Notable changes in version 23:
- request package update ownership by default (our mirrors of Play services and Play Store for sandboxed Google Play have been excluded in our app repository's metadata)
- drop removed packages from the user interface after repository update rather than on next app restart
- add a way to mark a dependency being missing as ignored
- add caching for system feature checks
- add support for static dependencies on the device model
- verify shared library declaration during package installation to prevent a compromise of the repository signing key and server from being able to install new packages by adding them as dependencies of other apps
- use MATCH_ANY_USER flag for getSharedLibraries() when allowed to in order to detect already completed shared library updates on GrapheneOS to avoid conflicts when updating Vanadium browser in one profile and then Vanadium WebView in another profile or vice versa
- fix search bar chips padding
- dismiss keyboard when searching
- update Gradle to 8.7
- update Android Gradle plugin to 8.3.2
- update Kotlin Symbol Processing 1.0.20
- update AndroidX Activity KTX library to 1.9.0
- update AndroidX Core KTX library to 1.13.0
- update Bouncy Castle library to 1.78.1
- work around potentially buggy Android APIs
- improve code style, robustness and comments
A full list of changes from the previous release (version 22) is available through the Git commit log between the releases.
Apps is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps and Android Auto to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.
GrapheneOS users must either obtain GrapheneOS app updates through our app repository or install it with adb install-multiple with both the APK and fs-verity metadata since fs-verity metadata is now required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.