Aurimas Liutikas
@liutikas.net
Software engineer working on AndroidX at Google. Gradle Fellow. He/him
www.liutikas.net/blog-posts/
https://www.liutikas.net/talks/
www.liutikas.net/blog-posts/
https://www.liutikas.net/talks/
To improve AndroidX release binary transparency we have made all of our release branches visible to the world.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
November 10, 2025 at 8:08 PM
To improve AndroidX release binary transparency we have made all of our release branches visible to the world.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
"my configuration time went down from ~1s per project to ~350ms per project."
@martinbonnin@bird.makeup was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
@martinbonnin@bird.makeup was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
Gradle debug recipes
Get insights into your Gradle build.
mbonnin.net
November 8, 2025 at 11:32 PM
"my configuration time went down from ~1s per project to ~350ms per project."
@martinbonnin@bird.makeup was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
@martinbonnin@bird.makeup was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
Reposted by Aurimas Liutikas
Sometimes you've got to celebrate the small wins.
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Google Issue Tracker
issuetracker.google.com
November 6, 2025 at 9:28 PM
Sometimes you've got to celebrate the small wins.
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Reposted by Aurimas Liutikas
The administration has pulled the plug on IRS Direct File, a tool that helped eligible taxpayers file for free. This decision comes despite Direct File’s immense popularity with its users.
Direct File won’t happen in 2026, IRS tells states
The free service that allowed taxpayers to file online directly with the IRS was used by hundreds of thousands of taxpayers in 2024 and 2025, who gave it high marks — although tax prep companies and R...
www.nextgov.com
November 6, 2025 at 6:04 PM
The administration has pulled the plug on IRS Direct File, a tool that helped eligible taxpayers file for free. This decision comes despite Direct File’s immense popularity with its users.
Reposted by Aurimas Liutikas
yup it's fully KMP/jpcompose and works great on Android and iOS!! But we're always interested in connecting with more KMP people to get help and tips.
November 6, 2025 at 12:39 AM
yup it's fully KMP/jpcompose and works great on Android and iOS!! But we're always interested in connecting with more KMP people to get help and tips.
A reason to upgrade to Gradle 9.2 if you are suffering from this issue.
Turns out this is fixed in Gradle 9.2 🎉
Kudos Anže Sodja for finding this issue. I'm now down to ~7s for ~20 projects, we're getting there!
github.com/gradle/gradle/pull/34836
Kudos Anže Sodja for finding this issue. I'm now down to ~7s for ~20 projects, we're getting there!
github.com/gradle/gradle/pull/34836
Don't OOM when many unrelated transforms are registered with no solution by jvandort · Pull Request #34836 · gradle/gradle
The artifact transform traversal algorithm short-circuits when it finds the shortest solution. However, if there is no solution, it will traverse the entire transform graph attempting to find a sol...
github.com
November 4, 2025 at 4:35 PM
A reason to upgrade to Gradle 9.2 if you are suffering from this issue.
If you are using Gradle and your per project configuration time (total configuration time / number of subprojects) is more than 100ms there is likely something suboptimal in your build set up.
#gradle
#gradle
November 1, 2025 at 12:58 PM
If you are using Gradle and your per project configuration time (total configuration time / number of subprojects) is more than 100ms there is likely something suboptimal in your build set up.
#gradle
#gradle
Reposted by Aurimas Liutikas
Some guy got in an argument with me about the impact of AI malware. He cited a MIT paper claiming "80% of ransomware attacks are AI powered". I glanced over it and burst out laughing, but couldn't be bothered to debunk it. My friend on the other hand, could. He roasted it so hard that MIT deleted it
Security Community Slams MIT-linked Report Claiming AI Power...
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
socket.dev
October 31, 2025 at 10:10 PM
Some guy got in an argument with me about the impact of AI malware. He cited a MIT paper claiming "80% of ransomware attacks are AI powered". I glanced over it and burst out laughing, but couldn't be bothered to debunk it. My friend on the other hand, could. He roasted it so hard that MIT deleted it
You might have seen CVE-2025-36852 that affects the use of Gradle remote build cache. I wrote a short post of when to use and when not to use remote cache
www.liutikas.net/2025/10/28/C...
