v2.9.3

• [#3492] Fix #GHSA-vgwr-4w3p-xmjv (Arbitrary file writes on Windows). (Thanks Cl0udG0d)

Full Changelog: v2.9.3...v2.9.3
Doc Site: https://apktool.org/blog/apktool-2.9.3
Release Blog: https://connortumbleson.com/2024/01/20/apktool-v2-9-3-released/

v2.9.2

• [#3484] Fix #GHSA-2hqv-2xv4-5h5w (Arbitrary file writes). (Thanks 0x33c0unt)

Full Changelog: v2.9.1...v2.9.2
Doc Site: https://apktool.org/blog/apktool-2.9.2
Release Blog: https://connortumbleson.com/2024/01/05/apktool-v2-9-2-released/

v2.9.1

What's Changed

• feat: Upgrade gradle to v8.4 by @ArjunaKumarMohanta in #3376
• build(deps): bump docker/build-push-action from 4 to 5 by @dependabot in #3384
• build(deps): bump docker/login-action from 2 to 3 by @dependabot in #3385
• build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot in #3386
• refactor: support current position during chunk verbose output by @iBotPeaches in #3395
• use apiLevel instead of forceApi when building the apk by @JoshMiers-FS in #3399
• build: test on lts versions (including 21) by @iBotPeaches in #3381
• build: docker fixes by @iBotPeaches in #3378
• feat: de-dupe attribute names during styles writing by @iBotPeaches in #3404
• Update Docker build instructions after #3363 by @jabagawee in #3407
• build(deps): bump commons-io:commons-io from 2.14.0 to 2.15.0 by @dependabot in #3412
• build(deps): bump commons-cli:commons-cli from 1.5.0 to 1.6.0 by @dependabot in #3413
• build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 by @dependabot in #3414
• Adapt null resource to be treated as reference instead of empty string. by @iBotPeaches in #3417
• build: patch aapt2 to ignore private resources (unix/win) by @iBotPeaches in #3396
• build: remove docker by @iBotPeaches in #3423
• test: add test case for android:isAccessibilityTool by @iBotPeaches in #3426
• #3427 - Treat manifest warnings as warnings by @iBotPeaches in #3429
• build(deps): bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 by @dependabot in #3443
• build(deps): bump com.guardsquare:proguard-gradle from 7.4.0 to 7.4.1 by @dependabot in #3444
• build(deps): bump gradle/gradle-build-action from 2.9.0 to 2.10.0 by @dependabot in #3445
• fix: support alignment towards resTable_entry start by @iBotPeaches in #3452
• build(deps): bump commons-io:commons-io from 2.15.0 to 2.15.1 by @dependabot in #3453
• build(deps): bump actions/setup-java from 3 to 4 by @dependabot in #3454

New Contributors

• @JoshMiers-FS made their first contribution in #3399
• @jabagawee made their first contribution in #3407

Full Changelog: v2.9.0...v2.9.1
Doc Site: https://apktool.org/blog/apktool-2.9.1
Release Blog: https://connortumbleson.com/2023/12/06/apktool-v2-9-1-released/

