Notable changes in version 19:
- ignore package dependencies when updating disabled packages
- add 1 year expiration to TLS key pinning since Apps is solely responsible for updating itself when used outside GrapheneOS and we don't want extremely out-of-date versions to be stranded without an update path (on GrapheneOS, System Updater prevents that happening)
- drop redundant TLS key pins for intermediates
- switch to modern Gradle plugin infrastructure
- update Android Gradle plugin to 8.0.1
- update Gradle to 8.1.1
- update Kotlin to 1.8.21
- update AndroidX Activity KTX library to 1.7.1
- update AndroidX Fragment KTX library to 1.5.7
- update AndroidX Lifecycle Viewmodel library to 2.6.1
A full list of changes from the previous release (version 18) is available through the Git commit log between the releases.
Apps is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.
GrapheneOS users must obtain GrapheneOS app updates through our app repository since fs-verity metadata is now required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.