aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
20 hoursbuild: update to Gradle 8.14.6, AGP 8.13.2, Kotlin 2.1.21, Hilt 2.58Danilo M.12-35/+16
Newest releases that still fit together on the Gradle 8 / AGP 8 line: - Kotlin stops at 2.1, the newest metadata Gradle 8's embedded Kotlin 2.0 compiler can read when compiling build-logic. - Hilt stops at 2.58; 2.59 and later require AGP 9. Hilt 2.52's annotation processor could not read Kotlin 2.1 metadata. Drop the languageVersion = 1.9 pin so code compiles with the K2 frontend; Kotlin 2.4 no longer accepts 1.9. Drop the R8 8.5.35 pin and its repository, which is older than the R8 AGP 8.13 bundles. Move the deprecated buildFeatures.androidResources flag to androidResources.enable, and replace Uri.parse with toUri for the new UseKtx lint check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursbuild: limit Bouncy Castle alignment to -jdk18on modulesDanilo M.2-4/+8
The resolution rule also rewrote the legacy -jdk15on artifacts that metalava's tooling depends on to 1.86, a version that line never had (it ended at 1.70), so metalavaCheckCompatibilityRelease failed to resolve in CI. Only align the -jdk18on modules the app ships. Add the metalava check to the pre-commit command in AGENTS.md so local runs cover the same tasks as CI. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursdocs: add AGENTS.md and CLAUDE.mdDanilo M.2-0/+98
AGENTS.md holds the agent guidance for the fork: layout and remotes, build and test commands matching CI, verified gotchas, the manual public suffix list update with its last-run date, and the release signing status. CLAUDE.md only points at it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursci: remove automated public suffix list updatesDanilo M.1-48/+0
The workflow committed through a bot PR on GitHub, which is only a push mirror of the main repository; bot commits there would diverge from it. Update the list by hand instead: ./gradlew updatePSL ./gradlew :autofill-parser:test -PslimTests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursautofill-parser: update public suffix listDanilo M.1-0/+0
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursci: run checks on push to master, schedule CodeQLDanilo M.5-91/+6
The check workflow only triggered on pull requests, so direct pushes to master were never built or tested. Trigger it on push to master as well and rename it to CI. Run CodeQL weekly instead of manual-only. Remove draft_new_release.yml, which is built around upstream's develop and release-X.Y branch model, and upstream's encrypted signing keystore and properties, which only upstream can decrypt. Release signing needs a keystore of our own before deploy_github_releases.yml can run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursdocs: rewrite README for the forkDanilo M.2-113/+35
Replace the upstream archival notice, badges, donation and community links with a fork description crediting upstream, a summary of changes, build instructions, license and the development approach disclosure. Drop crowdin.yml, whose sync workflow was removed with the other upstream-only workflows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursbuild(deps): update Bouncy Castle to 1.86 and PGPainless to 1.7.8Danilo M.25-224/+74
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479, GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root resolution rule keeps every Bouncy Castle module on the catalog version; before, bcpg 1.77 shipped next to bcprov 1.78.1. The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by default, which the old one rejected as "non-standard AEAD". Drop the NonStandardAEAD error, its bottom sheet and strings, and replace the mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message that the tests now decrypt. The new fixture is a throwaway test key, so it is allowlisted in .gitleaksignore by fingerprint. Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so accepted every key that parsed, including keys with no encryption subkey. A signing-only key fixture now covers the rejection path. Also: migrate the removed SelectUserId.firstMatch and deprecated addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle META-INF/LICENSE.md in the APK, and move the existing InvalidPackage lint baseline entries to the bcpkix 1.86 jar. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
20 hoursbuild: remove Develocity build scansDanilo M.1-14/+1
The Develocity plugin published a build scan to gradle.com from every CI run, uploading build environment details to a third-party service. Drop the plugin, its configuration and its repository filter entries. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
21 hoursfix: stop exporting DecryptActivity and validate decrypt pathsDanilo M.3-10/+62
DecryptActivity was exported without an intent filter, so any installed app could start it with arbitrary FILE_PATH/REPO_PATH extras (and crash it by omitting them). Nothing outside the app needs to launch it: shortcuts and the decrypt action go through LaunchActivity. LaunchActivity stays exported, so it now treats FILE_PATH as untrusted: the path is forwarded only when it canonically resolves to a regular file inside the password store, and REPO_PATH is always the real store directory instead of the caller-supplied value. Anything else falls back to the main screen. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
21 hoursci: adapt workflows to the forkDanilo M.9-189/+12
