[WIP/TESTING] mobile/deps: Bump rules_android -> 0.6.0

[phlax]

No description provided.

[repokitteh-read-only]

CC @envoyproxy/dependency-shepherds: Your approval is needed for changes made to (bazel/.*repos.*\.bzl)|(bazel/dependency_imports\.bzl)|(api/bazel/.*\.bzl)|(.*/requirements\.txt)|(.*\.patch).
envoyproxy/dependency-shepherds assignee is @RyanTheOptimist

🐱

Caused by: #37661 was opened by phlax.

see: more, trace.

[moderation]

Update dependency details

[moderation]

Seeing more /refs/tags/ creeping into the dependency URLs which makes sens as that is what GitHub uses on the page now. The links work without it though and are cleaner. Almost all the links omit the /refs/tags/. Wondering if we should standardardize?

As per dependency standards we should use the maintainer provided binary here

        urls = ["https://github.com/bazelbuild/rules_android/releases/download/v0.6.0/rules_android-v0.6.0.tar.gz"],
        sha256 = "af84b69ab3d16dd1a41056286e6511f147a94ccea995603e13e934c915c1631c",
        strip_prefix = "rules_android-0.6.0",

[phlax]

yeah - that works in this case so happy to update

in the general case refs/tags is preferable to direct archive downloads - although the latter is the only option where the upstream doesnt maintain regular releases and/or we want/need to pin to a particular commit

non-releasing upstream are a big pita - using hashes is very insecure because you have to actually check the commit is a real commit on the branch you are expecting - you can use those addresses with any commit in a fork branch without creating any pr or ever landing any commits on the target repos branches

[phlax]

seems this is not compatible with bazel 6

[github-actions]

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

[fredyw]

I'm afraid this won't work because of rules_kotlin still uses rules_android 0.1.1. There's an open PR to update rules_kotlin to a higher version (still not 0.6.0) of rules_android, but the PR looks stale.

[phlax]

ah - good to know - thanks

[github-actions]

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

[github-actions]

This pull request has been automatically closed because it has not had activity in the last 37 days. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!