v1.0.3

Packaging fix for F-Droid reproducible builds.

• Exclude the AGP dependency-metadata block from the signed APK, which F-Droid
  requires for its reproducible cross-signing.

App behaviour is unchanged from 1.0.1.

v1.0.2

Build and packaging fixes for F-Droid inclusion.

• Compile :core without a provisioned JVM toolchain so the app builds on
  F-Droid's reproducible-build server.
• Set the app version as inline literals so F-Droid detects new releases.

App behaviour is unchanged from 1.0.1.

v1.0.1

Pre-release hardening and F-Droid submission prep.

• Derive app version entirely from the git tag (monotonic versionCode).
• Harden backup / data-extraction rules to a fail-safe allowlist.
• Pin the Gradle distribution SHA-256; add osv-scanner dependency scan to CI.
• Add security policy (SECURITY.md) and privacy disclosure (docs/PRIVACY.md).

Core functionality is unchanged from v1.0.0:

• Clean tracking parameters from URLs with the bundled ClearURLs ruleset.
• Share target, Quick Settings tile, and in-app editor with before/after diff.
• Offline by default; optional opt-in link unshortening and ruleset updates.

v1.0.0

Initial release. Signed APK is attached automatically by the release workflow.