Skip to content

FlowPilot v1.0.1 — Security & Reliability Update

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 12:20
v1.0.1
dcf9551

⚡ FlowPilot v1.0.1 — Security & Reliability Update

This release hardens privacy, improves background reliability, and updates the release and documentation workflow.

🔒 Security & Privacy

  • Redacts SMS sender numbers from generated rule names, imported/updated rules, UI summaries, and execution history.
  • Migrates legacy SMS-generated names and history entries to privacy-safe names while preserving custom names.
  • Redacts webhook URLs, paths, queries, headers, bodies, credentials, and raw exception details from logs and failure output.
  • Protects backup export/share flows from webhook credential disclosure and explains partial exports and destructive Replace All restore behavior.
  • Keeps webhook URL validation restricted to explicit http/https schemes with bounded timeouts and safe template handling.
  • Preserves restricted-permission and background-location disclosure in project documentation.

⚙️ Reliability & Battery

  • Serializes automation engine lifecycle transitions and prevents stale sensor/polling work after shutdown.
  • Reduces unnecessary UsageStats, battery, Wi-Fi, and sensor work while preserving trigger behavior.
  • Makes widget and Quick Settings engine toggles atomic and reports real running/failure state.
  • Bounds schedule catch-up and prevents duplicate minute execution.
  • Adds safer permission/API handling for Android 8.0–16 compatibility.

🧪 Verification

  • Unit tests: passed.
  • Android lint: passed.
  • Debug APK build: passed.
  • Unsigned release APK validation: passed.
  • GitHub Actions Android CI: passed, including 6 instrumentation tests with 0 failures.
  • Release APK is signed by GitHub Actions and includes a SHA-256 checksum.

📥 Installation

  1. Download FlowPilot-v1.0.1.apk from Assets below.
  2. Install on Android 8.0+ (API 26–36).
  3. Set up Shizuku for privileged system actions when needed.

SHA-256 Checksum

sha256:d56fc69fed3431093d139f1a22d6b47550b50afea9238ee5e1a45c00a07fc357

📱 Compatibility

Developed and tested primarily on Xiaomi HyperOS (Xiaomi 15T Pro). Other OEM devices may require different permissions or battery-management settings.

⚠️ Upgrade note

This release changes generated SMS rule/history names to remove sender-number data. Custom rule names remain unchanged.

Assets 4
Loading