1.33.6

What's Changed

• 1.33.4 in master by @ThomasSession in #2122
• Release/1.33.4 in dev by @ThomasSession in #2123
• [Automated] Update translations from Crowdin by @stfsession in #2138
• Update donation CTA with new copy and image by @jagerman in #2139
• chore: update pro backend url by @Bilb in #2142
• Add release-pipeline automation scripts by @jagerman in #2140
• Pro backend 0.2 + libsession 1.7 compatibility updates by @jagerman in #2144
• Fixed community file url generation, bumped dependency causing crash by @mpretty-cyro in #2143
• [Automated] Update translations from Crowdin by @stfsession in #2141
• Bake non-translatable constants into strings.xml and stop substituting at runtime by @mpretty-cyro in #2146
• Pro redemption reflow (Android): implicit redemption + libsession-owned renewal by @jagerman in #2147
• Release tooling improvements by @jagerman in #2149
• fix: allow devnet url switch from app start intent for qa by @Bilb in #2148
• Remove the pre-launch Pro gating by @jagerman in #2150
• More pro fixes by @jagerman in #2152
• Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.10.0 to 1.11.0 by @dependabot[bot] in #2128
• Bump gradlePluginVersion from 9.1.0 to 9.1.1 by @dependabot[bot] in #2129
• Bump glideVersion from 5.0.5 to 5.0.7 by @dependabot[bot] in #2132
• Bump androidx.navigation:navigation-compose from 2.9.7 to 2.9.8 by @dependabot[bot] in #2133
• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2136
• Bump actions/cache from 5 to 6 by @dependabot[bot] in #2137
• Bump com.autonomousapps.dependency-analysis from 3.6.1 to 3.9.0 by @dependabot[bot] in #2131
• Pro: QA backend override, a proof-acquisition floor, and a unit-test class-init fix by @mpretty-cyro in #2153
• Bump androidx.compose:compose-bom from 2026.03.01 to 2026.06.01 by @dependabot[bot] in #2158
• Bump com.squareup.okhttp3:okhttp from 5.3.2 to 5.4.0 by @dependabot[bot] in #2161
• Bump lifecycleVersion from 2.10.0 to 2.11.0 by @dependabot[bot] in #2157
• Bump org.jetbrains.kotlinx:kotlinx-collections-immutable from 0.4.0 to 0.5.1 by @dependabot[bot] in #2160
• Bump coilVersion from 3.4.0 to 3.5.0 by @dependabot[bot] in #2159
• Fix the dev build: compileSdk 37 and Hilt 2.60.1 by @mpretty-cyro in #2162
• Pro: separate the status and proof refresh loops, and make the freshness floor real by @mpretty-cyro in #2155
• [Automated] Update translations from Crowdin by @stfsession in #2156
• Pro: show hero copy in every Pro status, not just never-subscribed and the sheet by @mpretty-cyro in #2163
• [Automated] Update translations from Crowdin by @stfsession in #2165
• Pro: tag each message-info feature row for QA by @Bilb in #2166
• Pro: split access from display, and stop upselling an active plan by @mpretty-cyro in #2164
• Pro: correct the link destinations and read the home CTA windows from network time by @mpretty-cyro in #2167
• Pro: declare message features from the proof, not the plan's state by @mpretty-cyro in #2173
• QA: give the message "Read more" affordance an accessibility id by @mpretty-cyro in #2175
• fix: add mocking logic for refund screens by @Bilb in #2176
• Pro: withhold message features from a revoked sender by @mpretty-cyro in #2177
• Bump pagingCommonVersion from 3.4.2 to 3.5.1 by @dependabot[bot] in #2168
• Bump sqliteKtxVersion from 2.6.2 to 2.7.0 by @dependabot[bot] in #2170
• Bump com.google.devtools.ksp from 2.3.6 to 2.3.11 by @dependabot[bot] in #2171
• Bump glideVersion from 5.0.7 to 5.0.9 by @dependabot[bot] in #2172
• Add QA test tags to the shared Open URL confirmation dialog by @Bilb in #2178
• Notifications: report fast mode unavailable on the website flavour by @mpretty-cyro in #2181
• App lock: cover the app instead of destroying it, and let debug builds lock at all by @mpretty-cyro in #2180
• QA: allow a launch extra to name the file server by @mpretty-cyro in #2183
• Attachments: always use stream encryption for uploads by @mpretty-cyro in #2184
• Media: describe a thumbnail by whether it could be decoded by @mpretty-cyro in #2186
• feat: route refunds through Session's own two links, and branch the non-originating screen by @Bilb in #2182
• feat(qa): make the Pro stats counts readable to a test by @Bilb in #2187
• Count the Pro sent stats as running totals, and stop community messages duplicating by @mpretty-cyro in #2192
• Bump media3ExoplayerVersion from 1.10.0 to 1.11.0 by @dependabot[bot] in #2188
• Bump androidx.fragment:fragment-ktx from 1.8.9 to 1.9.0 by @dependabot[bot] in #2190
• Bump androidx.constraintlayout:constraintlayout from 2.2.1 to 2.2.2 by @dependabot[bot] in #2191
• Fix: server request paths were built with a doubled slash by @mpretty-cyro in #2193
• [Automated] Update translations from Crowdin by @stfsession in #2179
• Remove a dead rotating-key constant that contradicts the real design by @mpretty-cyro in #2194
• qa: tag the clear-data radios so the network branch is testable by @Bilb in #2195
• fix: confirm a device-only clear for every account, not just Pro by @Bilb in #2196
• Bump libsession-util-android for the pro-recover url by @Bilb in #2197
• A revoked proof keeps the synced access expiry, and a lapse stores the dates it returns by @mpretty-cyro in #2198
• QA: let a launch extra state whether the app counts as updated by @mpretty-cyro in #2201
• A community learned from another device kept its token as the title by @mpretty-cyro in #2202
• Review triggers were lost when the user left the screen immediately by @mpretty-cyro in #2200
• [Automated] Update translations from Crowdin by @stfsession in #2199
• Bump libsession-util-android for the refund-android url by @Bilb in #2203
• Pro: turn the badge on when an account gets its first ever proof by @mpretty-cyro in #2214
• Fix: an onion path could run through the node it was addressed to by @mpretty-cyro in #2221
• Don't let an in-flight poll undo a cursor reset by @mpretty-cyro in #2220
• Fix: GroupUpdated send jobs could not be read back after a restart by @mpretty-cyro in #2211
• [Automated] Update translations from Crowdin by @stfsession in #2212
• build(deps): bump actions/setup-java from 5 to 6 by @dependabot[bot] in #2206
• build(deps): bump io.github.webrtc-sdk:android from 144.7559.01 to 144.7559.14 by @dependabot[bot] in #2208
• build(deps): bump com.google.gms.google-services from 4.4.4 to 4.5.0 by @dependabot[bot] in #2209
• Correct the cursor reset docs by @mpretty-cyro in #2223
• Keep protobuf's parseFrom so the GroupUpdated serialization fix survives the shrinker by @mpretty-cyro in #2224
• Fix: a duplicate group invite demoted a member who had already joined by @mpretty-cyro in #2218
• Fix: onion path rotation could never escape a bad guard node by @mpretty-cyro in #2217
• Fix: leaving a group we hold no encryption keys for retried forever by @mpretty-cyro in #2210
• Handle keystore and VACUUM failures on the database-open path instead of crash-looping (#2213) by @mpretty-cyro in #2219
• Share: stage attachments instead of sending on selection, and resolve only content:// URIs by @mpretty-cyro in #2222
• Renew config message TTLs at most once an hour per swarm by @mpretty-cyro in #2225
• [Automated] Update translations from Crowdin by @session-localisation[bot] in #2230
• Pro: restore the Session Pro gate, off by default by @mpretty-cyro in #2226
• Run the Gradle daemon on any JDK 21 and download it from Adoptium by @mpretty-cyro in #2234
• Erase group entries a config merge recreated after another device erased them by @mpretty-cyro in #2233
• [Automated] Update translations from Crowdin by @session-localisation[bot] in #2231
• Show a placeholder for messages this version can't process, and retain them by @mpretty-cyro in #2232
• Bump version to 1.33.6 (454) by @mpretty-cyro in #2235

