Stashi Wallet v1.2.6

Connection reliability
- Prevent successfully bootstrapped Tor connections from appearing stuck at partial progress
- Fix Tor runtime lifetime errors that could trigger a Rust panic
- Retire existing connections and cached endpoint pools when transport settings change
- Restart active synchronisation safely after transport changes, bridge configuration changes, and Tor exit rotation
- Respect newer pause and lock requests, and keep interrupted rescans paused

Privacy and diagnostics
- Prevent retired connections from continuing to use the previous network route
- Consolidate wallet HTTPS requests and certificate checks on Rustls while preserving certificate, hostname, and pin validation
- Reject HTTPS downgrades and strip sensitive headers on cross-origin redirects
- Record privacy-safe Rust panic classifications instead of raw panic messages and backtraces
- Strengthen sensitive-information redaction in structured debug logs and exported logs

Linux packages
- Fix a missing libsecret runtime dependency that could prevent Debian packages from opening
- Verify the required dependency in both AMD64 and ARM64 Debian packages

Mobile and SDKs
- Use Direct networking in consumer SDKs and exclude their embedded Tor and I2P components
- Preserve embedded privacy transports and existing transport preferences in Stashi Wallet
- Add optional smaller Android SDK and React Native binaries with externally supplied Sapling proving parameters
- Validate external parameter files by exact size and SHA-256 before use, with retry support after unsuccessful initialisation
- Optimise the compact Android SDK for binary size while preserving panic recovery
- Update the Rust backend and native SDKs to 0.3.8, and React Native packages to 0.3.9

The optional external-parameter SDK requires parameter initialisation before transaction signing, including Ironwood-only transactions. Receiving and synchronisation remain available without initialisation.

Contributor
- OswaldKardingson — wallet, backend, privacy, diagnostics, SDK optimisation, Linux packaging, and release engineering

Stashi Wallet v1.2.5

Connection reliability
- Fix a Windows Tor startup hang
- Ensure the latest transport choice takes effect, even when an earlier connection attempt is still running
- Allow Tor bootstrap to retry after a failure

Privacy and security
- Keep screenshot protection active across overlapping sensitive screens and seed export
- Prevent an earlier sensitive-copy timeout from clearing newer clipboard text

Linux ARM64
- Add an ARM64 Debian wallet package with the native KDF
- Select Linux updates and Verify Build hashes for the running CPU
- Adapt the wallet layout to narrow portrait displays
- Check the packaged KDF, dependencies, checksum, and release provenance in CI

Mobile and SDKs
- Publish one 64-bit ARM APK for direct download while retaining both ARM architectures in the Google Play bundle
- Remove unsupported x86 libraries from the Android release bundle
- Update the Rust backend and native SDKs to 0.3.7 and React Native packages to 0.3.8

The ARM64 Debian package requires glibc 2.35 or newer.

Contributor
- OswaldKardingson — wallet, backend, security, Linux ARM64 support, and release engineering

Stashi Wallet v1.2.4

Wallet recovery and synchronization
- Preserve imported-key recovery across navigation and restarts
- Fix birthday-height handling that could prevent restored funds from being selected for spending
- Improve Auto endpoint recovery and rank servers by actual block-delivery throughput
- Keep per-address balances updated while key details remain open
- Improve diagnostics for insufficient spendable funds

Transactions and security
- Require transaction authorization for manual sweeps and consolidation
- Distinguish spend conflicts from successful already-known broadcast acknowledgements
- Preserve confirmed spends when older transaction attempts expire
- Add authenticated imported-key removal with balance, transaction, and scan-completion safeguards
- Restore screenshot protection following the temporary review build

Compatibility and interface
- Correct Ironwood extended-key parent fingerprints while preserving existing keys, addresses, and historical exports
- Add Pirate Gold theme by Artto, with improved contrast and complete translations
- Fix inconsistent colors after switching themes
- Reduce unnecessary macOS Keychain prompts and preserve existing access grants
- Fix release-signature verification with Windows line endings and improve failure diagnostics
- Disable scheduled iOS background sync; foreground sync remains available

