From 253f82e2dcb06619b54aca0cc4afc39735810e4c Mon Sep 17 00:00:00 2001 From: "Danilo M." Date: Mon, 2 Nov 2026 17:32:15 +0100 Subject: release: HardenedPass 0.1.0 Set the version to 0.1.0 (versionCode 100, following the versioning plugin's major*10000 + minor*100 + patch scheme) and add a changelog section for the first release. Upstream's never-released [Unreleased] section is kept below it, renamed, since 0.1.0 ships that work too. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) (limited to 'CHANGELOG.md') diff --git a/CHANGELOG.md b/CHANGELOG.md index 1e3936f8..3c183709 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,27 @@ All notable changes to this project will be documented in this file. -## [Unreleased] +## [0.1.0] - 2026-11-02 + +First release of HardenedPass, a maintained fork of the archived Android Password Store. +It installs next to upstream's app (`app.passwordstore`) and never updates over it. +Also includes upstream's unreleased 2.0 work, listed in the next section. + +### Changed + +- **BREAKING**: The app is now HardenedPass, with application ID `xyz.danix.hardenedpass`, signed with the fork's own release key +- Removed Sentry crash reporting and every Google Play Services dependency; there is a single build with no proprietary code +- Updated Bouncy Castle to 1.86 (fixes GHSA-574f-3g2m-x479, GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx, GHSA-qp49-qgx5-5m26), PGPainless to 1.7.8 and JGit to 5.13.5 +- Updated the build to Gradle 9, AGP 9 and Kotlin 2.4 + +### Fixed + +- Messages encrypted by GnuPG 2.3 or later (OCB/AEAD) can now be decrypted +- Importing a key without an encryption subkey was accepted instead of rejected +- Conflict recovery pushed to a branch named `conflicting-null-