CBAS v2.2.7
CBAS v2.2.7 — In-App Auto-Update + Security Hardening
The app now checks for updates automatically (once per day) and can download and install new versions itself. A manual "Check for Updates" button is available on the About screen.
What's new
- Automatic update check on app startup (24-hour interval)
- Update dialog with release notes and download progress
- SHA-256 verification of every downloaded update before install
- Support for optional, recommended, and required (blocking) updates
- Manual update check from the About screen
- Security: auth token moved to encrypted (Keystore-backed) storage
- Security: APK downloads restricted to trusted HTTPS sources
- Security: removed unused background-location permission
- Fixed: "mark all notifications read" now works (endpoint mismatch)
IMPORTANT — installing over v2.2.6 or older
This release is signed with a new (proper) release key. Android will refuse to install it over older debug-signed versions. Sync all pending alerts first, then uninstall the old app, then install this APK. This is a one-time step; from v2.2.7 onward updates install in-app automatically.
SHA-256: 371ff51f83feb1edb3d5ecfdd547c7d0bc768a1133a155a5531e8fb0f14e7dc8