Auto-Ledger Driver App v1.0.1 – Security Fix & Firebase Keys Rotation

🔐 Security Release – Critical Fix

This release addresses a security vulnerability where Firebase API keys were exposed in the repository.

⚠️ Important Notes

• All Firebase API keys have been revoked and rotated
• Keys are now stored securely in .env file (not tracked by Git)
• v1.0.0 APK is compromised – DO NOT USE
• All users MUST update to v1.0.1

---

✨ What's Changed

🔒 Security

• Revoked and rotated all leaked Firebase API keys
• Moved all Firebase keys to .env file
• Updated firebase_options.dart to load keys from .env
• Added Firebase sensitive files to .gitignore
• Removed leaked keys from entire Git history (all branches)

📦 Build

• Signed release APK with release keystore
• SHA-1 and SHA-256 fingerprints added to Firebase Console

---

📱 APK Download

Download app-release.apk

---

🔧 How to Update

1. Uninstall previous version (v1.0.0) from your device
2. Download and install v1.0.1 APK
3. Login with your existing credentials

---

📋 Technical Details

Changed Files

• lib/firebase_options.dart – Now loads keys from .env
• android/app/google-services.json – Updated with new keys
• .env – New file containing all Firebase keys (not tracked by Git)
• .gitignore – Added Firebase sensitive files

Security Improvements

• No hardcoded API keys in source code
• Keys loaded from environment variables at runtime
• Git history cleaned of all leaked credentials

---

⚠️ WARNING: Do NOT use v1.0.0

The previous release (v1.0.0) contains exposed Firebase API keys. Please update immediately.

---

🚀 Installation Instructions

Android

1. Download the APK file above
2. Enable "Install from unknown sources" if required
3. Open the APK file and install
4. Login with your credentials

---

📞 Support

For issues or questions, please open a GitHub issue.

---

🔗 Links

• 🔒 Security Advisory
• 📚 Documentation
• 🐛 Report Issue

---

Release Date: June 27, 2026