v2.9.0

What's Changed

• test: add failing/passing sparse/not-sparse test by @iBotPeaches in #3201
• Fix LocaleNumberSystem + ConfigFlag reading by @iBotPeaches in #3205
• Streamline decoding AndroidManifest.xml by @sv99 in #3171
• fix: support skipping unread header sizes of ResChunk by @iBotPeaches in #3180
• fix: support skipping entries with NO_ENTRY (-1) flag by @iBotPeaches in #3209
• fix: handle larger axml namespace headers than known by @iBotPeaches in #3210
• Explicit ResFileDecoder initialization in the decodeResources by @sv99 in #3211
• build(deps): bump gradle/gradle-build-action from 2.6.0 to 2.6.1 by @dependabot in #3213
• build(deps): bump gradle/wrapper-validation-action from 1.0.6 to 1.1.0 by @dependabot in #3214
• Support explicit operation for when to load full resource table by @sv99 in #3217
• fix: adjust helper files to include system property sets by @iBotPeaches in #3215
• feat: Introduce --no-compile-sdk-metadata by @iBotPeaches in #3208
• "--no-compile-sdk-metadata" tests. by @iBotPeaches in #3220
• fix: end parsing if EOF is hit by @iBotPeaches in #3223
• suppress javadoc lint warning by @sv99 in #3222
• Remove SnakeYAML for manual YAML Parser by @sv99 in #3191
• fix: Gradle wrapper validation trigger issue by @ArjunaKumarMohanta in #3228
• Manual YAML Cleanup by @iBotPeaches in #3229
• Support empty resource table. by @iBotPeaches in #3230
• refactor: clean up style and redundancy by @IgorEisberg in #3232
• fix: support duplicated namespaces by @iBotPeaches in #3233
• fix: resolve missing namespace on system resources by @iBotPeaches in #3234
• Move to XMLUnit Legacy by @iBotPeaches in #3235
• fix: skip unknown chunks in AXML by @iBotPeaches in #3237
• fix: skip files that attempt to break filesystem by @iBotPeaches in #3238
• build(deps): bump gradle/gradle-build-action from 2.6.1 to 2.7.0 by @dependabot in #3241
• Hardened String Block Parser by @iBotPeaches in #3239
• build(deps): bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 by @dependabot in #3240
• in the ApkDecoder use apkFile and unknownFiles from ApkInfo by @sv99 in #3242
• merge ResAttrDecoder into the AXmlResourceParser by @sv99 in #3243
• Migrate to Gradle Kotlin DSL by @iBotPeaches in #3249
• fix: support decoding application with duplicate res entries by @iBotPeaches in #3252
• fix: support encode styled string if length larger than offset by @iBotPeaches in #3254
• refactor: change naming pattern of class variables in StringBlock by @iBotPeaches in #3256
• Remove Apktool Dummys. by @iBotPeaches in #3258
• build: upgrade to shadow build 8.1.1 by @iBotPeaches in #3259
• Refactor logging for chunks and sparse flags. by @iBotPeaches in #3260
• refactor: split out string block vs res table string by @iBotPeaches in #3267
• refactor: remove unused decodeManifest function by @iBotPeaches in #3268
• refactor: remove deprecations from test suite by @iBotPeaches in #3269
• refactor: remove unneeded blocks/semicolons by @iBotPeaches in #3273
• fix: bump heap size to 1g max by @iBotPeaches in #3286
• feat: Upgrade gradle to v8.3 by @ArjunaKumarMohanta in #3275
• build(deps): bump gradle/gradle-build-action from 2.7.0 to 2.7.1 by @dependabot in #3285
• fix: correct path to archive during ci by @iBotPeaches in #3287
• feat: shorten archive name to apktool-{version}.jar by @iBotPeaches in #3289
• fix: obtain git history for proper "git describe" by @iBotPeaches in #3291
• refactor: use proper enum (0 on both) for setMethod() by @iBotPeaches in #3297
• Prevent poisioning mResTable if Framework is sparse. by @iBotPeaches in #3299
• Sponsors by @iBotPeaches in #3301
• refactor: verbose doesn't adapt handler by @iBotPeaches in #3310
• build(deps): bump gradle/gradle-build-action from 2.7.1 to 2.8.0 by @dependabot in #3316
• Feat: Introduce "res-mode" options. by @iBotPeaches in #3318
• refactor: make _options lowercase by @iBotPeaches in #3324
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #3327
• Support Disassembly of mega old Android (M5) by @iBotPeaches in #3325
• Reworks Attr/Array Handler by @iBotPeaches in #3326
• fix: enforce java 1.8 compatibility with built artifacts by @iBotPeaches in #3330
• refactor: adjust line to fit 120 length line endings in /value by @iBotPeaches in #3338
• fix: handle duplicate res entries during a complex resource by @iBotPeaches in #3347
• refactor: use static inner classes for AbstractDirectory by @iBotPeaches in #3348
• refactor: suppress last unused method return by @iBotPeaches in #3349
• build: migrate towards "libs.versions.toml" by @iBotPeaches in #3353
• fix: support more resource-modes params by @iBotPeaches in #3354
• build: add dependency graph support by @iBotPeaches in #3355
• refactor: remake android-framework jar file by @iBotPeaches in #3356
• build(deps): bump gradle/gradle-build-action from 2.8.0 to 2.9.0 by @dependabot in #3359
• build(deps): bump commons-io:commons-io from 2.13.0 to 2.14.0 by @dependabot in #3358
• Add Docker support by @Fmstrat in #3351
• Added auto-build of docker image by @Fmstrat in #3361
• build: update aapt/aapt2 with win/linux binaries by @iBotPeaches in #3360
• Android 14 Support (Partial) by @iBotPeaches in #3206
• Added support for PR builds on master by @Fmstrat in #3363
• Move aapt2 to default (from aapt1) by @iBotPeaches in #3370
• refactor: hard-code IMAGE_NAME, add some spaces by @iBotPeaches in #3371
• fix: support COMPACT/OFFSET16 packed resources. by @iBotPeaches in #3372
• Update Windows helper script to handle /c properly. by @maksz42 in #2973
• Android 14 - Support for Grammatical Inflection by @iBotPeaches in #3374
• build: restore aapt1 miui qualifiers + static by @iBotPeaches in #3379

