2127 Commits

Author SHA1 Message Date
dependabot[bot]
cb6bb93218
build(deps): bump gradle/actions from 3.0.0 to 3.1.0 (#3522)
Bumps [gradle/actions](https://github.com/gradle/actions) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/v3.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-19 06:33:56 -05:00
Connor Tumbleson
d892f3daf9
fix: remove validation on start/end tag matching (#3513) 2024-02-13 06:03:31 -05:00
dependabot[bot]
93e100e0fc
build(deps): bump gradle/wrapper-validation-action from 2.0.0 to 2.1.1 (#3515)
Bumps [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) from 2.0.0 to 2.1.1.
- [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
- [Commits](https://github.com/gradle/wrapper-validation-action/compare/v2.0.0...v2.1.1)

---
updated-dependencies:
- dependency-name: gradle/wrapper-validation-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-12 06:09:47 -05:00
dependabot[bot]
420eaf719e
build(deps): bump gradle/gradle-build-action from 2.12.0 to 3.0.0 (#3511)
Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.12.0 to 3.0.0.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.12.0...v3.0.0)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-05 19:03:18 -05:00
dependabot[bot]
b5c44028de
build(deps): bump gradle/wrapper-validation-action from 1.1.0 to 2.0.0 (#3510)
Bumps [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) from 1.1.0 to 2.0.0.
- [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
- [Commits](https://github.com/gradle/wrapper-validation-action/compare/v1.1.0...v2.0.0)

---
updated-dependencies:
- dependency-name: gradle/wrapper-validation-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-05 06:15:18 -05:00
dependabot[bot]
9dee7cffd2
build(deps): bump com.guardsquare:proguard-gradle from 7.4.1 to 7.4.2 (#3509)
Bumps [com.guardsquare:proguard-gradle](https://github.com/Guardsquare/proguard) from 7.4.1 to 7.4.2.
- [Release notes](https://github.com/Guardsquare/proguard/releases)
- [Commits](https://github.com/Guardsquare/proguard/compare/v7.4.1...v7.4.2)

---
updated-dependencies:
- dependency-name: com.guardsquare:proguard-gradle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-05 06:09:47 -05:00
Matvei
69e54cc952
chore: minor clarity improvement in README.md (#3501) 2024-01-30 11:14:19 -05:00
dependabot[bot]
ecd1b24431
build(deps): bump gradle/gradle-build-action from 2.11.1 to 2.12.0 (#3500)
Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.11.1...v2.12.0)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 06:42:43 -05:00
Connor Tumbleson
fc8498b1d4 test: run path traversal test on Windows 2024-01-18 21:35:00 -05:00
Connor Tumbleson
ea391dcd79 fix: tighten up detectPossibleDirectoryTraversal for Windows 2024-01-18 21:35:00 -05:00
Connor Tumbleson
0a9ec3427b
chore: correct warnings from Qodana scan (#3491) 2024-01-15 07:26:53 -05:00
Connor Tumbleson
69914eb596
refactor: inline runnable on smali disassemble (#3490) 2024-01-14 11:10:10 -05:00
Connor Tumbleson
e08ba75776
build: start new dev cycle (2.10.0-SNAPSHOT) 2024-01-05 07:21:23 -05:00
Connor Tumbleson
6ab728d3eb
Merge branch 'release-2.9.2' 2024-01-05 06:37:52 -05:00
Connor Tumbleson
841db5061a
build: version bump (2.9.2) 2024-01-05 06:29:04 -05:00
Connor Tumbleson
f56de45f38
build: start new dev cycle (2.9.2-SNAPSHOT) 2024-01-05 06:28:51 -05:00
Connor Tumbleson
93e7d6bdbf
Prevent arbitrary file writes with malicious resource names. (#3484)
* refactor: rename sanitize function

