aboutsummaryrefslogtreecommitdiffstats
path: root/app
AgeCommit message (Collapse)AuthorFilesLines
17 hoursbuild: update to Gradle 9.8.2, AGP 9.5.0, Kotlin 2.4.21, Hilt 2.60.1Danilo M.2-3/+11
AGP 9 migration: - Configure the shared Android setup through the new DSL (CommonExtension, ApplicationExtension) instead of the removed TestedExtension and BaseAppModuleExtension; targetSdk moves to the application extension. - Stop applying the Kotlin Android plugin; AGP 9 compiles Kotlin itself. - Replace kapt with KSP 2.3.13 for Hilt, which built-in Kotlin requires, and carry the Dagger compiler options over as KSP arguments. - AGP 9 now applies packaging excludes to unit-test resources, which stripped the diceware word list (**/*.txt) from its tests; lift that exclude in the diceware module. - Use resources.directories instead of the deprecated srcDir. Plugin updates required by Gradle 9 / AGP 9: Sentry Gradle plugin 6.25.0 (sentry-android 8.62.0), metalava plugin 0.5.1, maven-publish 0.37.0, spotless 8.10.4, version-catalog-update 1.1.2, download task 5.7.0, foojay resolver 1.0.0, with their API changes. Newer metalava models Kotlin properties, so autofill-parser/api.txt is regenerated; the diff is representation only, no API was added or removed. Fix new Kotlin 2.4 and lint findings (explicit return type in a function with an early return, UseKtx in autofill-parser), drop deprecated Kotlin Gradle properties, and make the AGENTS.md pre-commit command cover every task CI runs (both flavors, lint on all modules). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
17 hoursbuild: update to Gradle 8.14.6, AGP 8.13.2, Kotlin 2.1.21, Hilt 2.58Danilo M.1-2/+2
Newest releases that still fit together on the Gradle 8 / AGP 8 line: - Kotlin stops at 2.1, the newest metadata Gradle 8's embedded Kotlin 2.0 compiler can read when compiling build-logic. - Hilt stops at 2.58; 2.59 and later require AGP 9. Hilt 2.52's annotation processor could not read Kotlin 2.1 metadata. Drop the languageVersion = 1.9 pin so code compiles with the K2 frontend; Kotlin 2.4 no longer accepts 1.9. Drop the R8 8.5.35 pin and its repository, which is older than the R8 AGP 8.13 bundles. Move the deprecated buildFeatures.androidResources flag to androidResources.enable, and replace Uri.parse with toUri for the new UseKtx lint check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
18 hoursbuild(deps): update Bouncy Castle to 1.86 and PGPainless to 1.7.8Danilo M.8-33/+8
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479, GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root resolution rule keeps every Bouncy Castle module on the catalog version; before, bcpg 1.77 shipped next to bcprov 1.78.1. The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by default, which the old one rejected as "non-standard AEAD". Drop the NonStandardAEAD error, its bottom sheet and strings, and replace the mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message that the tests now decrypt. The new fixture is a throwaway test key, so it is allowlisted in .gitleaksignore by fingerprint. Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so accepted every key that parsed, including keys with no encryption subkey. A signing-only key fixture now covers the rejection path. Also: migrate the removed SelectUserId.firstMatch and deprecated addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle META-INF/LICENSE.md in the APK, and move the existing InvalidPackage lint baseline entries to the bcpkix 1.86 jar. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
18 hoursfix: stop exporting DecryptActivity and validate decrypt pathsDanilo M.3-10/+62
DecryptActivity was exported without an intent filter, so any installed app could start it with arbitrary FILE_PATH/REPO_PATH extras (and crash it by omitting them). Nothing outside the app needs to launch it: shortcuts and the decrypt action go through LaunchActivity. LaunchActivity stays exported, so it now treats FILE_PATH as untrusted: the path is forwarded only when it canonically resolves to a regular file inside the password store, and REPO_PATH is always the real store directory instead of the caller-supplied value. Anything else falls back to the main screen. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2024-10-01fix(deps): update dependency com.android.tools.build:gradle to v8.7.0 (#3240)renovate[bot]1-1/+0
* fix(deps): update dependency com.android.tools.build:gradle to v8.7.0 * fix: remove deprecated options --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-09-28Reapply "refactor: use `Closeable#use` extension where applicable"Harsh Shandilya1-4/+1
This reverts commit 04f4b9804f10e4724bac22d40bf01711ff708533.
