OpenVitals 2.4.0

Released 2026-07-28.

Onboarding is rebuilt from the ground up, the dashboard stops nagging about permissions, and the whole app gets a quiet visual tune-up: consistently outlined icons and Material 3 text spacing.

Changed

• Onboarding is now a four-step guide. Permissions are grouped the way Health Connect itself groups them - Activity, Body measurements, Nutrition, Sleep, Vitals - so the row you tap and the system dialog it opens carry the same name. One tap per category asks to read and to save, so entries you create in OpenVitals go back to Health Connect. Only Activity and Sleep are required to start; everything else is optional and can be added later from Settings.
• Mindfulness and cycle tracking are opt-in steps. Mindfulness stays off unless you switch it on - some Health Connect versions crash their own permission screen when asked for it, so OpenVitals requests it alone, where it can't take anything else down. Cycle tracking is its own step with a plain description of what it covers, and a Not now.
• Exercise routes get a walkthrough. Reading route maps is the one permission Android hides behind Health Connect's Additional access page, out of reach of any app. If it's still missing after the Activity grant, the last step shows the three taps that finish it, with a button that lands one tap away.
• The dashboard no longer asks for permissions. The two prompt cards that used to stack on the home screen right after onboarding are gone. A metric without access simply shows no data; screens ask at the point of use instead.
• Icons are consistently outlined - the same glyph no longer appears filled on one screen and outlined on another - and text spacing now follows Material 3, restoring the letter-spacing the body and title styles had silently lost in the Flutter port.

Fixed

• OpenVitals never asks for a permission your device cannot grant. Requests are filtered against what the installed Health Connect provider defines and what the app itself declares - the combination that could crash the system Health Connect app on some de-Googled ROMs, locking users out of granting anything at all. This also fixes phone-to-phone sync demanding a skin-temperature write permission that could never be granted.

For existing users

The permission model is versioned: existing installs pass through the new onboarding once, then continue to the dashboard as usual. Nothing already granted is asked for again.

The Codeberg and Play builds keep the same package name and signing certificate, so this installs as a normal update.

Distribution flow:

• Codeberg release with per-ABI signed APKs (arm64-v8a and armeabi-v7a) and signed Android App Bundle assets.
• Direct Google Play production upload from the approved Woodpecker deployment.

---

Generated from docs/releases/2.4.0.md. Edit it there; changes made here are overwritten.