Remove `sentry-cli` from the repository about sentry-fastlane-plugin HOT 7 OPEN

We've agreed that downloading on the fly is actually an improvement since you don't bloat the repo and the user has to download only the needed binary, although, if it's working and it's not a source of complaints, we can prioritize more important issues, and this is eventually done when there are no more p1 for example.
cc @denrase @kahest @philipphofmann

from sentry-fastlane-plugin.

Maybe we could apply a similar approach as we do in getsentry/sentry-dart-plugin#49.

from sentry-fastlane-plugin.

The idea is to download when packaging. Downloading on the user's machine has the downside of slowing down the first build,. Requiring internet access on the build time as opposed to "restore deps" phase; and brings security concerns (unless we pin ssl cert, which isn't good to maintain).

So the trade off is to check in the Sha in the repo and in CI when packaging, download the binary and verify the checksum. The final artifact will bundle it.

from sentry-fastlane-plugin.

@bruno-garcia I could take over this issue if you don't have anyone else in mind already.

from sentry-fastlane-plugin.

Please take it @denrase.

from sentry-fastlane-plugin.

I agree with lowering the priority for this issue.

from sentry-fastlane-plugin.

This issue has gone three weeks without activity. In another week, I will close it.

But! If you comment or otherwise update it, I will reset the clock, and if you label it Status: Backlog or Status: In Progress, I will leave it alone ... forever!

"A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀

from sentry-fastlane-plugin.