, it turned out that the builder started to generate png images for the vector assets. And the pngs may differ depending on the environment setup.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Fix issues with your Play Protect certification status
Check your Play Protect certification status · Open the Google Play Store app Google Play . · At the top right, tap the...
Read more >
Google Play Store Release Issue - android - Stack Overflow
You're seeing that error message because your new APK has a lower version code than the previous APK. Newer APKs must always have...
Read more >
36998250 - Issue Tracker - Google
Try to delete builder-model-0.11.0.jar and keep just the 0.12.0 one. ... getOutputs()Ljava/util/Collection;: com.android.builder.model.AndroidArtifact.
Read more >
Rec Room - Play with friends! - Apps on Google Play
Rec Room is the place to build and play games together. Party up with friends from all around the world to chat, hang...
Read more >
Changelog - Cypress Documentation
Additionally in this release, enhancements were made to how Cypress manages ... Communication with the Cypress Dashboard will now verify CAs and reject...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found