JMR-dev 7a0cc3145c ci(gradle): pin Gradle distribution against published SHA-256 ...

The Gradle wrapper had no distributionSha256Sum, so the Gradle 9.6.0
distribution was the one unpinned download in CI (validateDistributionUrl
only checks the URL shape, not content). Pin it to Gradle's published
SHA-256 so the wrapper fails closed on any corrupt/tampered distribution,
matching the SHA-256 integrity pin cmdline-tools already gets (#389).

2026-07-08 12:05:00 -05:00

..

gradle-wrapper.jar

Scaffold LibreMail: Material You email app foundation

2026-06-26 00:17:59 -05:00

gradle-wrapper.properties

ci(gradle): pin Gradle distribution against published SHA-256

2026-07-08 12:05:00 -05:00