Notable changes in version 37:
- add support for delta updates based on Ina from Accrescent to reduce the download size of app updates (Rust library with Kotlin wrapper)
- switch from gzip to Brotli compression for APKs to reduce download size (Rust brotli-decompressor library via Ina Kotlin wrapper)
- verify size and SHA-256 hash of compressed APKs and deltas before decompressing or applying them
- add size and SHA-256 hash checks for v4 and fs-verity APK signatures
- verify size and SHA-256 hash of app icons before decoding them with Glide
- report download errors from automatic updates via a notification instead of silently ignoring them
- launch App Store when the "Apps are up-to-date" notification is tapped
- limit repository metadata update retries to 5 attempts
- prevent RpcProvider failures from crashing the app
- fix per-app language settings not being taken into account when selecting language split APKs
- fix detection of per-app language changes
- fix details screen shared axis transition
- drop support for devices without arm64-v8a or x86_64 support since Ina is a native library only built for these ABIs
- update Android SDK to 37 (Android 17)
- update target API level to 37 (Android 17)
- update AndroidX AppCompat library to 1.8.0
- update AndroidX Constraint Layout library to 2.2.2
- update AndroidX Core KTX library to 1.19.1
- update AndroidX Fragment KTX library to 1.9.1
- update AndroidX Lifecycle libraries to 2.11.0
- update AndroidX Navigation libraries and plugin to 2.10.2
- update Material Components library to 1.14.0
- update Kotlin Coroutines libraries to 1.11.0
- update Glide library to 5.0.9
- update Bouncy Castle library to 1.86
- update Android Gradle plugin to 9.4.1
- update Kotlin to 2.4.21
- update Kotlin Symbol Processing to 2.3.12
- update Gradle to 9.8.2
- update Android build tools to 37.0.0
- raise minimum repository metadata timestamp
- raise TLS key pinning expiry date to 2027-10-01
A full list of changes from the previous release (version 36) is available through the Git commit log between the releases.
App Store is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps and Android Auto to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.
GrapheneOS users must obtain GrapheneOS app updates through our App Store since verified boot metadata is required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.