Dependencies and SDKs
- Update embedded Arti to 0.44 and bundled i2pd to 2.61.0
- Update rustls and build tooling; fix Android and iOS SDK packaging
- Improve Qortal history recovery and expose optional partial-history results
- Retry unpublished React Native package versions on subsequent releases
- Update Rust backend and standalone SDKs to 0.3.6
- Update React Native wrapper and native packages to 0.3.7

Existing wallets and receiving addresses are preserved. No wallet recreation or funds transfer is required.

Contributors
- OswaldKardingson — wallet, backend, security, synchronization, compatibility, and release engineering
- Artto — Pirate Gold theme
- QuickMythril — Qortal integration and transaction-history improvements

Stashi Wallet v1.2.3 — Hotfix

v1.2.3 fixes Android amount entry and desktop update downloads following the repository rename.

- Fixed the Send amount field losing focus when the Android keyboard opens, including payments started from Address Book donation contacts.
- Preserved amount entry while keeping the payment summary and review action accessible on smaller screens.
- Updated desktop release URL validation to accept Stashi-Wallet and legacy repository links while retaining signed-checksum verification.
- Updated desktop release discovery to use the renamed repository directly.
- Corrected repository metadata in all six React Native npm packages to match GitHub Actions provenance.

Users affected by the automatic-update URL error must download and install this release manually. This release contains the correction for future updates.

Full changes:
https://github.com/PirateNetwork/Stashi-Wallet/compare/v1.2.2...v1.2.3

Stashi Wallet v1.2.2

v1.2.2 refreshes the wallet interface, improves saved-contact payments and receiving, adds durable encrypted payment disclosures, and strengthens connection recovery and Windows packaging.

Wallet interface and themes
- Added a wallet style picker with style preferences saved independently of light and dark mode.
- Refined Home, Activity, Send, Receive, onboarding, key management, and Settings.
- Improved narrow-screen layouts, larger-text support, contextual help, and desktop controls.
- Grouped transactions by day and made amounts, statuses, and transaction details easier to read.
- Preserved exact atomic ARRR precision when formatting amounts.
- Improved protection of revealed inputs and immediate balance hiding.
- Updated translations throughout the revised wallet flows.

Address Book and sending
- Connected saved contacts to the Send form and streamlined transaction review.
- Improved contact browsing, search, filtering, deletion, and desktop toolbar layout.
- Added default Pirate Chain general and development donation contacts.
- Improved validation of Sapling and Ironwood payment addresses.
- Added an Address Book walkthrough with Mobile and Desktop screenshots to the user guide.

Receiving and key management
- Simplified QR sharing and optional payment requests.
- Distinguished address copying from payment-request copying and sharing.
- Added historical-address previews without changing the current receive address.
- Fixed manual address rotation and address derivation for view-only wallets.
- Unified Sapling and Ironwood spending-key import fields.
- Improved viewing-key imports across both pools and corrected viewing-key export for the current receive account.

Payment disclosures and storage
- Added encrypted, persistent payment disclosure bundles for recovery and reuse.
- Kept disclosure loading tied to the active wallet session.
- Updated passphrase changes to rotate account-key and disclosure encryption together.
- Improved database upgrade coordination and schema error handling.

Connections and platform reliability
- Checked automatic server candidates concurrently and improved recovery from failed RPC endpoints.
- Made connection tests use the selected endpoint route and provide clearer failure summaries.
- Preserved underlying Tor initialisation errors for better diagnostics.
- Disabled Android background synchronisation and removed foreground services.
- Bundled required Visual C++ runtime libraries on Windows.
- Improved Windows archive handling, Tor bridge packaging, and preservation of upstream signatures.

Maintenance
- Refreshed Flutter dependencies and the Rust bridge toolchain.
- Updated the shared Rust backend and Android native SDK to 0.3.5.
- Updated the React Native wrapper and native companion packages to 0.3.6.
- Expanded regression and responsive-interface coverage.

