v0.7.2

Nothing about the app's behaviour changes in this release. What changes is the contents of the file you install, which matters if you are the kind of person who unpacks it — and the FOSS build exists for exactly that person.

The FOSS build no longer declares any Google components

MediaPipe, which powers the on-device embedding path, brings Google's data-transport library along for its own logging. Three of that library's components — an alarm receiver, a job service and a backend-discovery service — were declared in the manifest of the build whose whole claim is that it carries no Google dependency.

Nothing could ever be sent through them: the transport implementation is stripped from the release build, and no collection endpoint reaches the app. That made them worse than useless rather than harmless — a manifest advertising a collector is the first thing someone auditing the FOSS build will find, and the honest answer to "what is this doing here?" was "nothing, and it should not be here."

They are gone. Verified on the published artefact: zero com.google.* components in the manifest, down from three.

The dependency itself stays. Excluding it leaves MediaPipe's own code referencing classes that are no longer in the APK, on the path that produced a release-only crash in the on-device memory feature once before. Removing three manifest entries reaches the same end state without putting that path at risk.

The APK no longer carries Google's encrypted dependency blob

The Android build tools stamp a description of the dependency graph into every artefact, in a form only Google can read. It is now omitted from the APK — the file you sideload and can inspect — and kept only in the bundle uploaded to Play, where it powers warnings about known-vulnerable dependencies.

Upgrading

Same signing key as 0.7.0 and 0.7.1, so this updates in place. Coming from 0.6.0 or earlier still needs an uninstall first — those builds were debug-signed.

Which file

• knotwork-0.7.2-full-release.apk — the normal build, for sideloading.
• knotwork-0.7.2-foss-release.apk — no Google or Firebase dependency anywhere in the graph, no crash reporting, and now no Google components declared either.
• knotwork-0.7.2-full-release.aab — store upload format; not installable directly.

Checksums are in SHA256SUMS.txt. Requires Android 16 (API 36) and roughly 2 GB of free RAM for the model.

Full detail: the 0.7.2 section of the changelog.