New Contributors

• @Fmstrat made their first contribution in #3351
• @maksz42 made their first contribution in #2973

Full Changelog: v2.8.1...v2.9.0
Blog: https://connortumbleson.com/2023/10/08/apktool-v2-9-0-released/
Doc Site: https://apktool.org/blog/apktool-2.9.0

v2.8.1

What's Changed

• feat: Upgrade gradle to v8.2.1 by @ArjunaKumarMohanta in #3141
• build(deps): bump gradle/gradle-build-action from 2.5.1 to 2.6.0 by @dependabot in #3151
• fix: skip files if cleaned to empty filename by @iBotPeaches in #3166
• fix: opt out of stricter java rules for zip64 and dot entries by @iBotPeaches in #3178
• build: test on java20 by @iBotPeaches in #3177
• Correct regressions towards apktool.yml generation by @iBotPeaches in #3172
• Allows run app from gradle for debugging purposes by @sv99 in #3179
• fix: add missing hasResources check by @IgorEisberg in #3182
• Prevent loading from resource pool if type is not a resolveable resource by @iBotPeaches in #3187
• style: normalize command descs and redundancy by @IgorEisberg in #3188
• fix: crash when decompiling framework-res.apk with a tag (regression) by @IgorEisberg in #3193

Full Changelog: v2.8.0...v2.8.1
Blog of Release: https://connortumbleson.com/2023/07/22/apktool-v2-8-1-released/
Doc Site: https://apktool.org/blog/apktool-2.8.1

