-
Notifications
You must be signed in to change notification settings - Fork 15
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Capacitor v5 upgrade, ionic v7 upgrade #3567
Changes from all commits
c3bac68
0d905b8
77fe894
10dcb00
075cf2e
dd33983
1ab244f
19670d5
949f8ef
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -17,5 +17,8 @@ | |
"accessOrigins": [ | ||
"https://app.fylehq.com" | ||
] | ||
}, | ||
"server": { | ||
"androidScheme": "http" | ||
} | ||
Comment on lines
+20
to
23
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 💡 Verification agent 🧩 Analysis chainHTTP scheme can be security villain! Be careful! Using "androidScheme": "http" is like fighting without weapons! In production, this could expose user data! HTTP is not secure like HTTPS. If this is for development only, no problem. But for production release, you should use HTTPS like how I use my signature moves - with full power and security! 🌐 Web query:
💡 Result: In 2024, HTTP is not considered secure for mobile applications due to its lack of encryption and vulnerability to data interception. Modern security standards and best practices mandate the use of HTTPS (HTTP Secure) with TLS/SSL encryption for all mobile app communications. Here's why: Key Risks of Using HTTP
Best Practices for Secure Communication
Consequences of Ignoring HTTPS
In summary, HTTP is obsolete for modern mobile app security. Developers must adopt HTTPS with robust encryption, certificate validation, and advanced safeguards like pinning to mitigate risks and comply with evolving standards[4][5][10]. Citations:
Attention: Secure Your App Like a True Superstar! Hey my friend, just like my signature moves prevent any enemy from coming close, using HTTP in your configuration exposes your app to vulnerabilities. The web experts confirm that in 2024, HTTP is not secure for mobile communications—it’s like going into battle without your armor!
Please update accordingly, boss. |
||
} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,6 @@ | ||
#Sat Apr 23 20:33:12 IST 2022 | ||
distributionBase=GRADLE_USER_HOME | ||
distributionUrl=https\://services.gradle.org/distributions/gradle-7.4.2-all.zip | ||
distributionUrl=https\://services.gradle.org/distributions/gradle-8.0.2-all.zip | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧹 Nitpick (assertive) Gradle upgrade is a powerful leap forward, mind it! The upgrade from Gradle 7.4.2 to 8.0.2 is like a hero's grand entrance! This change is necessary for Capacitor v5 compatibility, but remember: with great power comes great responsibility. This upgrade might introduce breaking changes in build scripts and plugins, so test thoroughly! #!/bin/bash
# Check if any plugins or dependencies have compatibility issues with Gradle 8.0.2
# Look for deprecation warnings in build logs
./gradlew build --warning-mode=all | grep -i "deprecated"
# Check Android Gradle plugin compatibility
grep -r "com.android.tools.build:gradle" --include="*.gradle" . |
||
distributionPath=wrapper/dists | ||
zipStorePath=wrapper/dists | ||
zipStoreBase=GRADLE_USER_HOME |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -20,6 +20,9 @@ const config: CapacitorConfig = { | |
//It doesn't matter what value is added to access origin - https://capacitorjs.com/docs/v2/cordova/using-cordova-plugins#:~:text=Capacitor%20does%20not%20support%20Cordova,things%20like%20hooks%20are%20unnecessary | ||
accessOrigins: ['https://app.fylehq.com'], | ||
}, | ||
server: { | ||
androidScheme: 'http', | ||
}, | ||
Comment on lines
+23
to
+25
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧹 Nitpick (assertive) 💡 Verification agent 🧩 Analysis chainSetting androidScheme to 'http' is like opening a door - mind who you let in! This configuration allows HTTP connections on Android, which is sometimes necessary for development or certain API connections. However, this is like removing security from a bank vault! In production builds, you should prefer 'https' for security unless you have specific reasons. If you're accessing non-secure endpoints, consider:
Remember, in my world, "The safety of my users is my first priority!" 🏁 Script executed: #!/bin/bash
# Check if network security is properly configured
echo "Checking for Network Security Configuration..."