Full changes:
https://github.com/PirateNetwork/Stashi-Wallet/compare/v1.2.1...v1.2.2

Stashi Wallet v1.2.1

v1.2.1 improves recovery from older wallets, makes restored key groups easier to find, strengthens automatic server selection, and refines release verification and updates. It also introduces optional privacy-tool downloads for Windows and improves desktop icons and translations.

- Fixed legacy seed-account discovery remaining unfinished after the wallet reached the current chain tip, which could prevent additional accounts from being added.
- Preserved discovered accounts with transaction history, including accounts whose funds have already been spent.
- Made restored spending-key groups available on the Receive screen without rotating existing addresses.
- Added key-group filtering and search across address labels, addresses, and key groups.
- Updated open Receive screens when account discovery completes.
- Clarified the difference between new addresses within a key group and separate seed accounts used by older wallets.
- Improved scan-progress guidance and restored-address layouts on smaller screens.

- Preserved the last server-verified chain tip when a sync returns no new blocks.
- Strengthened spendability checks so local scan height alone cannot establish that a wallet is up to date.
- Preserved interrupted-sync state across restarts until the required recovery work completes.
- Improved Auto server selection after a failed health check by checking eligible alternative endpoints.
- Fixed refresh requests being lost while another server check was already running.
- Added recovery from retired automatic server presets while preserving explicit manual selections and certificate pinning.

- Improved verification of renamed installed release files against the official PGP-signed checksum manifests.
- Strengthened release-signing key identification and added support for ASCII-armoured signatures.
- Added clearer guidance when an incorrect device clock prevents signature verification.
- Clarified which installed files can be verified and when store processing or split packages prevent a byte-for-byte comparison with GitHub downloads.
- Updated Windows release manifests to account for the final application files after signing.
- Fixed update prompts not appearing correctly through the application navigator.
- Improved stable-version detection and added distinct options to postpone an update or skip a particular version.
- Required PGP-authenticated checksum verification before a downloaded update installer can be launched.

- Moved the Windows installer’s I2P router and Tor bridge helpers into optional, preselected downloads.
- Kept built-in Tor available without downloading those optional components.
- Pinned optional component downloads to their release-specific SHA-256 checksums.
- Retained compatibility with self-signed Windows releases.
- Improved release scanning to retain individual security-vendor findings and include separately published privacy tools.
- Updated Windows packaging and signing jobs to install a checksum-verified Inno Setup compiler from its official release.
- Increased the visible size of the Stashi Wallet mark in desktop application icons.

- Protected first-time view-only wallet setup with local passphrase configuration and optional biometrics.
- Routed locked installations through the unlock flow before importing viewing keys.
- Replaced raw viewing-key setup errors with clearer, actionable messages.
- Published the Stashi Wallet privacy policy and added publication safeguards.
- Updated translations for account recovery, key groups, release verification, and update prompts across all 15 supported non-English languages.
- Updated the shared Rust backend and native SDK components to version 0.3.4.
- Updated the React Native wrapper and native companion packages to version 0.3.5.
- Removed unused Flutter Rust Bridge implementation code and expanded regression coverage for recovery, synchronisation, verification, updates, and packaging.

[Read the v1.2.0 release notes](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/releases/tag/v1.2.0)

[View the full changes since v1.2.0](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/compare/v1.2.0...v1.2.1)

Stashi Wallet v1.2.0

v1.2.0 introduces Stashi Wallet, the new public identity for Pirate Unified Wallet. Existing wallet data, recovery phrases, addresses, application identifiers, and storage locations remain compatible. This release also improves transaction recovery, endpoint failover, Android signing, build verification, accessibility, and SDK security.

