Skip to content

Notrus 0.3.4-beta5 Refresh 4 (superseded by Refresh 5)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@Justbeginwithit Justbeginwithit released this 25 May 00:48
· 9 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.3.4-beta5-refresh4
fb7a11d

Notrus 0.3.4-beta5 Refresh 4

Release date: 2026-05-25

This pre-release refresh supersedes Refresh 3 and publishes the current beta branch with refreshed Android and macOS artifacts, dependency bump PRs applied, large encrypted attachment work, faster sync work, current experimental call surfaces, UI/design polish, and a Rust lockfile cleanup for the remaining high Dependabot advisory on unused optional hpke-rs libcrux packages.

Included

  • Chunked encrypted attachment handling for files up to 1 GB per attachment on the current native path.
  • Improved background download and notification-triggered sync paths, within Android and macOS background-execution limits.
  • Faster normal-mode sync with event-triggered updates, shorter call-sensitive debounce, foreground polling fallback, and throttled background security refresh.
  • Android and macOS call surfaces: calls tab/history, full call screen, compact call pill, incoming/outgoing/ongoing call notifications, Android restricted lock-screen call Activity, foreground microphone call service, ringtone/ringback work, missed/ended/failed call entries, microphone permission UI, and call diagnostics.
  • Authenticated opaque call signaling, signed media descriptions, authenticated ICE/STUN/TURN discovery, TURN-only privacy-mode metadata, and RingRTC-based native media integration experiments.
  • Defensive Android call-audio lifecycle handling: native callback call-id binding, stale callback rejection, media-start timeout cleanup, route retry while RingRTC settles, and cancellation of stale mute/audio retry jobs.
  • Android UI/performance polish around bottom navigation, chat entry animation, search/composer styling, call overlay placement, and message-list scroll behavior.
  • macOS call UI and notification polish, conversation info surfaces, and RingRTC desktop helper packaging.
  • Account recovery separation from encrypted chat backup handling, plus local history/cache hardening around imported/restored histories.
  • Dependency bump PRs for GitHub Actions, Gradle wrapper, AndroidX test libraries, AndroidX core, Signal libraries, Rust rand, and Rust serde_json.
  • Rust lockfile cleanup for GHSA-hc3c-63hc-2r9f: the unused optional hpke-rs libcrux backend is patched to a local dependency-free stub, so Cargo.lock no longer carries vulnerable libcrux-aead or libcrux-chacha20poly1305 packages while Notrus stays on OpenMLS RustCrypto.

Conservative Call Status

Calls are included for tester visibility, but they are experimental and should not be marketed or relied on as stable voice communication yet.

  • Do not describe calls as stable, production-ready, or emergency-ready.
  • Do not rely on calls on POCO/Xiaomi/Redmi HyperOS or Android 16 firmware. Those devices have shown native WebRTC/RingRTC crashes or audio-stack failures; current builds may block or fail calls defensively there.
  • Background incoming calls depend on the app process, foreground service or worker state, OS battery policy, notification permission, relay availability, and network conditions. They are not guaranteed after force-stop, OS kill, long idle, reboot without reopening Notrus, or aggressive OEM battery policy.
  • Audio routing, microphone capture, ringtone/ringback state, connected timers, ghost-call cleanup, and cross-platform Android/macOS media still require more physical-device burn-in before release-quality claims.
  • TURN is still required for many real networks, and call timing/routing metadata may be visible to the relay or TURN operator.
  • Video calls and group calls remain out of scope.

Artifacts

  • Notrus-0.3.4-beta5-release.apk
  • Notrus-0.3.4-beta5-debug.apk
  • Notrus-macOS-0.3.4-beta5-refresh4.zip
  • SHA256SUMS-v0.3.4-beta5-refresh4.txt

Validation Snapshot

  • cargo build
  • zsh scripts/build-protocol-core.sh
  • source ../../../scripts/swift-env.sh && swift build
  • ./gradlew :app:testDebugUnitTest
  • ./gradlew lintDebug
  • node scripts/test-security-suite.mjs
  • node scripts/test-native-voice-calls.mjs
  • node scripts/test-call-signaling.mjs
  • node scripts/test-calls-complete-gate.mjs
  • zsh scripts/package-android-app.sh
  • zsh scripts/package-mac-app.sh
  • Android release APK v2 signature verification
  • macOS deep codesign verification
  • git diff --check

Checksums

222cddbd213afdc156f86093ac7f0cc395f3ea2cf65008939a069bab7329ebc2  dist/android/Notrus-0.3.4-beta5-release.apk
dc70710a0c705e81157cd78bed6864d63ab5b9839932446be3619455a64123db  dist/android/Notrus-0.3.4-beta5-debug.apk
7a56d64dc32676b72c789bac6371905a36c7d2b906a33e2d059d8ac87b3366e3  dist/Notrus-macOS-0.3.4-beta5-refresh4.zip
Assets 7
Loading