I was expecting the com.android.vending.BILLING permission to be removed from my bundle’s AndroidManifest.xml, but I’m still seeing it. I’ve double checked the AndroidManifest.xml in all of the extensions I’m using, and do not see that permission anywhere.
https://github.com/defold/extension-iap does add the com.android.vending.BILLING permission. I don’t know how gradle works but maybe it is automatically added based on the implementation 'com.android.billingclient:billing:3.0.0'?
I wouldn’t expect it to do that, since Google says the BILLING permission has been deprecated for a while and isn’t required when you use the newer Billing libraries.
Rename it to .zip and unzip. Open the included AndroidManifest.xml stub and you’ll see that it includes <uses-permission android:name="com.android.vending.BILLING" />.
The manifest stub will get merged with your main manifest file when bundling.