Skip to content

23
Compare
Choose a tag to compare
@thestinger thestinger released this 28 Apr 18:09
· 86 commits to main since this release
23
This tag was signed with the committer’s verified signature.
thestinger Daniel Micay
SSH Key Fingerprint: AhgHif0mei+9aNyKLfMZBh2yptHdw/aN7Tlh/j2eFwM Learn about vigilant mode.
231f9b0

Notable changes in version 23:

  • request package update ownership by default (our mirrors of Play services and Play Store for sandboxed Google Play have been excluded in our app repository's metadata)
  • drop removed packages from the user interface after repository update rather than on next app restart
  • add a way to mark a dependency being missing as ignored
  • add caching for system feature checks
  • add support for static dependencies on the device model
  • verify shared library declaration during package installation to prevent a compromise of the repository signing key and server from being able to install new packages by adding them as dependencies of other apps
  • use MATCH_ANY_USER flag for getSharedLibraries() when allowed to in order to detect already completed shared library updates on GrapheneOS to avoid conflicts when updating Vanadium browser in one profile and then Vanadium WebView in another profile or vice versa
  • fix search bar chips padding
  • dismiss keyboard when searching
  • raise TLS key pinning expiry date
  • update Gradle to 8.7
  • update Android Gradle plugin to 8.3.2
  • update Kotlin Symbol Processing to 1.0.20
  • update AndroidX Activity KTX library to 1.9.0
  • update AndroidX Core KTX library to 1.13.0
  • update Bouncy Castle library to 1.78.1
  • work around potentially buggy Android APIs
  • improve code style, robustness and comments

A full list of changes from the previous release (version 22) is available through the Git commit log between the releases.

Apps is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps and Android Auto to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.

GrapheneOS users must either obtain GrapheneOS app updates through our app repository or install it with adb install-multiple with both the APK and fs-verity metadata since fs-verity metadata is now required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.

Assets 2
Loading