Skip to content

Aura Wallet v27.27.40

Choose a tag to compare

View all tags
@aurabitcoinwallet aurabitcoinwallet released this 01 Aug 12:04
v27.27.40
7680f50
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Aura Wallet v27.27.40

This source release improves repository maintainability and strengthens several
security boundaries.

Highlights

  • Centralized the official project URL as aurabitcoinwallet/aura-wallet for the
    About and open-source/welcome experience.
  • Require HTTPS for custom block explorers, reject credential-bearing URLs, and
    validate transaction IDs before opening an external link.
  • Remove unused iOS permission metadata and the local-network ATS exception.
  • Replace a deprecated text-encoding dependency and add a test for runtimes where
    native text encoding APIs are unavailable.
  • Add strict linting, type checks, security invariants, Bitcoin test vectors,
    cryptographic self-tests, CodeQL, dependency auditing, and an Android build gate.
  • Pin third-party GitHub Actions to full commit SHAs.
  • Add contribution, release, conduct, issue, and pull-request guidance.
  • Remove SECURITY.md while retaining GitHub private vulnerability reporting.

Verification

  • CI verification: passed
  • Android debug build: passed
  • CodeQL JavaScript/TypeScript analysis: passed
  • Dependency audit: 0 known vulnerabilities at release time
  • Bitcoin vectors: 17/17 passed
  • Crypto/signing self-test: 24/24 passed

This is a source-code release. No production APK or IPA is attached. Production
mobile binaries must be built and signed with the authorized release credentials.
No software wallet can be guaranteed absolutely secure; users should verify builds
and protect recovery phrases and private keys offline.

Assets 2
Loading