* fix: expose getDir

* fix: safe handling of untrusted resource names

 - fixes: GHSA-2hqv-2xv4-5h5w

* test: sample file for GHSA-2hqv-2xv4-5h5w

* refactor: avoid detection of absolute files for resource check

* chore: enable info mode on gradle

* test: skip test on windows

* chore: debug windows handling

* fix: normalize entry with file separators

* fix: normalize filepath after cleansing

* chore: Android paths are not OS specific

* refactor: use java.nio for path traversal checking

* chore: align path separator on Windows for Zip files

* chore: rework towards basic directory traversal

* chore: remove '--info' on build.yml
2024-01-05 06:28:07 -05:00
Connor Tumbleson
d348c43b24
Prevent arbitrary file writes with malicious resource names. (#3484)
* refactor: rename sanitize function

* fix: expose getDir

* fix: safe handling of untrusted resource names

 - fixes: GHSA-2hqv-2xv4-5h5w

* test: sample file for GHSA-2hqv-2xv4-5h5w

* refactor: avoid detection of absolute files for resource check

* chore: enable info mode on gradle

* test: skip test on windows

* chore: debug windows handling

* fix: normalize entry with file separators

* fix: normalize filepath after cleansing

* chore: Android paths are not OS specific

* refactor: use java.nio for path traversal checking

* chore: align path separator on Windows for Zip files

* chore: rework towards basic directory traversal

* chore: remove '--info' on build.yml
2024-01-02 06:11:03 -05:00
dependabot[bot]
e5c88ece1b
build(deps): bump gradle/gradle-build-action from 2.11.0 to 2.11.1 (#3479)
Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.11.0...v2.11.1)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-26 07:23:15 -05:00
Connor Tumbleson
85f8de87d2
fix: deprecated is lowercase (#3481) 2023-12-26 07:22:45 -05:00
Connor Tumbleson
e56cb4f743
Support for configuring job count. (#3480)
* feat: make jobs configurable

* chore: remove unused method
2023-12-26 07:11:16 -05:00
Cregrant
81aae6936a
Feature: Parallel Building (#3476)
* perf: process smali code in parallel

Note: backsmali can't be properly multithreaded because of the synchronized methods inside

* perf: start backsmali concurrently with a resources decompiler

* perf: speed up apk building by skipping temp archive creation

Now we're not compressing the same data twice

* refactor: extract duplicated code

* refactor: rename methods and inline some comments
2023-12-26 06:20:26 -05:00
dependabot[bot]
0741664808
build(deps): bump github/codeql-action from 2 to 3 (#3471)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 06:33:04 -05:00
dependabot[bot]
c916f51252
build(deps): bump gradle/gradle-build-action from 2.10.0 to 2.11.0 (#3470)
Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.10.0...v2.11.0)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 06:14:45 -05:00
Connor Tumbleson
a9eacf657c
test: assert miui aapt1 patch exists (#3462) 2023-12-08 07:29:28 -05:00
ArjunaKumarMohanta
69dbb335e3
feat: Upgrade gradle to v8.5 (#3459) 2023-12-08 06:05:28 -05:00
Connor Tumbleson
cd9f72938e
docs: update INTERNAL.md with version change guide 2023-12-06 07:05:10 -05:00
Connor Tumbleson
1c3cd41565
build: start new dev cycle (2.9.2-SNAPSHOT) 2023-12-06 06:46:56 -05:00
Connor Tumbleson
077b2009da
build: version bump (2.9.1) 2023-12-05 18:26:28 -05:00
dependabot[bot]
98b34fdd03
build(deps): bump actions/setup-java from 3 to 4 (#3454)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 06:08:40 -05:00
dependabot[bot]
aa3bd84ceb
build(deps): bump commons-io:commons-io from 2.15.0 to 2.15.1 (#3453)
Bumps commons-io:commons-io from 2.15.0 to 2.15.1.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 06:07:01 -05:00
Connor Tumbleson
a375717ade
fix: support alignment towards resTable_entry start (#3452) 2023-12-04 05:58:27 -05:00
dependabot[bot]
bea15e6f12
build(deps): bump gradle/gradle-build-action from 2.9.0 to 2.10.0 (#3445)
Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.9.0 to 2.10.0.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.9.0...v2.10.0)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 06:17:49 -05:00
dependabot[bot]
2911342f39
build(deps): bump com.guardsquare:proguard-gradle from 7.4.0 to 7.4.1 (#3444)
Bumps [com.guardsquare:proguard-gradle](https://github.com/Guardsquare/proguard) from 7.4.0 to 7.4.1.
- [Release notes](https://github.com/Guardsquare/proguard/releases)
- [Commits](https://github.com/Guardsquare/proguard/compare/v7.4...v7.4.1)

