Skip to content

v1.1.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 12:29
v1.1.6
This tag was signed with the committer’s verified signature.
kwsantiago Kyle 🐆
GPG key ID: 23AE8A8EA7E24E38
Verified
Learn about vigilant mode.
0c16273
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Pins Keep to v0.5.0: bundles the keep v0.5.0 core (see the keep v0.5.0 release).
  • Security hardening (via keep-mobile): closes a set_active_share check-then-set (TOCTOU) race; the NIP-98 HTTP-auth approval prompt now surfaces the URL and method being authorized; RNG health-check failures fail closed (return an error) instead of panicking; and cryptographic dependencies are advanced past recent RUSTSEC advisories.
  • Test coverage: adds an instrumented test for the NIP-55 approval-flow kill switch.

Note: the CLI/desktop-facing v0.5.0 features (threshold-OPRF unlock, software DKG, HD FROST wallets) are not yet surfaced in the Android app; this release delivers the underlying core security fixes to app users.

Install

Download keep-android-v1.1.6-arm64-v8a.apk (most phones) or keep-android-v1.1.6-x86_64.apk from the Assets section below. Min SDK 33 (Android 13+).

Verify

sha256sum -c SHA256SUMS

Full changelog

v1.1.5...v1.1.6

Assets 5
Loading