2024-09-28Reapply "refactor(app): inline pointless methods in `CryptoRepository`"Harsh Shandilya1-33/+17
This reverts commit cb22561878d4358dba974c16ba9a05cc693d411a.
2024-09-26Revert "refactor: use `Closeable#use` extension where applicable"Harsh Shandilya1-1/+4
This reverts commit 69513bf24613d4ba540bcdeaffe04dc9330a65a4.
2024-09-26Revert "refactor(app): inline pointless methods in `CryptoRepository`"Harsh Shandilya1-17/+33
This reverts commit b05a6d411b98393abe3bdbdd4f673bbe49e30f88.
2024-09-23refactor(app): inline pointless methods in `CryptoRepository`Harsh Shandilya1-33/+17
2024-09-22refactor: use `Closeable#use` extension where applicableHarsh Shandilya1-4/+1
2024-09-14chore: refresh Lint baselineHarsh Shandilya1-2/+2
2024-09-13chore: refresh Lint baselineHarsh Shandilya1-0/+33
2024-09-03fix(deps): update dependency com.android.tools.build:gradle to v8.6.0 (#3192)renovate[bot]1-13/+13
* fix(deps): update dependency com.android.tools.build:gradle to v8.6.0 * chore: regenerate Lint baselines --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-08-18fix: rework Crowdin integration (#3175)Harsh Shandilya15-125/+214
* chore: set up Crowdin configuration * fix(app): sync strings from Crowdin Closes #3174 * fix(ci): use crowdin/github-action instead of homebrew setup * fix(build): remove obsolete Crowdin plugin
2024-08-14directory structure setting moved to general settings (#3166)Alexander Grahn20-141/+145
* directory structure setting moved to general settings * Update app/src/main/java/app/passwordstore/util/settings/PreferenceKeys.kt Co-authored-by: Harsh Shandilya <me@msfjarvis.dev> Signed-off-by: Alexander Grahn <agrahn@users.noreply.github.com> --------- Signed-off-by: Alexander Grahn <agrahn@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-08-14chore: add missing copyright headers and update existing onesHarsh Shandilya251-222/+367
2024-08-14feat(build): replace homebrew ktfmt formatter with SpotlessHarsh Shandilya1-1/+1
Spotless has fixed their Gradle Configuration Cache woes in the past couple months which gets rid of my primary complaint.
2024-08-11add user ID input field (password creation/edit), may fix #1458 (#3161)Alexander Grahn6-53/+99
* add user ID input field (password creation/edit), may fix #1458 * fix: revert change to username label * refactor: rework FieldItem to drop hard-coded strings * refactor: drop unnecessary `.apply` --------- Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-08-11fix blocking createPasswordUI() when OTP is displayed (#3162)agrahn1-1/+1
2024-08-08fix(build): compile against SDK 35Harsh Shandilya1-1/+3
2024-08-05enable per-app language setting (Android-13+) (#3152)agrahn2-0/+3
2024-08-04more robust switch actions in pgp settings (#3148)agrahn2-26/+57
* more robust switch actions in pgp settings * Update app/src/main/java/app/passwordstore/ui/settings/PGPSettings.kt Co-authored-by: Harsh Shandilya <me@msfjarvis.dev> Signed-off-by: agrahn <agrahn@users.noreply.github.com> * Update app/src/main/java/app/passwordstore/ui/settings/PGPSettings.kt Co-authored-by: Harsh Shandilya <me@msfjarvis.dev> Signed-off-by: agrahn <agrahn@users.noreply.github.com> * Update app/src/main/java/app/passwordstore/ui/settings/PGPSettings.kt Co-authored-by: Harsh Shandilya <me@msfjarvis.dev> Signed-off-by: agrahn <agrahn@users.noreply.github.com> * formatting fixed (ktfmtFormat) --------- Signed-off-by: agrahn <agrahn@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-08-04Sync localisations from Crowdin (#3150)Harsh Shandilya2-0/+2
strings: sync with crowdin Co-authored-by: GitHub Actions <noreply@github.com>
2024-07-30fix: re-enable biometric lock featureHarsh Shandilya2-6/+10
Fixes #2802
2024-07-28fix crash due to passphrase caching after biom. authentication expired (#3141)agrahn2-14/+24
