build: vendor pinned hardened flutter_vless runtime #10

Merged
Naveax merged 1 commits from pr/vendor-flutter-vless-runtime into main 2026-09-06 11:23:49 +03:00
Naveax commented 2026-09-03 23:29:15 +03:00 (Migrated from github.com)

Summary

Replace build-time mutation of the Flutter pub cache with a repository-owned pinned Android runtime.

The vendored package is based on flutter_vless_android 1.1.5 with ReVolt's native runtime hardening pre-applied, so the source reviewed in Git is the source that is compiled.

Changes

  • Vendor flutter_vless_android 1.1.5
  • Record upstream provenance
  • Carry the native runtime hardening directly in reviewed source
  • Add a local dependency override
  • Update only the flutter_vless_android lock entry to the local path
  • Remove runtime patch scripts
  • Remove Gradle tasks that mutate the global Flutter pub cache

This makes the Android runtime deterministic and removes build-time pub-cache patching.

## Summary Replace build-time mutation of the Flutter pub cache with a repository-owned pinned Android runtime. The vendored package is based on `flutter_vless_android` 1.1.5 with ReVolt's native runtime hardening pre-applied, so the source reviewed in Git is the source that is compiled. ## Changes - Vendor flutter_vless_android 1.1.5 - Record upstream provenance - Carry the native runtime hardening directly in reviewed source - Add a local dependency override - Update only the flutter_vless_android lock entry to the local path - Remove runtime patch scripts - Remove Gradle tasks that mutate the global Flutter pub cache This makes the Android runtime deterministic and removes build-time pub-cache patching.
Sign in to join this conversation.