New Contributors

• @jagerman made their first contribution in #2139
• @Bilb made their first contribution in #2142
• @session-localisation[bot] made their first contribution in #2230

Full Changelog: 1.33.4...1.33.6

Signature of release files

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Signed SHA256 hashes of release files. These are signed using Jason's GPG
key available at:
 - the oxen-io/oxen-core repository, at /utils/gpg_keys/Jason.asc
 - OpenPGP key servers (Jason Rhinelander <jason@session.foundation>, C4992CE7A88D4262)
 - https://deb.session.foundation/public.gpg
 - https://imaginary.ca/public.gpg
 - https://github.com/jagerman.gpg

61f62f6841f77b77847673743cd4bcb55ef880891f79177c4d5df9a0478dd4fe  app-play-release.aab
7ac73919b9d4a18aa97f6c4d17fdeb3bd0f657b6a3f3add92af192b64bf07223  session-1.33.6-arm64-v8a-play-release.apk
7e3b9e8bdcda283f7d5b3a802d278080140ff47e81699117bc5a5388dd987d95  session-1.33.6-armeabi-v7a-play-release.apk
10235d95e3fa5907cac86678247423411cd5236bacd43583fdf77d2bee549963  session-1.33.6-universal-huawei-release.apk
93bb1d79fd1b509bda16bf85f7b3512aaee85c9a9793533b46bc37b73f863e86  session-1.33.6-universal-play-release.apk
6ddfb0d2f3556a2ac7c9fbbb2bb37ef2b44485849e2fd6109cf1ca54c18a3ac9  session-1.33.6-x86_64-play-release.apk
a9083045c0f695242c09013256a803480fb16425875b70aaafc6fa8a0e2dfeae  session-1.33.6-x86-play-release.apk
-----BEGIN PGP SIGNATURE-----
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=nNPm
-----END PGP SIGNATURE-----