What's Changed
New
- One-tap quick note card on ToolsPage, with undo toast
Fixed
- Migrated to Room 3 (bundled driver) to fix raw queries occasionally reading stale data; NotesViewModel is now a singleton shared with GraphQL
- Moved all Room entity state into primary constructors so data-class equals covers every column, with a guard test
- Pinned GraphQL ID/Instant scalar names to prevent R8 obfuscation breakage
Security
VirusTotal Scan
| File | Status | Scan Report |
|---|---|---|
PlainApp-3.3.20-64bit-Recommended.apk |
✅ 0/65 Clean | View Report |
PlainApp-3.3.20-Old-32bit.apk |
✅ 0/65 Clean | View Report |
PlainApp-3.3.20-Google-Play.aab |
✅ 0/60 Clean | View Report |
SLSA Provenance (Level 3)
The .intoto.jsonl file is a signed SLSA provenance document covering all release artifacts (APKs + AAB).
Verify with slsa-verifier:
slsa-verifier verify-artifact PlainApp-3.3.20-64bit-Recommended.apk \
--provenance-path multiple.intoto.jsonl \
--source-uri github.com/plainhub/plain-app