#gradle
www.liutikas.net/2025/10/28/C...
#gradle
Cache, Cache, No Cache - When to use Gradle Build Cache?
In the light of CVE-2025-36852 I figured it would be a good time to discuss the use of Gradle Build Cache in various set-ups.
www.liutikas.net
October 28, 2025 at 12:23 PM
You might have seen CVE-2025-36852 that affects the use of Gradle remote build cache. I wrote a short post of when to use and when not to use remote cache
www.liutikas.net/2025/10/28/C...
#gradle
www.liutikas.net/2025/10/28/C...
#gradle
Reposted by Aurimas Liutikas
🚨 #dcldn25 kicks off Thursday! Don’t miss The Android Show live from London—Gemini in @AndroidStudio, fresh dev news & live #AskAndroid.
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
October 28, 2025 at 10:56 AM
🚨 #dcldn25 kicks off Thursday! Don’t miss The Android Show live from London—Gemini in @AndroidStudio, fresh dev news & live #AskAndroid.
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Reposted by Aurimas Liutikas
The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast'
10/10 response, no notes
10/10 response, no notes
October 24, 2025 at 8:27 AM
The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast'
10/10 response, no notes
10/10 response, no notes
Reposted by Aurimas Liutikas
Come see @hoford.bsky.social and I in London next week -- we have some cool stuff to show off :-)
#RemoteCompose: an #AndroidX framework to project rich, animated #UI from apps or servers onto remote surfaces.
#dcldn25
#RemoteCompose: an #AndroidX framework to project rich, animated #UI from apps or servers onto remote surfaces.
#dcldn25
October 22, 2025 at 9:44 PM
Come see @hoford.bsky.social and I in London next week -- we have some cool stuff to show off :-)
#RemoteCompose: an #AndroidX framework to project rich, animated #UI from apps or servers onto remote surfaces.
#dcldn25
#RemoteCompose: an #AndroidX framework to project rich, animated #UI from apps or servers onto remote surfaces.
#dcldn25
I really enjoyed this keynote as it applies even outside of software
Data isn’t static – it flows.
At KotlinConf25, @dianamontalion.com explained core design principles for resilient, maintainable systems, where data and knowledge are constantly in motion.
📺 Watch the full talk here: https://youtu.be/dcgwPpVT74g?si=wfAJHqi7TCx-7nXw
At KotlinConf25, @dianamontalion.com explained core design principles for resilient, maintainable systems, where data and knowledge are constantly in motion.
📺 Watch the full talk here: https://youtu.be/dcgwPpVT74g?si=wfAJHqi7TCx-7nXw
October 22, 2025 at 5:23 PM
I really enjoyed this keynote as it applies even outside of software
Cooking beautiful and highly accurate graphs for my @droidcon.bsky.social London presentation!
October 22, 2025 at 4:39 AM
Cooking beautiful and highly accurate graphs for my @droidcon.bsky.social London presentation!
Reposted by Aurimas Liutikas
my toxic engineer trait is that I'm basically allergic to code
all code is bad. the less code the better. why are you writing new code stahp *sprays devs with squirt bottle*
all code is bad. the less code the better. why are you writing new code stahp *sprays devs with squirt bottle*
October 19, 2025 at 9:55 PM
my toxic engineer trait is that I'm basically allergic to code
all code is bad. the less code the better. why are you writing new code stahp *sprays devs with squirt bottle*
all code is bad. the less code the better. why are you writing new code stahp *sprays devs with squirt bottle*
Despite the confusing name, this runs entirely offline and you don't need develocity license and a server instance to use it. Give it a spin if you want to get a sense where your build is slow.
Now you can profile your Gradle builds right alongside your apps in IntelliJ IDEA – with the new Develocity plugin from @gradle.com!
Learn more: gradle.com/blog/develoc...
Download it here: plugins.jetbrains.com/plugin/27471...
