v2.5.4 - Android Trust and Container Permissions

Breaking Changes

Docker deployments must define PUID and PGID. Startup now prepares writable mounts before switching to the requested identity.

Summary

This release restores automatic HTTPS certificate discovery on Android and improves Docker bind-mount reliability.

Changed

Docker containers initialize configuration, session, and download paths using the requested numeric identity. Explicit root identities remain available with a warning.

Fixed

Android builds now honor SSL_CERT_FILE and SSL_CERT_DIR, then load the Termux CA bundle from $PREFIX/etc/tls/cert.pem.

TLS failures now report certificate verification details instead of a generic protocol error.

Docker bind mounts no longer fail when host directories initially belong to root.

Downloads

Release assets cover Linux x86_64 and ARM64, macOS Apple Silicon and Intel, Windows x86_64 and ARM64, Android ARM64, and SHA-256 checksums.