ZenNotes for Android 1.1.36: published notes carry 50 attachments

ZenNotes for Android 1.1.36: published notes carry 50 attachments

Version 1.1.36, versionCode 39, October 9, 2026, following 1.1.35 (38). PR #107 carries 9724d90; the signed bundle zennotes-1.1.36-vc39.aab (31,577,729 bytes, SHA-256 939cdf38…1868) was built from 9724d90, whose tree the merge bea2a29 on main equals.

What changes on the phone

• Publish notes with up to 50 attachments and 100 MB. A published note could hold at most 20 attachments, because the note and every attachment went to ZenNotes Cloud in one request. Publishing now uploads each attachment straight from your vault to storage first, then publishes the note: up to 50 attachments and 100 MB per note, each file still up to 10 MB. Every limit is checked before anything uploads, so a note over a limit says what to change at once. Publishing needs the Publish add-on of ZenNotes Cloud.
• Attachments are read and sent by the native file upload the sync already uses, so a large image is not copied into memory as text first.

Under the hood

Core core-2.66.0-core.hf27b6fbd42368c71 was built by CI from ZenNotes/zennotes 461fe76d, the v2.66.0 release commit (run 37993446634), and published as a pre-release; iPhone 1.22.0 vendors the identical archives. core:adopt checked SHA-256, SHA-512, packed versions and clean-source provenance. The core also carries the rest of ZenNotes 2.66.0: the shared publish routine (publishWithStagedUploads) that desktop and both phones call, and its fallback to the one-request publish when a service has no staged uploads.

Source: branch release/1.1.36 from main e550304. On the branch: 4efe6e6 the phone side of staged publishing (src/bridge/mobile-publish-assets.ts: each attachment described by size and SHA-256, then PUT by the native file-backed upload, a remote vault's file hashed in JavaScript, an insecure upload URL refused); 86052a7 the core adoption; 9724d90 the version commit. The APK requests the same three permissions as 1.1.35; no manifest, native plugin or SDK changed.

Validation

• On 9724d90: typecheck and 234 JavaScript tests (16 suites) passed, including the new platform tests; npm run sync (the Vite build and Capacitor sync) and bundleRelease passed, and the bundle verifies with the upload key.
• PR #107 CI on 9724d90 passed both jobs: the build job and the emulator launch job.
• The service side was checked in production before any app shipped (a 30-image note staged, uploaded and published, then republished, cancelled and unpublished), and the packaged desktop 2.66.0 published a 30-image note against production through the same shared routine. Publishing was not driven on an Android device for this release; the phone's file access is covered by the platform tests above.

Play Console submission

1.1.35 (38) was live. Production, Create new release: the AAB was dropped in by Adib and processed as 39 (1.1.36): API 24+, target SDK 36; no devices lost or added (12,345 phones, 6,780 tablets); 3.06 MB update; only the usual "no deobfuscation file" warning. Release notes inside <en-US> tags, rollout 100%, saved, and "Submit 1 change for review" by Adib on October 9 at about 22:43 UTC (submission 36, in review). Managed publishing is off, so approval publishes it.

PR #107 merged as bea2a29 (merge tree equals 9724d90, the AAB's source); lightweight tag v1.1.36. This release carries Play's signed universal APK from App bundle explorer as zennotes-1.1.36-universal.apk: 31,830,849 bytes, SHA-256 6455c444…2c51, md.zennotes 39 / 1.1.36, min 24 / target 36, signer 9f1af3a4… as since 1.1.22, no CHECK_LICENSE or pairip.

How to test locally

1. npm ci && npm run build && npx cap sync android, then open android/ in Android Studio and run on a device or emulator.
2. Connect ZenNotes Cloud (Settings → Cloud) with an account that has the Publish add-on.
3. Make a note with 30 images and run Publish Note from the command palette (or the note's Publish note button). Before: "This note has 30 attached files, but a published note can have at most 20." After: the note publishes and its public page shows all 30 images.
4. A note with 51 attachments: before anything uploads, "This note has 51 attached files, but a published note can have at most 50. Remove some attachments and publish again."