SyncFlow v1.1.1

Highlights

• Android companion APK ships with this release — same tag pipeline builds all desktop artifacts and the Android APK (SyncFlow-1.1.1-android.apk), with SHA-256 sums and build-provenance attestation.
• Upload resume-after-interrupt — a dropped connection keeps staged bytes for 30 minutes; the companion asks transfer:upload:resume, skips completed files and appends to the partial file. No more re-sending a 8 GB file because Wi-Fi blinked.
• Companion receive push — the phone pulls files over the authenticated WebSocket, verifies SHA-256 and saves via the system share sheet; QR connect (in-app camera scan, system-camera deep link, manual entry) and local notifications for new activity.
• SAS device verification (landed right after this tag) — a 16-icon out-of-band fingerprint to verify pairing against man-in-the-middle.

Housekeeping

• Tailwind CSS 4 and React 19 (build-time only).
• Companion web CSP now lists explicit ws://*:*/http://*:* sources — Chromium treats omitted-port sources as default-port-only, which blocked every LAN WebSocket from browsers and the Android WebView.

What's Changed

• Bump actions/attest-build-provenance from 2 to 4 by @dependabot[bot] in #16
• Bump react and @types/react by @dependabot[bot] in #19
• Bump tailwindcss from 3.4.19 to 4.3.3 by @dependabot[bot] in #22

Full Changelog: v1.1.0...v1.1.1