v0.28.0

[0.28.0] - 2026-10-06

Features

• Android forms its Wi-Fi Direct group itself, without a system dialog (#507) (bindings) (50b12f6)
• The iOS peer stream rides Network framework instead of Multipeer (#498) (bindings) (91bd018)
• Build, test and publish the Swift package, the Android library and the Python wheels from a release (#496) (bindings) (284915a)
• A Python gateway-daemon client behind the reticulum slot (#490) (bindings) (8f07ff4)
• Pin the WASI build of the leaf and ship a host shim example (#487) (leaf) (e01af54)
• Custody v1 for replicated-document frames (#493) (protocol) (2977ff9)
• The Python reference server for the local API (#491) (bindings) (71024b6)
• A Swift package and an Android library, built from the bridge sources in place (#475) (bindings) (175c6d9)
• Build for ESP32 RISC-V and Cortex-M0, and gate them in CI (#473) (leaf) (f66ee67)
• Initialise MLS with the built-in file stores (#470) (uniffi,bindings) (1f8afba)
• File-backed stores in Rust, sealed under a store key (#468) (protocol) (6130bf9)
• A per-send app id, and the app id on received events (#461) (protocol,uniffi,bindings) (3658751)

Bug Fixes

• A closed hello-mapped link gives the peer back its live address, and each link keeps its own hello (#518) (bindings) (0e47f26)
• UIScene lifecycle for RN example apps on iOS 26+ (#517) (bindings) (53454ed)
• A new confirmation probe supersedes the last (#515) (protocol) (99aee10)
• Close the four open issues (#510, #512, #513, #514) (#516)(df42df1)
• Bluetooth peers find each other in busy rooms, and Android survives Bluetooth toggles and stack crashes (#511) (bindings) (9418dd3)
• Report a key package refused by this device's clock (#506) (protocol,mls) (7779f86)
• Android Wi-Fi Direct sends at once, rejoins its group, and starts from the config (#505) (bindings) (d20654d)
• Bound pushed re-sends, remember late replays, hold unrouted ACKs (#503) (protocol) (c8a5d12)
• BLE survives an iPhone's Bluetooth power-cycle on both ends of the link (#501) (bindings) (a790e54)
• Close the three open issues (#368, #471, #472) (#502) (bindings) (0dfae93)
• Keep a synced key package's record so expiry still owns it (#500) (mls) (fbc91bb)
• Read every claim a wheel's platform tag makes from the library (#499) (bindings) (f9cec39)
• Push a key package again when it produced no session (#497) (protocol) (4278b9a)
• Warn when Python SecureStorage gets keyring's failing or null backend (#469) (bindings) (8aae1c6)
• Restore the reviewed local API server, flush documents on close, start the gateway client (#495) (bindings) (64720ee)
• Stop losing data-sync deltas over BLE (#483) (protocol) (69e13b1)
• Clear the review residuals on main before the 0.28.0 cut (#484)(d5ffb42)
• Close the pointer guard's class, and move the footprint harness to shared_store (#476) (leaf) (41fdca9)
• Build the iOS library for the pod's deployment target (#474) (bindings) (586ef0e)
• The mobile Wi-Fi Direct managers exchange the preamble (#465) (bindings) (e43f4e0)
• Stop a staged npm publish from failing the release run (#464) (bindings) (2b891bc)

Documentation

• The backbone is a gateway property (#485) (spec) (9566dd8)
• Local API clients and guide (#492) (bindings) (d4d0033)
• The custody chapter, with its receipt prefix reserved (#488) (spec) (db0d078)
• The local API chapter (#486) (spec) (c6489f4)
• The per-send appId in the React Native guide (#462) (bindings) (38048b4)

Testing

• Bracket the custody acceptance clock in the expiry test (#494) (protocol) (24ebe9d)
• Build the burst before the first send (#467) (bindings) (fadede1)
• A conformance suite for MlsStorage (#466) (mls) (2bc345f)

Miscellaneous

• Fold the post-merge fixes into 0.28.0 (#520) (release) (d83a064)
• 0.28.0 (#509) (release) (d3aed18)
• Publish the Android library as offline-protocol-sdk (#504) (bindings) (a3956ec)
• Bump org.json:json in /bindings/react-native/android (#411) (deps) (768bf3b)
• Bump actions/setup-java from 5 to 6 (#424) (deps) (9c192f5)
• Bump softprops/action-gh-release from 3.0.2 to 3.0.3 (#432) (deps) (d3cb4e6)
• Bump taiki-e/install-action from 2.85.8 to 2.87.13 (#452) (deps) (af25d15)
• Bump serde to 1.0.229, thiserror to 2.0.20, chrono to 0.4.45 (#463) (deps) (f2a6764)