- Renamed the Flutter wallet to Stashi Wallet across Windows, macOS, Linux, and Android.
- Added the new Stashi Wallet logo, application icons, executable titles, installer names, and runtime identity.
- Renamed release archives, packages, checksums, signatures, metadata bundles, and SBOM files to use the Stashi Wallet name.
- Preserved existing application identifiers and wallet data locations so upgrades continue to find installed wallets and local state.
- Updated desktop installers and automatic update handling for the renamed executable.
- Rebuilt platform icons with transparent backgrounds for clearer display at small sizes.

- Strengthened Auto endpoint selection by requiring servers to provide a current compact-block cache and the exact compact block they advertise.
- Empty, stale, malformed, or inconsistent compact-block responses are rejected before an endpoint can join the active pool.
- Auto mode now rotates away from an endpoint that accepts connections but is not ready to serve usable blockchain data.
- Unready endpoints remain available for future sessions instead of being permanently removed.
- Added privacy-safe endpoint diagnostics covering the active server, blockchain height, response latency, and pool health.
- Automatic sends now relay the same signed transaction through a healthy alternate endpoint after the primary response, improving propagation without creating a second transaction.
- Added durable tracking for outgoing transaction expiry heights.
- Expired outgoing transactions are now separated from pending transactions throughout the Home and Activity screens.
- Funds reserved by an unconfirmed transaction are released after the locally scanned blockchain passes its expiry height.
- Transaction details now show the expiry state and explain when the released funds can be used for a new payment.
- Confirmed transactions remain protected from expiry reconciliation.
- Existing pending records are migrated conservatively during upgrade.

- Improved spendability reporting so witness repair remains visible while repair work is queued, active, or waiting for final anchor validation.
- Added the complete spendability reason-code contract: `OK`, `ERR_SYNC_FINALIZING`, `ERR_WITNESS_REPAIR_QUEUED`, and `ERR_RESCAN_REQUIRED`.
- Improved Android native initialization so foreground and background wallet operations use consistent writable application directories.
- Sapling proving parameters are now loaded directly from embedded memory instead of being written to temporary files.
- Removed temporary-file permission failures from the Android Sapling signing path.
- Added a deterministic mobile debug log file that can be exported through the existing Share action.

- Added CoinPaprika as a fallback ARRR price provider when CoinGecko is unavailable.
- Retained CoinMarketCap as the final USD fallback.
- Prevented duplicate simultaneous price requests.
- Added bounded startup retries and immediate price refreshes when the application resumes, regains focus, or is restored.
- Preserved the last valid fiat price during temporary provider or network outages.
- Updated the outbound API disclosure to identify the available price providers.

- Improved Verify Build so the installed desktop application is hashed before any GitHub request is made.
- Added retries for temporary release-download failures.
- Network or transport problems are now reported as an unavailable verification check instead of a failed or modified application.
- Local artifact information remains visible when official verification files cannot be downloaded.
- Added reliable version, Git commit, build date, Rust compiler, and target information across supported platforms.
- Published the README, public key, checksum manifests, payload manifest, and signatures as individual release files in addition to the verification bundle.

- Renamed the main Wallet destination to Wallets and updated the payment hub, navigation, translations, tests, and documentation.
- Improved setup recovery so a temporary finalisation failure can be retried without creating duplicate wallet records.
- Added editable wallet names during creation and recovery, with sequential suggested names.
- Improved recovery phrase language selection and offline backup guidance.
- Adjusted desktop layouts using both viewport width and height for better presentation on laptops and displays using fractional scaling.
- Improved keyboard focus, screen-reader labels, editable-field labelling, checkbox visibility, and high-contrast presentation.
- Improved rendering stability on Intel Macs by using the stable Flutter renderer.

- Added optional wallet-scoped encryption for seed phrases and imported spending keys while keeping viewing data and compact-block caches available for synchronisation.
- Added in-memory signing sessions that require wallet-scoped credentials before protected keys can be used.
- Added explicit wallet locking that clears active signing credentials and related database state.
- React Native registry secrets are now created and stored through Android Keystore or iOS Keychain instead of being exposed to JavaScript storage.
- Added typed React Native interfaces for spendability status, endpoint diagnostics, signing sessions, and wallet locking.
- Made transaction broadcasting explicitly wallet-scoped.
- React Native integrations must now use `broadcastTransaction(walletId, signedTransaction)`. The former one-argument broadcast method has been removed.
- Updated the shared Rust backend, CLI, native FFI, Qortal CLI, and Android SDK to version 0.3.3.
- Updated the React Native wrapper and native companion packages to version 0.3.4.

