Thatโs huge actually. OS vendors patched this very fast, but if you canโt rely on that on some platforms - I think itโs a good cause to rethink this pinning process.
Flutter 3.47.8 (stable) & 3.50.0-0.2.pre (beta) are now live.
This critical release addresses the eMudhra CA key compromise. If you target Android, Windows, or Linux, run flutter upgrade and rebuild your apps to protect users from potential TLS spoofing. https://t.co/vU35F0lP1H
Big milestone for me โ completely cacheable Flutter (android) build ๐
Some funny numbers:
โ 72 commits (doesn't mean much, but still)
โ 32 branches. More or less meaningful number since each branch is an increment / feature in some sense. I keep branches for history now.
โ A bit more than 2 months since first commit. Longer than expected (as usual).
โ 8 out of 10 random flutter apps from https://t.co/MjtM9ZpWLe are buildable and then runnable. Latter is important, because there're many caveats in packaging and many options for how your android-part in Flutter can be built. Assembled APK does not mean it will work on device. It was a surprise for me actually, and maybe worth a blogpost later.
Anyway, great journey, tons of useful insights, couple drafts of issues to Flutter. Still a lot to do in just android build, not to mention other platforms.
And too bad that many dependencies rely on that feature (looking at you, firebase).
Managed to mitigate this by providing a reasonable defaults, but still, without AGP your most reliable option is to provide needed values by hand. No way to overcome this completely .
Hot take: BuildConfig in AGP is a leaky abstraction.
The moment your production code depends on it, your source code knows about your build system.
Switch Gradle/AGP for Bazel, Buck, etc.? Now you either rewrite the code or emulate BuildConfig.
Build configuration just became an API. #AndroidDev #Gradle
@radbackwards I think itโs just math: they see they loosing some slice of audience, speed has this exact slice. They know they wonโt loose you by such move
Hot take: BuildConfig in AGP is a leaky abstraction.
The moment your production code depends on it, your source code knows about your build system.
Switch Gradle/AGP for Bazel, Buck, etc.? Now you either rewrite the code or emulate BuildConfig.
Build configuration just became an API. #AndroidDev #Gradle
Has anyone ever actually challenged a decision made by Claude Code or Codex while coding?
Like, the AI suggests a way to do something and you just go:
โNo, I think thereโs a better way.โ
Curious how often people actually push back on their AI coding tools.