v1.0.9 · Albatross

What's New (Security Update)

• fix(core): security findings from claude opus 5.5 (by @areebahmeddd) [4749185]
• feat(identity): transfer to a new phone (by @areebahmeddd) [d695f3c]
• feat(wallet): redesign the wallet screen (by @areebahmeddd) [a289c36]
• refactor: cleanup kotlin and swift code (by @areebahmeddd) [29a8b2b]

Full changelog: v1.0.8..v1.0.9

Verify this download

The APK is signed with the Airhop release key (package org.onemindlabs.airhop). This workflow refuses to publish an APK signed by anything else, so the check below should print exactly one signer with this digest:

apksigner verify --print-certs airhop.apk
Signer #1 certificate SHA-256 digest: 60d09487087c3ea4c3fbb325aebd354be629be99092020dc48b578065c18a949

It also carries SLSA build provenance. This checks it was built by this repository's release workflow from tag v1.0.9, on a GitHub-hosted runner:

gh attestation verify airhop.apk --repo areebahmeddd/airhop \
  --signer-workflow areebahmeddd/airhop/.github/workflows/release.yml \
  --source-ref refs/tags/v1.0.9 --deny-self-hosted-runners

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.9-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.9-sources.sha256
git checkout v1.0.9 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.8 · Albatross

What's New

• feat(chat): filter sheet on the chats screen and a verified badge (by @areebahmeddd) [9f18d90]
• fix(lan): heartbeat and close idle links, time out dials on both platforms (by @areebahmeddd) [ab76b5a]
• fix(wifi): pause wifi aware for the session when it keeps resetting the phone's wifi (by @areebahmeddd) [b89faec]
• fix(ring): hand a foreground ring to the tray when the app is backgrounded (by @areebahmeddd) [09bb8c2]

Full changelog: v1.0.7..v1.0.8

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.8-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.8-sources.sha256
git checkout v1.0.8 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.7 · Albatross

What's New

• fix: wifi aware connection logic with retries, heartbeats and self-healing discovery (by @areebahmeddd) [25900a6]
• fix: ring alert functionality and notification handling (by @areebahmeddd) [31d26f9]

Full changelog: v1.0.6..v1.0.7

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.7-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.7-sources.sha256
git checkout v1.0.7 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.6 · Albatross

What's New

• feat: add Ring, an opt-in urgent alert (by @areebahmeddd) [9fa8205]
• feat: add APK sharing on Android (by @areebahmeddd) [b020162]
• feat: add auto-start feature on device boot (by @areebahmeddd) [8df606e]
• fix(lan): implement network state watchers for improved connectivity handling (by @areebahmeddd) [699c9d0]
• fix(wifi-aware): recognise a peer across its session restart, restart idle discovery (by @areebahmeddd) [996969f]

Special thanks to @robdplatt for identifying and reporting several issues in production! 🙂

Full changelog: v1.0.5..v1.0.6

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.6-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.6-sources.sha256
git checkout v1.0.6 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.5 · Albatross

Note

The APK is significantly larger because Arti (Tor) is now bundled with the Android app, including bridge and pluggable transport support for enhanced privacy on censored networks.

What's New

• feat: add diagnostics sharing + other fixes (by @areebahmeddd) [ae081d1]
• feat: privacy cover for app switcher (by @areebahmeddd) [e391a97]
• fix: display new banner messages based on local transport states (by @areebahmeddd) [63e20d3]
• chore: update dependencies and improve platform compatibility with wifi aware (by @areebahmeddd) [d58d513]

Full changelog: v1.0.4..v1.0.5

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.5-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.5-sources.sha256
git checkout v1.0.5 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.4 · Albatross

Note

The APK is significantly larger than the previous release because Arti (Tor) is now bundled with the Android app, including bridge and pluggable transport support for additional privacy on censored networks.

What's New

• feat: LAN transport over mDNS and TCP (by @areebahmeddd) [6a9f1b2]
• feat: add bridges and pluggable transports for Tor (by @areebahmeddd) [7477564]
• feat: embedded Tor via Arti on iOS and Android (by @areebahmeddd) [3790036]

Full changelog: v1.0.3..v1.0.4

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.4-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.4-sources.sha256
git checkout v1.0.4 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.3 · Albatross

What's New

• feat: Wi-Fi Aware fast path for iOS (by @areebahmeddd) [99b000f]
• feat: auto-updater for Android (by @areebahmeddd) [d576d16]
• refactor: mesh service to utilize LinkRegistry for managing links across radios (by @areebahmeddd) [1dee3ed]

Special thanks to @robdplatt for identifying and reporting several issues in production! 🙂

Full changelog: v1.0.2..v1.0.3

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.3-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.3-sources.sha256
git checkout v1.0.3 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.2 · Albatross

What's New

• feat: improve ui/ux, micro-interactions and onboarding experience (by @areebahmeddd) [c6efeb6]
• feat: add setProvenKeys to bind mesh keys to contacts (by @areebahmeddd) [9a00889]
• feat: add unseen peers tracking and update Mesh screen behavior (by @areebahmeddd) [cb5fb41]
• fix(wifi): wait for the responder before requesting the Aware data path (by @areebahmeddd) [a497193]
• fix(permissions): check optional grants in the fast path (by @areebahmeddd) [13bf94e]

Full changelog: v1.0.1..v1.0.2

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.2-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.2-sources.sha256
git checkout v1.0.2 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.1 · Albatross

What's New

• feat: add support for 35 languages (by @areebahmeddd) [4396db4]
• feat: enhance relay management and discovery features (by @areebahmeddd) [6d217a4]
• feat: add funding.json and manifest files (by @areebahmeddd) [73c5493]
• fix: static HTML plugin with inline boot script and CSP support (by @areebahmeddd) [a06ff32]

Full changelog: v1.0.0..v1.0.1

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.1-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.1-sources.sha256
git checkout v1.0.1 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.

v1.0.0 · Albatross

What's New

• refactor: file and folder structure (#30)

Full changelog: v0.9.15..v1.0.0

Verify this download

The APK is signed with the Airhop release key and carries SLSA build provenance from this repository.

gh attestation verify airhop.apk --repo areebahmeddd/airhop

The same provenance is attached as airhop.apk.intoto.jsonl for offline checks.

Verify the source

airhop-v1.0.0-sources.sha256 lists the SHA-256 of every tracked file in this release.

sha256sum -c airhop-v1.0.0-sources.sha256
git checkout v1.0.0 && git status --porcelain

The second command must print nothing. Hashes prove the listed files are unmodified; only an empty status proves no extra file was added, and the build compiles whatever is present.