- Published the complete Stashi Wallet User Guide with installation, setup, recovery, migration, payments, wallet management, privacy, verification, and troubleshooting guidance.
- Added paired Mobile and Desktop screenshots for workflows that differ by screen size.
- Added an accessible tagged PDF with heading structure, image descriptions, bookmarks, clickable contents, tagged lists, and structured reading order.
- Added automated GitHub Pages publication and pull-request validation for future guide updates.
- Updated the guide to use British English and consistent user-facing terminology.
- Updated the project to Flutter 3.47.2.
- Updated documentation and React Native example dependencies to current security baselines.
- Updated translations for the Stashi Wallet identity, transaction expiry, wallet navigation, verification, pricing, and security controls.

[Read the v1.1.9 release notes](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/releases/tag/v1.1.9)

[View the full changes since v1.1.9](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/compare/v1.1.9...v1.2.0)

Pirate Unified Wallet v1.1.9

v1.1.9 is the stable Pirate Unified Wallet release following v1.1.8-rc.1. It strengthens wallet recovery, improves synchronization and automatic spending, adds signed build verification, and refines the wallet experience across supported platforms.

- Recovery phrase rescans now check the first five Sapling seed accounts used by older wallet layouts and retain every account where history is found.
- Added `Add next account` and `Add 5 accounts` controls that can be used repeatedly to restore additional seed accounts.
- Every newly added seed account includes its matching Sapling and Ironwood keys.
- Newly added accounts are stored before scanning and automatically trigger the required historical rescan.
- Redesigned the Keys and Addresses screen with clearer account grouping, concise guidance, responsive layouts, keyboard navigation, screen-reader support, and large-text support.
- Kept seed account controls limited to recovery phrase wallets while imported spending keys and viewing keys remain correctly scoped to their own accounts.
- Improved Sapling and Ironwood address rotation state across restarts, rescans, and database upgrades.
- Strengthened imported-key ownership recovery using full viewing keys and complete ZIP-32 diversifier indices.
- Kept address labels, colors, creation dates, and display order stable when verified ownership metadata is refreshed.
- Added privacy-safe diagnostics showing whether imported keys were stored and included in scanning without recording secret key material.

- Added integrity checks to compact-block cache records. Damaged or malformed records are discarded and downloaded again instead of being accepted by the scanner.
- Preserved compatibility with existing cache formats and upgrade validated records automatically.
- Kept the checksum overhead within normal end-to-end cached-rescan variance. The measured cost was approximately 45 milliseconds across a representative 583,000-block cached rescan.
- Bounded resume and reorganization checks so an unavailable or inconsistent server cannot leave the wallet on Preparing Sync for hours.
- Failed sync preparation now settles into a completed error state instead of continuing to appear active.
- Added backoff to automatic sync restarts to prevent repeated restart loops.
- Rescans now authenticate encrypted wallet records before cancelling synchronization or rewinding history.
- Preserved the last valid spendability and witness heights when synchronization is cancelled.
- Added durable replay tracking so newly added seed accounts and verified spending-key imports cannot skip required history after a restart.
- Made address ownership persistence part of successful scanning so incomplete state is surfaced for retry.
- Reduced database work during chain-resume and reorganization checks without changing the normal matching-tip or cached-block paths.

- Fixed Auto spend selection when funds are spread across eligible key groups or shielded pools.
- Removed cases where the send screen could report insufficient funds even though the wallet contained enough spendable notes.
- Made the transaction builder authoritative for final note and fee validation using current wallet state.
- Added responsive and accessible send-error feedback for phones, tablets, desktops, large text, and screen readers.
- Improved transaction cards so long amounts, account names, and status information do not overlap on narrow screens.
- Improved recent activity spacing and fixed content appearing through the pinned mobile balance header.