v2.8.0

What's Changed

• Restructure Testable Java versions. by @iBotPeaches in #2977
• feat: support config flags as low as 8 bytes by @iBotPeaches in #2982
• fix: accept empty resources.arsc by @IgorEisberg in #2998
• fix: support 10mb apktool.yml parsing by @iBotPeaches in #3015
• Upgrade gradle version to 8.0.2 by @ArjunaKumarMohanta in #3016
• build: Update dependencies by @ArjunaKumarMohanta in #3020
• build: add dependabot updates by @iBotPeaches in #3023
• build(deps): bump com.guardsquare:proguard-gradle from 7.3.1 to 7.3.2 by @dependabot in #3032
• fix: properly read 'XML_TYPE_OVERLAY_POLICY' by @iBotPeaches in #3035
• feat: Upgrade gradle to v8.1 by @ArjunaKumarMohanta in #3043
• Move to official Google smali fork by @iBotPeaches in #3051
• feat: Upgrade gradle to v8.1.1 by @ArjunaKumarMohanta in #3054
• Replace FileInputStream and FileOutputStream to nio Files by @sv99 in #3055
• feat: update internal framework to API 34 (Upside Down Cake Preview) by @iBotPeaches in #3063
• add gradle application plugin to the apktool-cli by @sv99 in #3070
• correct always wait 15 seconds by @sv99 in #3071
• fix: support 0_resource_name_obfuscated by @iBotPeaches in #3067
• build(deps): bump commons-io:commons-io from 2.11.0 to 2.12.0 by @dependabot in #3072
• build: lock gradle actions to specific versions by @iBotPeaches in #3073
• Deprecated SnakeYAML methods by @MarcMil in #3079
• build(deps): bump com.google.guava:guava from 31.1-jre to 32.0.0-jre by @dependabot in #3085
• move AndrolidExceptions to the package brut.androlib.exceptions by @sv99 in #3088
• build(deps): bump commons-io:commons-io from 2.12.0 to 2.13.0 by @dependabot in #3093
• build(deps): bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre by @dependabot in #3092
• Refactor into common Config object. by @iBotPeaches in #3100
• Move build functions from Androlib to the ApkBuilder by @sv99 in #3103
• extract class Framework from AndrolibResources by @sv99 in #3105
• refactor class ApkDecoder by @sv99 in #3106
• fix: handle invalid string id during namespace resolution by @iBotPeaches in #3107
• refactor ApkDecoder - streamline decode procedure by @sv99 in #3109
• feat: support upside-down-cake/vanilla-ice-cream sdk shorthand by @iBotPeaches in #3113
• refactor: put gradle wrapper on its own workflow by @iBotPeaches in #3114
• feat: update internal framework to API 34 (Vanilla Ice Cream) by @iBotPeaches in #3115
• feat: Upgrade gradle to v8.2 by @ArjunaKumarMohanta in #3111
• refactor: split child classes to own file for decoders by @iBotPeaches in #3116
• build(deps): bump gradle/gradle-build-action from 2.4.2 to 2.5.1 by @dependabot in #3119
• Extract into ApkInvoker and split into data classes. by @sv99 in #3124
• Correct Attribute Resolution by @iBotPeaches in #3123
• refactor: extract nextChunk() out of readLibraryType by @iBotPeaches in #3126
• test: add assertions for unknown files / assets by @iBotPeaches in #3074
• Patch aapt for ignoring duplicate bag items. by @iBotPeaches in #3130
• ARSC/AXML Parser Rework by @iBotPeaches in #3131
• Increase known config bytes to 64 by @iBotPeaches in #3133
• fix: skip parsing if chunk end is reached within table chunk by @iBotPeaches in #3134

New Contributors

• @ArjunaKumarMohanta made their first contribution in #3016
• @dependabot made their first contribution in #3032
• @sv99 made their first contribution in #3055

Full Changelog: v2.7.0...v2.8.0
Blog of Release: https://connortumbleson.com/2023/07/17/apktool-v2-8-0-released/
Doc site: https://apktool.org/blog/apktool-2.8.0

