title: Overriding Gradle Remote Dependency's targetSdkVersion in Android Studio
body: <p>So today we did a release of an app and unfortunately we didn't notice a new permission had been added which is <code>android.permission.READ_PHONE_STATE</code>.</p>
  
  <p>A few users pointed out that a new permission category had been added to the app which was </p>
  
  <blockquote>
    <p>Device ID &amp; call information</p>
    
    <p>read phone status and identity</p>
  </blockquote>
  
  <p>After some looking into this I found that this is linked to the aforementioned permission however I don't have that in any of my manifests. After a search on my project, I found it was contained in the manifest-merger-release-report.txt.</p>
  
  <pre><code>android:uses-permission#android.permission.READ_PHONE_STATE
  IMPLIED from AndroidManifest.xml:6:1 reason: com.getpebble.android.kit has a targetSdkVersion &lt; 4
  </code></pre>
  
  <p>I don't want this permission to be requested of the user, especially if it's only because an external library hasn't got its targetSdkVersion set.</p>
  
  <p>I make this a dependency of my module using the following.</p>
  
  <pre><code>compile 'com.getpebble:pebblekit:2.6.0@aar'
  </code></pre>
  
  <p><strong>MY QUESTION</strong> </p>
  
  <p>How do I override the library's <code>targetSdkVersion</code> without access to it's <code>AndroidManifest.xml</code> file?</p>
  
  <p><strong>UPDATE</strong></p>
  
  <p>After looking at the library's source code on GitHub I can in fact see that it does have its <code>targetSdkVersion</code> and <code>minSdkVersion</code> set correctly so the prompt in the <code>manifest-merger-release-report.txt</code> is incorrect.</p>