- Renamed Privacy Shield to Network Privacy and simplified the screen around settings users can act on.
- Removed DNS grading and the passive DNS status panel.
- Kept native onion light servers as the preferred choices when Tor is selected.
- Added curated HTTPS light servers as additional manual choices while using Tor. Connections to these servers remain routed through Tor.
- Kept automatic Tor endpoint pools onion-only.
- Updated node settings to clearly identify when a clearnet hostname is protected by the active Tor connection.

- Added the wallet’s official public PGP key to the application, repository, and release verification package.
- Added a README, `sha256sums.txt`, signed checksum manifests, and detached PGP signatures for every published release asset.
- Bound release files and their verification metadata to the exact Git tag being built.
- Updated the Verify Build screen to download the matching signature bundle and validate it against the embedded project key.
- Added local package and installed executable hash verification where supported.
- Replaced unclear verification failures with actionable guidance.
- Kept hashes, file paths, signatures, and supporting evidence available through an optional technical-details panel.

- Updated Linux AppImages with a modern static runtime that does not depend on the legacy `libfuse2` loader.
- Added packaging checks that verify the approved runtime remains intact in the finished AppImage.
- Improved macOS Keychain compatibility for portable and ad-hoc signed packages.
- Made debug logging on macOS independent of Keychain availability.
- Preserved wallet data when a macOS secure-storage or encrypted-state check fails.
- Fixed Intel macOS packaging for the x86_64 Qortal JNI library.

- Added typed React Native methods for reading, testing, and updating lightwalletd endpoint pools.
- Documented endpoint testing, failover pools, wallet scoping, transport rules, TLS validation, and sync restart behavior.
- Added verified spending-key recovery support for native and Qortal integrations.
- Updated the shared Rust backend, CLI, native FFI, Qortal CLI, and Android SDK to version 0.3.2.
- Updated the React Native wrapper and native companion packages to version 0.3.3.
- Refreshed Flutter Rust Bridge output for Dart 3.13.
- Updated translations for the new wallet, security, key management, and network settings.

[Read the v1.1.8-rc.1 release notes](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/releases/tag/v1.1.8-rc.1)

[View the full changes since v1.1.8-rc.1](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/compare/v1.1.8-rc.1...v1.1.9)

v1.1.8-rc.1: Pirate Unified Wallet v1.1.8 (Release Candidate 1)

v1.1.8-rc.1 is the release candidate for Pirate Unified Wallet v1.1.8. It introduces faster and more resilient synchronization, improved privacy-network handling, broader Linux compatibility, and safer, deterministic release packaging.

## Faster and More Resilient Sync

- Added automatic multi-server synchronization for eligible mainnet configurations. Auto mode validates compatible lightwalletd servers and can download ordered historical block ranges from multiple sources.
- Added validated failover while preserving explicit manual servers, custom endpoints, certificate pins, testnet settings, and private-network routing.
- Historical rescans now bootstrap at the requested height instead of unnecessarily replaying from Sapling activation when suitable tree state is available.
- Added capability-aware routing for Sapling and Ironwood subtree roots, allowing Auto mode to use a validated compatible server without changing the normal sync endpoint.
- Improved cached-rescan throughput, durable prefetch admission, dense-block workload control, and sync progress reporting.
- Preserved the last durable wallet height during startup recovery and automatically restart synchronization when it stops unexpectedly.
- Added broader recovery and regression coverage for stale endpoints, interrupted sync, historical rescans, endpoint failover, and chain-tail updates.