Drop workflows tied to upstream infrastructure: library publishing to Maven Central, Crowdin sync, the Healthchecks shadow job and snapshot deploys signed with upstream keys. Point the remaining workflows at this fork's setup-gradle action on master instead of the archived upstream's develop branch, and target master for automated pull requests. draft_new_release.yml is left untouched for now. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2024-10-15Add archival notice to READMEHarsh Shandilya1-0/+4
2024-10-10chore(deps): update kotlin and compose to v2.0.21 (#3258)latestrenovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-09fix(deps): update dependency io.sentry:sentry-android to v7.15.0 (#3257)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-09chore(deps): update actions/upload-artifact action to v4.4.3 (#3256)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08chore(deps): update actions/upload-artifact action to v4.4.2 (#3255)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update github/codeql-action action to v3.26.12 (#3254)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update actions/checkout action to v4.2.1 (#3253)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update actions/upload-artifact action to v4.4.1 (#3252)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07Update Public Suffix List data (#3251)Harsh Shandilya1-0/+0
autofill-parser: update publicsuffixes file Co-authored-by: GitHub Actions <noreply@github.com>
2024-10-04fix(deps): update dependency ↵renovate[bot]1-1/+1
com.google.testparameterinjector:test-parameter-injector to v1.18 (#3248) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-03chore(deps): update github/codeql-action action to v3.26.11 (#3247)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02fix(deps): update dependency com.slack.lint.compose:compose-lint-checks to ↵renovate[bot]1-1/+1
v1.4.1 (#3244) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02fix(deps): update dependency com.slack.lint:slack-lint-checks to v0.8.0 (#3245)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02fix(deps): update androidx (#3243)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02fix(deps): update dependency com.slack.lint.compose:compose-lint-checks to ↵renovate[bot]1-1/+1
v1.4.0 (#3242) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-01fix(deps): update dependency com.android.tools.build:gradle to v8.7.0 (#3240)renovate[bot]3-3/+1
* fix(deps): update dependency com.android.tools.build:gradle to v8.7.0 * fix: remove deprecated options --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-09-30chore(deps): update github/codeql-action action to v3.26.10 (#3239)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-30fix(renovate): automatically merge dependency updatesHarsh Shandilya1-0/+5
2024-09-30Update Public Suffix List data (#3238)Harsh Shandilya1-0/+0
autofill-parser: update publicsuffixes file Co-authored-by: GitHub Actions <noreply@github.com>
2024-09-28Reapply "refactor: use `Closeable#use` extension where applicable"Harsh Shandilya2-8/+3
This reverts commit 04f4b9804f10e4724bac22d40bf01711ff708533.
2024-09-28Reapply "refactor(app): inline pointless methods in `CryptoRepository`"Harsh Shandilya1-33/+17
This reverts commit cb22561878d4358dba974c16ba9a05cc693d411a.
2024-09-26Revert "refactor: use `Closeable#use` extension where applicable"Harsh Shandilya2-3/+8
This reverts commit 69513bf24613d4ba540bcdeaffe04dc9330a65a4.
2024-09-26Revert "refactor(app): inline pointless methods in `CryptoRepository`"Harsh Shandilya1-17/+33
This reverts commit b05a6d411b98393abe3bdbdd4f673bbe49e30f88.
2024-09-26chore(deps): update actions/checkout action to v4.2.0 (#3235)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24chore(deps): update github/codeql-action action to v3.26.9 (#3234)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24chore(deps): update actions/setup-java action to v4.4.0 (#3233)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24chore(deps): update dependency gradle to v8.10.2 (#3232)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23chore(deps): update crowdin/github-action digest to 95d6e89 (#3231)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23Update Public Suffix List data (#3229)Harsh Shandilya1-0/+0
autofill-parser: update publicsuffixes file Co-authored-by: GitHub Actions <noreply@github.com>
2024-09-23refactor(app): inline pointless methods in `CryptoRepository`Harsh Shandilya1-33/+17
2024-09-22refactor: use `Closeable#use` extension where applicableHarsh Shandilya2-8/+3
2024-09-19chore(deps): update github/codeql-action action to v3.26.8 (#3224)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19chore(deps): update peter-evans/create-pull-request action to v7.0.5 (#3223)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18fix(deps): update androidx (#3221)renovate[bot]1-4/+4
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18fix(ci): drop CI gradle propertiesHarsh Shandilya2-22/+0
2024-09-18chore(deps): update peter-evans/create-pull-request action to v7.0.4 (#3220)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18chore(deps): update crowdin/github-action digest to 91d52b5 (#3217)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18fix(deps): update dependency com.android.tools.build:gradle to v8.6.1 (#3216)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-16chore(deps): update peter-evans/create-pull-request action to v7.0.3 (#3213)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>