Birdo Android android-v1.4.28

Birdo VPN - Android sideload build

Build: android-v1.4.28
Commit: abee558ba77b0ce66de01b8925cab23c5c3dc1f6

Install

Download the .apk asset below on your Android device and tap it to install.
The .aab asset is the Play Console upload artifact.
You may need to enable Install unknown apps for your browser / file manager.

Verify (optional)

• Sigstore: cosign verify-blob --bundle <apk>.sigstore <apk>
• GPG: gpg --verify <apk>.asc <apk> (key: https://birdo.app/.well-known/birdo-release.asc)
• SHA256: sha256sum -c SHA256SUMS.txt

This is a draft release - not visible to the public until you click "Publish".

What's Changed

• fix(sentry): a release build can no longer ship an inert crash reporter (#357) by @1Birdo in #359
• ci: prove the SENTRY_DSN secret actually works by @1Birdo in #361
• feat(android): ship all four Android ABIs, each with a complete VPN engine set by @1Birdo in #360
• perf(r8): arm the native-integrity hashes, narrow four blanket keeps, and gate R8 on the PR by @1Birdo in #362
• build(agp9): AGP 9.4.0 / Gradle 9.7.1 / compileSdk 37, unblocking #340 and #324 by @1Birdo in #363
• ci(asc): create the App Store version record, which nothing has ever done by @1Birdo in #364
• fix(asc): after a rejection, rename the rejected version rather than creating a second by @1Birdo in #366
• perf(startup): generate a real baseline profile on a managed device (#358) by @1Birdo in #365
• feat(asc): dump the whole account on a dry run, so the dashboard can be checked against it by @1Birdo in #369
• chore(deps): bump the hilt group with 3 updates by @dependabot[bot] in #373
• chore(deps): bump io.sentry:sentry-android from 8.54.0 to 8.55.0 by @dependabot[bot] in #374
• feat(asc): audit subscriptions and per-version IAP attachments on a dry run by @1Birdo in #371
• fix(observability): report data-plane failures instead of logging them into R8 by @1Birdo in #370
• chore(cert-pins): re-vendor the SSOT — dns.google 2 pins -> 4 by @1Birdo in #376
• chore(deps): bump the androidx group across 1 directory with 2 updates by @dependabot[bot] in #372
• chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #375
• ci(actions): correct 15 lying pin comments, and add a guard so they cannot drift by @1Birdo in #377
• fix(cert-pins): dial only the hosts this repo actually pins by @1Birdo in #378
• fix(dns): make the fall-through to the system resolver observable by @1Birdo in #380
• Android lint and Kotlin compiler warnings to zero; shared module tested by @1Birdo in #381
• MainActivity: state the app-lock security model at the prompt by @1Birdo in #382
• Zero warnings in the CI build: rosenpass-jni dead variants, test JVM CDS, app DSL type by @1Birdo in #383
• Register triage: idempotent App Store uploads, one screenshot pipeline, docs that match the workflows by @1Birdo in #384
• G19: Keystore AES-GCM sealing replaces security-crypto, with in-place migration (device-test before merge) by @1Birdo in #385
• release: android-v1.4.28 (versionCode 10428) by @1Birdo in #386

Full Changelog: android-v1.4.27...android-v1.4.28