* fix crash due to passphrase caching after biom. authentication expired * fix: add missing imports --------- Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-07-28Sync localisations from Crowdin (#3139)Harsh Shandilya2-2/+0
strings: sync with crowdin Co-authored-by: GitHub Actions <noreply@github.com>
2024-07-25Fix application crash when disabling cache auto-clear option and potential ↵agrahn2-4/+25
attack vector (#3136) prevent app crash upon passphrase cache clearing
2024-07-24refactor: refine `CryptoRepository#{encrypt,decrypt}` APIsHarsh Shandilya3-33/+12
2024-07-24fix: use the same decryption flow in autofillHarsh Shandilya1-8/+19
Fixes #3131
2024-07-24refactor: import-alias `BiometricAuthenticator.Result`Harsh Shandilya2-11/+9
2024-07-23fix: only show cache checkbox when enabledHarsh Shandilya1-1/+5
2024-07-22add checkbox in passphrase dialog to clear cache (#3127)agrahn5-7/+60
* add checkbox in passphrase dialog to clear cache * instantiating PasswordDialog via newInstance, passing args as Bundle * refactor: put checkbox directly in the layout --------- Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-07-20enabling pgp passphrase cache with authentication (#3124)agrahn6-27/+37
* enabling pgp passphrase cache with authentication * clear passphrase cache on first autofill decrypt after screen off --------- Co-authored-by: Alexander Grahn <me@null.org>
2024-07-02clear passphrase cache, fix application crash on auto screen-off (#3108)agrahn3-22/+32
clear passphrase chache on screen-off
2024-06-14fix(deps): update dependency com.android.tools.build:gradle to v8.5.0 (#3094)renovate[bot]1-47/+25
* fix(deps): update dependency com.android.tools.build:gradle to v8.5.0 * chore: refresh Lint baseline --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-06-09Sync localisations from Crowdin (#3084)Harsh Shandilya2-0/+10
strings: sync with crowdin Co-authored-by: GitHub Actions <noreply@github.com>
2024-05-29refactor(ui): tokenize spacingHarsh Shandilya3-13/+20
2024-05-29fix: bundle JetBrainsMono for monospace use casesHarsh Shandilya2-3/+8
2024-05-28chore: reformat with trailing commas changesHarsh Shandilya68-285/+196
2024-05-28fix: convert SettingsActivity to `onBackPressedDispatcher`Harsh Shandilya1-6/+9
2024-05-28Revert "refactor: properly use OnBackPressedDispatcher"Harsh Shandilya2-11/+15
Narrator: it was in fact not proper This reverts commit 7c9e563d969a34e6142f22db779b79101babc483.
2024-05-28refactor(compose): make theme decisions within `APSTheme`Harsh Shandilya4-12/+8
2024-05-27feat(pgpainless): add detection for passphrase-less messages (#3069)Harsh Shandilya3-2/+15
* WIP: feat(pgpainless): add detection for passphrase-less messages * refactor: test keys instead of the message This makes more logical sense
2024-05-26feat: add option to auto clear passphrase cacheHarsh Shandilya4-1/+43
Fixes #3053
2024-05-26fix: restore monospace typeface for passwordsHarsh Shandilya1-0/+4
Fixes #3066
2024-05-22fix(deps): update kotlin and compose to v2 (major) (#3064)renovate[bot]1-4/+2
* fix(deps): update kotlin and compose to v2 * fix(build): switch to Kotlin Compose Compiler --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>
2024-04-17Fix obtaining pgp identifiers to decrypting file. (#3009)Oleh Kopeykin2-17/+40
2024-04-14fix: special-case AEAD failureHarsh Shandilya3-15/+47
Fixes #2974 Fixes #2963 Fixes #2921 Fixes #2924 Fixes #2653 Fixes #2461 Fixes #2586 Fixes #2179
2024-04-06fix(deps): update dependency org.bouncycastle:bcprov-jdk18on to v1.78 (#2986)renovate[bot]1-0/+3
* fix(deps): update dependency org.bouncycastle:bcprov-jdk18on to v1.78 * fix(deps): add missing bcutil dependency * fix(build): drop multi-release JAR artifacts from APK --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Harsh Shandilya <me@msfjarvis.dev>