Learn more: gradle.com/blog/develoc...
Download it here: plugins.jetbrains.com/plugin/27471...
How to use the Develocity IntelliJ plugin to speed up Gradle builds with real-time insights
The new Develocity IntelliJ Plugin integrates powerful real-time analysis directly into IntelliJ IDEA and Android Studio for immediate troubleshooting
gradle.com
October 21, 2025 at 4:08 AM
Despite the confusing name, this runs entirely offline and you don't need develocity license and a server instance to use it. Give it a spin if you want to get a sense where your build is slow.
The recording for my talk from DPE Summit 2025 titled "Gradle: Your Build, Your Rules" is out!
Video: www.youtube.com/watch?v=uWx_...
Slides:
speakerdeck.com/aurimas/grad...
#gradle
Video: www.youtube.com/watch?v=uWx_...
Slides:
speakerdeck.com/aurimas/grad...
#gradle
Gradle: Your Build, Your Rules
YouTube video by Gradle
www.youtube.com
October 20, 2025 at 9:27 PM
The recording for my talk from DPE Summit 2025 titled "Gradle: Your Build, Your Rules" is out!
Video: www.youtube.com/watch?v=uWx_...
Slides:
speakerdeck.com/aurimas/grad...
#gradle
Video: www.youtube.com/watch?v=uWx_...
Slides:
speakerdeck.com/aurimas/grad...
#gradle
Awesome post from @f1xedgear.bsky.social and @autonomousapps.bsky.social about improving Gradle sync times in the IDE
engineering.block.xyz/blog/shrinki...
#gradle
engineering.block.xyz/blog/shrinki...
#gradle
Shrinking Elephants
Managing very large projects with Gradle and Intellij IDEA-based IDEs
engineering.block.xyz
October 15, 2025 at 10:30 PM
Awesome post from @f1xedgear.bsky.social and @autonomousapps.bsky.social about improving Gradle sync times in the IDE
engineering.block.xyz/blog/shrinki...
#gradle
engineering.block.xyz/blog/shrinki...
#gradle
A week ago I learned about largely undocumented GradlePluginApiVersion API. I wrote a post about it!
www.liutikas.net/2025/10/15/G...
#gradle
www.liutikas.net/2025/10/15/G...
#gradle
Gradle Version Checking - Finding an API hidden deep in the basement
Every Gradle Plugin has an implicit minimum version of Gradle that it supports. If you simply write a plugin, test it on the versions you care about, but you...
www.liutikas.net
October 15, 2025 at 9:55 PM
A week ago I learned about largely undocumented GradlePluginApiVersion API. I wrote a post about it!
www.liutikas.net/2025/10/15/G...
#gradle
www.liutikas.net/2025/10/15/G...
#gradle
Come hear me talk about keeping your large Gradle builds in order at @droidcon.bsky.social London!
October 15, 2025 at 2:26 PM
Come hear me talk about keeping your large Gradle builds in order at @droidcon.bsky.social London!
It boggled my mind to learn that Meta tracks per character (not line) attribution of AI vs human using their versioning system and tools. For them it is about % of useful (not space/new line/ect) characters written by AI. Not sure many companies can track things like that.
dpe.org/sessions/pav...
dpe.org/sessions/pav...
October 14, 2025 at 8:31 PM
It boggled my mind to learn that Meta tracks per character (not line) attribution of AI vs human using their versioning system and tools. For them it is about % of useful (not space/new line/ect) characters written by AI. Not sure many companies can track things like that.
dpe.org/sessions/pav...
dpe.org/sessions/pav...
Would you like to work on Compose at Google (Mountain View CA office)?
Apply here and let's work together www.google.com/about/career...
Apply here and let's work together www.google.com/about/career...
Senior Software Engineer, Jetpack Compose — Google Careers
www.google.com
October 10, 2025 at 5:02 PM
Would you like to work on Compose at Google (Mountain View CA office)?
Apply here and let's work together www.google.com/about/career...
Apply here and let's work together www.google.com/about/career...