if [ -f "android/app/src/main/res/xml/network_security_config.xml" ]; then
echo "Network Security Config found. Examining contents:"
cat android/app/src/main/res/xml/network_security_config.xml
else
echo "Warning: No network_security_config.xml found. This might be necessary when using http scheme."
echo "Consider adding one to safely define which domains can use non-secure connections."
fi Length of output: 546 Secure Your Android Connection, Boss! The current configuration uses: server: {
androidScheme: 'http',
}, While this might be acceptable during development, using HTTP in production is as risky as leaving your vault wide open! Our security check revealed that there's no Please consider these actions:
As I always say, "The safety of my users is my first priority!" Let's secure this door before it swings open to any mischief. |
||
}; | ||
|
||
export default config; |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -5,7 +5,7 @@ | |
App/build | ||
App/Pods | ||
App/App/public | ||
App/Podfile.lock | ||
App/output | ||
DerivedData | ||
xcuserdata | ||
|
||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,116 +1,20 @@ | ||
{ | ||
"images" : [ | ||
{ | ||
"size" : "20x20", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "20x20", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "3x" | ||
}, | ||
{ | ||
"size" : "29x29", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "29x29", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "3x" | ||
}, | ||
{ | ||
"size" : "40x40", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "40x40", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "3x" | ||
}, | ||
{ | ||
"size" : "60x60", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "60x60", | ||
"idiom" : "iphone", | ||
"filename" : "[email protected]", | ||
"scale" : "3x" | ||
}, | ||
{ | ||
"size" : "20x20", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
}, | ||
{ | ||
"size" : "20x20", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "29x29", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
}, | ||
{ | ||
"size" : "29x29", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "40x40", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
}, | ||
{ | ||
"size" : "40x40", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "76x76", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
}, | ||
{ | ||
"size" : "76x76", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "83.5x83.5", | ||
"idiom" : "ipad", | ||
"filename" : "[email protected]", | ||
"scale" : "2x" | ||
}, | ||
{ | ||
"size" : "1024x1024", | ||
"idiom" : "ios-marketing", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
"images" : [ | ||
{ | ||
"filename" : "[email protected]", | ||
"idiom" : "universal", | ||
"platform" : "ios", | ||
"size" : "1024x1024" | ||
}, | ||
{ | ||
"size" : "1024x1024", | ||
"idiom" : "ios-marketing", | ||
"filename" : "[email protected]", | ||
"scale" : "1x" | ||
} | ||
], | ||
"info" : { | ||
"author" : "xcode", | ||
"version" : 1 | ||
} | ||
], | ||
"info" : { | ||
"version" : 1, | ||
"author" : "xcode" | ||
} | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧹 Nitpick (assertive)
❓ Verification inconclusive
Java version upgraded to VERSION_17 with heroic flair!
Moving from Java 11 to Java 17 is like my entry in a blockbuster movie! Make sure your development environment is ready for this power-packed version. When Java 17 walks in, the bugs walk out!
Also verify your CI/CD pipeline is using JDK 17 for building the Android application. What's the use of power if the system can't handle it?
🏁 Script executed:
Length of output: 241
Attention, Brother! Ensure CI/CD Power-Up with JDK 17!
Your upgrade to JavaVersion.VERSION_17 in the gradle build is as stylish as a Rajinikanth entry—pure magic! However, our search through the GitHub Actions workflows didn’t reveal an explicit configuration setting for the JDK, and that's something to watch out for. Please manually verify that your CI/CD pipeline (for example, using actions/setup-java) is indeed configured to use JDK 17. If not explicitly set, the system might not bring the same blockbuster performance when Java 17 takes the stage.
.github/workflows
directory.actions/setup-java
(or an equivalent approach) specifiesjava-version: '17'
.Keep the power alive wherever you build; when Java 17 walks in, the bugs better walk out!