Data Usage Tracker 3.4.0

Moving a phone from the 1.2 app to a release-signed build no longer leaves it in the sidebar twice.

Added

• npm run android:merge folds a phone's old history into the id it reports under now. The reporter app's device id lives only on the phone, so uninstalling and reinstalling the app gives it a new one and the dashboard shows the phone twice. That is unavoidable once when moving from the debug-signed 1.2 (from 3.1.1) to 1.3 or later, because Android refuses an update across signing keys. With no arguments it lists the phones, their ids and app versions; --from <old id> --into <new id> shows what would move; --apply backs the database up beside your backup and merges. Where both ids hold the same bucket, the larger reading is kept, as at every sync.

Fixed

• npm run android:ssid works with a release-signed app. It read the phone's device id with run-as, which Android allows only for a debuggable build, so since 1.3 it stopped at "Could not read the reporter app's device id". It now takes --device <id>, or uses the one phone in the database with the handset's brand and model, and stops and lists them when more than one matches.

Security

• next 15.5.27, for two cache-poisoning advisories affecting SSG and ISR pages, and through it sharp 0.35.5 (librsvg) and source-map-js 1.2.2. Exposure here was small: nothing uses ISR, the only prerendered pages are the login page and the manifest, and image optimisation is off, so sharp never ran.

Upgrading

git pull, npm ci, npm run build, then restart the dashboard.

The Android app is unchanged: use data-usage-reporter-1.4.apk from the 3.3.0 release. If a phone runs 1.2, uninstall it first, install 1.4, enter the address and token again, grant usage access and sync once. Then run npm run android:merge to find the phone's old and new ids and merge them.

If the install still fails after uninstalling ("package conflicts with an existing package"), a copy is left in another profile such as Private Space, Dual Apps or a work profile, or the uninstall kept the app's data. With the phone on USB, adb uninstall com.naimul.datausage removes it for every user.