v2.7.0

What's Changed

• feat: introduce SDK_S_V2 by @iBotPeaches in #2780
• Optimize CI a bit by @Goooler in #2773
• fix: properly release resource by @auermich93 in #2783
• feat: update internal framework to API 32 (12L Release) by @iBotPeaches in #2743
• Revert "fix: decoding references to private resources" by @iBotPeaches in #2785
• New aapt/aapt2 binaries by @iBotPeaches in #2787
• test (aapt2): add assertion for "usesPermissionFlags" by @iBotPeaches in #2790
• test (aapt/aapt2): ensure ampersand is escaped on android:label by @iBotPeaches in #2802
• added option to include generic/permissive network security config file durin… by @erev0s in #2791
• fix: redesign StyledString decoding by @IgorEisberg in #2816
• Tests / Style for #2815 by @iBotPeaches in #2817
• build: cancel duplicate workflows by @iBotPeaches in #2818
• feat: update internal framework to API 33 (Tiramisu Privacy Preview) by @iBotPeaches in #2845
• Binaries: aapt/aapt2 updates (July 5, 2022) by @iBotPeaches in #2846
• Update apktool.bat by @jonathanschoeller in #2882
• Fixes facebook apk deconstruction by @tvildo in #2884
• Support malformed resource names/namespaces by falling back to resId by @iBotPeaches in #2886
• Support Spare Flags by @iBotPeaches in #2887
• build: migrate codeql to different workflow by @iBotPeaches in #2888
• fix: correct npe if null is returned from attribute value by @iBotPeaches in #2889
• Fixes #2900 by @MaSven in #2901
• fix: overlay spec parsing (#2805) by @gramound in #2917
• Make default framework location detection on Linux XDG compliant by @Miepee in #2924
• Fix « doNotCompress » in case of obfuscated resources. by @Kirlif in #2925
• fix: don't assume a referent exists on ReferenceValue by @iBotPeaches in #2926
• Update apktool.bat by @Build-0-Matic in #2930
• Revert "Update apktool.bat" by @iBotPeaches in #2931
• fix: support properly mapping r/R/res resources during disassemble by @iBotPeaches in #2936
• fix: res/layout/(name removed).xml: Invalid file name by @Danealau in #2940
• build: update to non-vulnerable commons_text/snakeyaml by @iBotPeaches in #2942
• Issue 2943 - Support raw disassembly w/ AndResGuard by @iBotPeaches in #2944
• build: include smali from source by @iBotPeaches in #2941
• build: filter jitpack to only com.github.ibotpeaches.* by @iBotPeaches in #2953
• build: support jdk17 by @iBotPeaches in #2952

New Contributors

• @auermich93 made their first contribution in #2783
• @erev0s made their first contribution in #2791
• @jonathanschoeller made their first contribution in #2882
• @tvildo made their first contribution in #2884
• @MaSven made their first contribution in #2901
• @gramound made their first contribution in #2917
• @Miepee made their first contribution in #2924
• @Kirlif made their first contribution in #2925
• @Build-0-Matic made their first contribution in #2930
• @Danealau made their first contribution in #2940
• @Surendrajat made their first contribution in #2927

Full Changelog: v2.6.1...v2.7.0
Release Post: https://connortumbleson.com/2022/11/24/apktool-v2-7-0-released

v2.6.1

What's Changed

• Begin options refactor by @iBotPeaches in #2648
• fix: decoding references to private resources by @MrIkso in #2650
• fix: support for signature scheme v4 by @iBotPeaches in #2705
• Replace use of deprecated methods with their recommended replacements by @alsutton in #2713
• Update dependencies by @Goooler in #2715
• Cleanup trailing temp files/folders by @iBotPeaches in #2742
• fix: prevent file hold on tmpDir during build by @iBotPeaches in #2745
• refactor: drop unused exceptions by @iBotPeaches in #2746
• Preventing instantiation of untrusted classes. by @iBotPeaches in #2760

New Contributors

• @MrIkso made their first contribution in #2650
• @alsutton made their first contribution in #2713

Full Changelog: v2.6.0...v2.6.1
Release Post: https://connortumbleson.com/2022/02/26/apktool-v2-6-1-released/

Apktool v2.6.0

https://connortumbleson.com/2021/09/02/apktool-v2-6-0-released/

Apktool v2.5.0

https://connortumbleson.com/2020/12/02/apktool-v2-5-0-released/