## Privacy and Networking

- Made the latest Direct, Tor, SOCKS, or I2P selection authoritative and cancel stale connection requests when the transport changes.
- Prevented old health checks and private-network requests from blocking the settings screen or reporting results for a transport that is no longer selected.
- Kept Tor configurations on onion endpoints and moved embedded Tor state into app-private storage on Android.
- Improved embedded I2P startup, SOCKS connectivity, endpoint validation, retry behavior, and slow-network timeout handling.
- Removed the incompatible mainnet I2P endpoint and improved recovery when a private endpoint remains offline.
- Bounded connection tests so failed or unreachable private transports no longer wait indefinitely.

## Endpoint and Wallet Experience

- Added a persistent Auto server option with curated Pirate, Qortal, CryptoForge, and supported MathNodes endpoints.
- Applied endpoint selections immediately and restored the previous configuration if saving fails.
- Added an Auto-mode tooltip explaining parallel synchronization in straightforward language.
- Improved endpoint health presentation and added diagnostic logging for automatic pools, alternate servers, routing decisions, and rescans.
- Updated and localized endpoint names, Auto-mode descriptions, health states, and private-network guidance across all supported languages.
- Improved seed import error handling so valid recovery phrases are not incorrectly reported as invalid when a later setup or secure-storage operation fails.
- Enabled the required macOS Keychain entitlements and made non-secret seed-language preference persistence resilient to unavailable secure storage.

## Linux Compatibility

- Established Ubuntu 22.04 and GLIBC 2.35 as the compatibility floor for published Linux artifacts.
- Built embedded i2pd from pinned source on the supported ABI baseline instead of packaging a binary requiring a newer Linux distribution.
- Added fail-closed ELF symbol checks for Flutter bundles, AppImages, command-line tools, Qortal JNI, native FFI, and x86_64 and aarch64 releases.
- Fixed the Flatpak Flutter runtime layout that could cause the application to exit without opening.

## Security and Deterministic Builds

- Updated audited Rust dependencies, including the patched `h2` release for RUSTSEC-2026-0258.
- Tightened Cargo audit and cargo-deny policy while retaining only the documented transitive RSA exception with no available fixed release.
- Made Komodo coin, icon, and KDF assets checksum-pinned and hermetic for Flutter builds.
- Added one validated Flutter asset preflight for every supported desktop and mobile build.
- Standardized unit and widget tests so upstream asset transformers cannot perform unexpected network downloads.
- Made tag-derived application versions authoritative and added release gates that reject artifact version drift.

## SDK and Package Delivery

- Reduced React Native iOS archive size by removing debug and incremental data, enabling optimized release linking, and stripping nonessential symbols.
- Split the oversized combined iOS simulator package into separate arm64 and x86_64 companion packages.
- Added strict package allowlists that reject unexpected files, debug bundles, symlinks, incorrect architectures, and oversized payloads.
- Updated the React Native package family to version 0.3.2.
- Refreshed CLI, Qortal, native FFI, iOS SDK, and Android SDK artifacts to version 0.3.1.
- Made Native FFI packaging deterministic by validating the reviewed C ABI, building from Cargo.lock, and removing runner-dependent header generation.
- Added an explicit, pinned cbindgen workflow for intentional Native FFI header regeneration.

[Read the v1.1.7 release notes](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/releases/tag/v1.1.7)

[View the full changes since v1.1.7](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/compare/v1.1.7...v1.1.8-rc.1)

Pirate Unified Wallet v1.1.7 (Beta)

v1.1.7 is an Android hotfix release for the startup crash affecting the v1.1.6 Android build.

## Android Hotfix

- Fixed a release-only crash that could stop the Android app before Flutter initialized.
- Updated AndroidX WorkManager to 2.11.2 so Room's generated database remains constructible after R8 shrinking.
- Added a release mapping check to prevent this class of startup failure from passing CI again.

## Release Pipeline

- Fixed React Native npm publication when packages are downloaded from GitHub Actions artifacts.

All wallet features and platform changes from v1.1.6 remain included in this release.

[Read the v1.1.6 release notes](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/releases/tag/v1.1.6)

[View the full changes since v1.1.6](https://github.com/PirateNetwork/Pirate-Unified-Light-Wallet/compare/v1.1.6...v1.1.7)