Fonte 0.1.1

Security fixes, private GitHub repositories and a new icon. Update from 0.1.0 in place: the signing key is the same.

Security

• First install from F-Droid or IzzyOnDroid: the APK must be in the repo's signed index. Fonte checks the index with the repo key that the F-Droid client also uses. Updates do not need this step, because the pinned certificate protects them.
• Release notes from a hostile source can no longer slow down the update checks.
• "Open the source page" opens only https web pages.
• Import: the certificate of an installed app wins over the pin in the file. Fonte accepts only valid pins, and sources that pass the same checks as a pasted link.
• "." and ".." are not accepted as owner or repository names.
• Build: the Gradle download checksum is pinned, and Gradle checks the SHA-256 of every dependency.

Private GitHub repositories

• With a token, Fonte downloads APKs through the GitHub API, so private repositories work. The token still goes only to api.github.com.
• A fine-grained token needs read-only access to "Contents" of the private repositories. When GitHub cannot find a repository, the error message now says this.

Other

• New icon: the drop only, without the arrow.

Verify

	SHA-256
Fonte-0.1.1.apk	799f27e2a60ffdd32431c33280737e85cb793156021674cbe041d6cc582fda0a
Signing certificate	cc154a2b16d1b2021f233724054934162bf2980e161672640a6e0f388c36ffa4

Check the certificate with apksigner verify --print-certs Fonte-0.1.1.apk or with AppVerifier. Do not install an APK with a different certificate.