Skip to content

Vibe 3.1.115

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Oct 15:30
v3.1.115
59bbd49

Vibe 3.1.115

What's new in this update

  • Changelog: server rail + button fix
  • Server rail: the + (new chat or group) at the end of a full rail was hidden under the profile bar and couldn't be scrolled into view; the rail list now leaves room for the bar (100 px)
  • Changelog: Android drag and drop fix
  • Android drag and drop: photos and videos dropped from other apps no longer fail with "Cannot open file, path = content://..."; desktop_drop's own Android listener (on the content view, so it got drops before Vibe's handler) is removed on every resume, so Vibe's handler copies the dropped file first
  • Changelog: Google Play app ID app.vibe.chat
  • Google Play version uses app ID app.vibe.chat (com.vibe.app is taken on Play by another developer); GitHub keeps com.vibe.app, so existing installs and chats are untouched
  • Changelog: Google Play policy changes (Report in the message menu, terms of use, Play build without photo-library permission, storage permissions limited, Play name)
  • Google Play policies: Report in the message menu, terms of use (with child-safety section) agreed to on the sign-in screen, Play build without photo-library permission (system photo picker, gallery saving without permission), storage permissions limited to the Android versions that use them, Play name without the Matrix trademark
  • Licences: font licence texts ship with the app and appear with every library's licence under About > Open-source licences; sticker fonts credited; README states the AGPL modified-version notice, bundled third-party material and a Discord trademark disclaimer (also on the website); Play listing without other brands; licence check for every Dart package in the security scans
  • Security scan notes: every MobSF finding explained with its real source (both CBC hits are library code: AndroidX Biometric's dummy key for the fingerprint prompt, ExoPlayer's HLS AES-128 decryptor), what was fixed and what is by design
  • Google Play: workflow that builds the Play app bundle (.aab), listing and Data safety pack in docs/play, account deletion page on the website
  • Google Play build: no built-in updater when built with VIBE_STORE=play (opens the Play Store instead); background service declares only the two types Vibe uses (messaging connection, short task), unused camera/microphone/screen-capture types removed
  • Website and README: install and update Vibe with Obtainium (straight from the GitHub releases)
  • Android hardening from the MobSF scan: boot receivers no longer open to other apps, unused library parts removed (Assistant shortcut trampoline, profile installer receiver), no unverifiable matrix.to link handler. Website and README: 0 of 432 trackers, security scans explained
  • Security scans: show MobSF high-risk details, trackers, abused permissions and secrets on the run page
  • Security scans: read MobSF code findings in either report layout
  • Security scans: show which file or library each MobSF code finding comes from
  • Security scans: findings shown as warnings on the run page; CodeQL action v4
  • Security scans workflow: CodeQL (release workflows), OSV-Scanner (known holes in dependencies), MobSF (OWASP MASVS checks on the released APK); separate from releases
  • Notifications and previews: text stickers say 'sent a sticker' (not 'sent a picture'), no emojis in message, notification and system texts (all languages), 'sent a photo', 'sent an audio message', 'sent a voice message'. Thread pane: iPhone-style sheet slide (Apple's sheet curve), no live blur on Android (it made the slide stutter), messages slide in only after the pane lands
  • IPhone build: choose which Mac to build on (Intel ones when GitHub's Apple-silicon Macs are busy), and give up after 60 minutes instead of hanging
  • IPhone: the IPA's build number now matches the AltStore/SideStore source (it was always 1, so SideStore refused to install 3.1.114); the build stops if they ever differ
  • Website: Download APK opens the newest release's notes, size and date with a direct download button (falls back to GitHub if the release can't be read); release notes skip the AltStore bot commit

An end-to-end encrypted messenger for Android, built on Matrix.

Download: tap Vibe-3.1.115.apk below, then open it to install
(allow "Install unknown apps" for your browser when Android asks).

Updating: install the new APK over the old one; your chats stay.

Free and open source (AGPL-3.0), based on FluffyChat.

SHA-256: 5fe51508469e3e18f57fe0ba32f689fce6ea147ff59ff5643512e702414e48d7

VirusTotal: 0 / 75 engines flagged it (report)

Assets 3
Loading