---
updated-dependencies:
- dependency-name: com.guardsquare:proguard-gradle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 06:13:39 -05:00
dependabot[bot]
7047172d5e
build(deps): bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 (#3443)
Bumps org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 06:02:29 -05:00
Connor Tumbleson
72d0bc164d
#3427 - Treat manifest warnings as warnings (#3429)
* feat: treat warnings as warnings during aapt2 build

* test: add invalid fragment to manifest to confirm warning
2023-11-16 06:45:38 -05:00
Connor Tumbleson
bf1041e4fb
test: add test case for android:isAccessibilityTool (#3426)
* test: add test case for android:isAccessibilityTool

* test: augment tests for accessibility service extension
2023-11-16 05:58:38 -05:00
Connor Tumbleson
4441648192
build: remove docker (#3423) 2023-11-08 06:44:46 -05:00
Connor Tumbleson
9e9079d30f
build: patch aapt2 to ignore private resources (unix/win) (#3396)
* build: patch aapt2 to ignore private resources (unix/win)

* build: patch aapt2 private resources (mac)
2023-11-08 06:30:13 -05:00
Connor Tumbleson
eec0288e69
Adapt null resource to be treated as reference instead of empty string. (#3417)
* fix: handle null resolved items as references

* test: add color null test for aapt2
2023-11-03 06:40:32 -04:00
dependabot[bot]
63b1976448
build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 (#3414)
Bumps org.apache.commons:commons-text from 1.10.0 to 1.11.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-text
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 20:28:50 -04:00
dependabot[bot]
750fdf37ca
build(deps): bump commons-cli:commons-cli from 1.5.0 to 1.6.0 (#3413)
Bumps commons-cli:commons-cli from 1.5.0 to 1.6.0.

---
updated-dependencies:
- dependency-name: commons-cli:commons-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 20:16:25 -04:00
dependabot[bot]
b3453bdf9c
build(deps): bump commons-io:commons-io from 2.14.0 to 2.15.0 (#3412)
Bumps commons-io:commons-io from 2.14.0 to 2.15.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 20:05:35 -04:00
Andrew Szeto
01c949a8ff
Update Docker build instructions after #3363 (#3407) 2023-10-21 08:57:57 -04:00
Connor Tumbleson
247735c434
feat: de-dupe attribute names during styles writing (#3404) 2023-10-16 07:15:34 -04:00
Connor Tumbleson
03fa70bd2a
build: docker fixes (#3378)
* build: shorten tags on docker push

* build: only deploy on commits to master
2023-10-16 06:58:05 -04:00
Connor Tumbleson
34a6970852
build: test on lts versions (including 21) (#3381)
* build: test on lts versions

* build: upgrade to proguard 7.4.0
2023-10-14 06:52:52 -04:00
Josh Miers
e2a5742b18
use apiLevel instead of forceApi when building the apk (#3399) 2023-10-11 19:44:00 -04:00
Connor Tumbleson
199780103c
refactor: support current position during chunk verbose output (#3395) 2023-10-10 21:23:05 -04:00
dependabot[bot]
29b8430b00
build(deps): bump docker/setup-buildx-action from 2 to 3 (#3386)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 06:22:37 -04:00