p4a ref 1098be6964cfc2156959e435e81c2c50f8398586
What the developer wrote
Authored by Sander van Grieken
p4a ref 1098be6964cfc2156959e435e81c2c50f8398586
What changed, and why it matters
This commit simply updates a reference to a specific version (commit hash) of the python-for-android build tool used to create Electrum's Android app. There is no indication in the commit itself that this is a security fix, vulnerability, or malicious change. It is a routine dependency/build-tool pointer update.
No security action required. If reviewing for supply-chain assurance, verify the referenced python-for-android commit 1098be6964cfc2156959e435e81c2c50f8398586 on the spesmilo/python-for-android repository for any relevant changes, but this commit itself is not a security patch.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one line in contrib/android/Dockerfile, updating the P4A_CHECKOUT_COMMIT environment variable from 43dfdfaec0865fbd9c7d4f57457323601c4afae1 to 1098be6964cfc2156959e435e81c2c50f8398586. This controls which commit of the spesmilo/python-for-android repository is checked out during the Android build process. No code logic, permissions, or security-sensitive behavior is modified in this repository by this change.
Changed components
contrib/android/DockerfileInspect captured patch +1 / −1
diff --git a/contrib/android/Dockerfile b/contrib/android/Dockerfile
index 6e43b83..7349341 100644
--- a/contrib/android/Dockerfile
+++ b/contrib/android/Dockerfile
@@ -235,7 +235,7 @@ RUN cd /opt \
&& /opt/venv/bin/python3 -m pip install --no-build-isolation --no-dependencies -e .
# install python-for-android
-ENV P4A_CHECKOUT_COMMIT="43dfdfaec0865fbd9c7d4f57457323601c4afae1"
+ENV P4A_CHECKOUT_COMMIT="1098be6964cfc2156959e435e81c2c50f8398586"
# ^ from branch electrum_202602 (note: careful with force-pushing! see #8162)
RUN cd /opt \
&& git clone https://github.com/spesmilo/python-for-android \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.