[tbb-bugs] #33932 [Applications/Tor Browser]: Improve steps for creating gradle dependencies lists for projects

[Tor Bug Tracker & Wiki]

#33932: Improve steps for creating gradle dependencies lists for projects
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  gk
         Type:  enhancement          |     Status:  assigned
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-rbm,
     Severity:  Normal               |  TorBrowserTeam202004,
                                     |  GeorgKoppen202004
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 The steps we have for creating lists of gradle dependencies are still not
 bullet proof. I stumbled across a case where a download got attempted but
 then a redirect happened which included a different URL and which finally
 failed. Our current instructions don't cope with that case (and probably
 other corner cases neither).

 I've thinking about that and feel we can do better if we mimmick gradle's
 behavior more:

 1) We keep the first step we currently have (extracting all the attempted
 downloads)
 2) We actually try to download all those resources ourselves and compute
 their sha256 sum.
 3) Download failures are easily removable (no sha256 sum is created in
 that case) and we just remove the successful duplicates.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33932>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online