Notable changes in version 31:
- skip package enabled checked for a static dependency on the same package to avoid apps like Vanadium being treated as unavailable due to missing dependencies when users have them disabled
- require TLSv1.3 instead of either TLSv1.2 or TLSv1.3
- enable hardware memory tagging for use outside of GrapheneOS in the narrow cases where it's available for apps opting into it (Android 16 Advanced Protection Mode on hardware with support for MTE)
- update Glide library to 5.0.3
- update Kotlin Coroutines libraries to 1.10.2
- update AndroidX Lifecycle libraries to 2.9.3
- update AndroidX Navigation libraries/plugin to 2.9.3
- update AndroidX Fragment KTX library to 1.8.9
- update AndroidX Core KTX library to 1.17.0
- update AndroidX AppCompat library to 1.7.1
- update Bouncy Castle library to 1.81
- update Kotlin to 2.2.10 and Kotlin Symbol Processing to 2.0.2
- update Android Gradle plugin to 8.12.2
- update Gradle to 8.14.3
- update Android SDK to 36 (Android 16)
- update Android build tools to 36.0.0
- raise TLS key pinning expiry date to September 2026
A full list of changes from the previous release (version 30) is available through the Git commit log between the releases.
App Store is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps and Android Auto to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.
GrapheneOS users must obtain GrapheneOS app updates through our App Store since verified boot metadata is required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.