0.1.1 (Android versionCode 25)
Android release, built from d5b77e9. Fixes the vc24 config regression.
What vc25 fixes
vc24 shipped from a CI artifact built with placeholder config, so Google Drive .cbark backup and push registration were dead in production. vc25 is built locally with the real .env + secrets.ts, so both are baked in. Also includes the withdraw-fee crash fix, Coinos swap PENDING handling, wallet-list dedup, iOS tooltip fallback, and the selection-outline fix.
Reproducibility
- Unsigned AAB SHA-256:
b9499be0df62485fb63a33569740549039e17f5721b47d222bcc136c4a4a229c - Built in the pinned
Dockerfile.buildcontainer from verified public source. - Cross-checked against an independent CI build of the same commit (run 28692300353, unsigned SHA
437f2a77…): byte-identical across all 1,454 entries except the 2 config values (relay key in the JS bundle, client ID inclasses2.dex+resources.pb) and the AGP-regeneratedbaseline.prof. Every difference is attributable to config; nothing else changed.
Direct-install APK
app-release.apk (universal, SHA-256 a6e5569a45dd1d0cc9452314ad4abb1de21c1d57ab97dbe4d0b1462b37c56286) is a sideloadable build derived from the verified AAB via pinned bundletool 1.18.3.
- arm64-v8a only (matches the reproducible AAB; covers modern devices, not 32-bit armeabi-v7a).
- Signed with the upload key, not the Play signing key — a separate signature lineage from the Play build, so it's for fresh installs, not updating over a Play install.