| Age | Commit message (Collapse) | Author | Files | Lines |
|
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479,
GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all
fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root
resolution rule keeps every Bouncy Castle module on the catalog version;
before, bcpg 1.77 shipped next to bcprov 1.78.1.
The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by
default, which the old one rejected as "non-standard AEAD". Drop the
NonStandardAEAD error, its bottom sheet and strings, and replace the
mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message
encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message
that the tests now decrypt. The new fixture is a throwaway test key, so
it is allowlisted in .gitleaksignore by fingerprint.
Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so
accepted every key that parsed, including keys with no encryption
subkey. A signing-only key fixture now covers the rejection path.
Also: migrate the removed SelectUserId.firstMatch and deprecated
addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle
META-INF/LICENSE.md in the APK, and move the existing InvalidPackage
lint baseline entries to the bcpkix 1.86 jar.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
|
* directory structure setting moved to general settings
* Update app/src/main/java/app/passwordstore/util/settings/PreferenceKeys.kt
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
Signed-off-by: Alexander Grahn <agrahn@users.noreply.github.com>
---------
Signed-off-by: Alexander Grahn <agrahn@users.noreply.github.com>
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
* enabling pgp passphrase cache with authentication
* clear passphrase cache on first autofill decrypt after screen off
---------
Co-authored-by: Alexander Grahn <me@null.org>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
|
|
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
strings: sync with crowdin
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
* Compile against SDK 33
* autofill-parser: fix warnings for SDK 33 upgrade
* app: fix warnings for SDK 33 upgrade
* Mark all clipboard content as sensitive from crypto activities
* Skip Snackbar on Android 13 and above
* detekt: raise `TooManyFunctions` limit to 15
|
|
* Fix decrypt activity items being editable
* Remove unused resources and re-roll lint baseline
* Make lint mark all warnings as errors
|
|
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
|
|
Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
* autofill-parser: add missing `@RequiresApi` annotations
* app: remove unused strings and sync with Crowdin
* app: remove unused chip_text_color selector
* app: remove unused capitalization_type_values array
* app: add `PendingIntent.FLAG_IMMUTABLE` flag where required
|
|
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
|
|
Co-authored-by: GitHub Actions <noreply@github.com>
|
|
* themes: tweak Chip text appearance
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* app: tweak git server settings UI
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* app: remove unused resources
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
|
|
|
|
Co-authored-by: Fabian Henneke <fabian@hen.ne.ke>
|
|
* build: add a Gradle plugin for Crowdin
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* build/crowdin: add skipCleanup extension property
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* build/crowdin: also handle nonFree source set
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* build/crowdin: fixup directory names for nonFree variant
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* app: sync translations from Crowdin
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
* github: add Crowdin sync workflow
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|
|
Fixes #1254
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
|