fdroidserver/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog

[2.2.0] - 2023-02-20

Added

• Support index-v2 format, localizable Anti-Features, Categories
• New entry point for repos, entry.jar, signed with modern algorithms
• New config/ subdirectory for localizable configuration
• Script entries in metadata files (init, prebuild, build, etc) now handled as lists so they now support using && or ; in the script, and behave like .gitlab-ci.yml and other CI YAML.
• GPG signatures for index-v1.json and index-v2.json
• Use default.txt as fallback changelog when inserting fastlane metadata
• scanner: F-Droid signatures now maintained in fdroid/suss
• scanner: maintain signature sources in config.yml, including Exodus Privacy
• scanner: use dexdump for class names
• scanner: directly scan APK files when given a path
• scanner: recursively scan APKs for DEX and ZIP using file magic
• signindex: validate index files before signing
• update: set ArchivePolicy based on VercodeOperation/signature
• Include IPFS CIDv1 in index-v2.json for hosting repos on IPFS
• Per-repo beta channel configuration
• Add Czech translation

Fixed

• apksigner v30 or higher now required for verifying and signing APKs
• 3.9 as minimum supported Python version
• Lots of translation updates
• Better pip packaging
• nightly: big overhaul for reliable operation on all Debian/Ubuntu versions
• Improved logging, fewer confusing verbose messages
• scanner: fix detection of binary files without extension
• import: more reliable operation, including Flutter apps
• Support Java 20 and up

Removed

• Remove obsolete fdroid stats command

[2.1.1] - 2022-09-06

• gradlew-fdroid: Include latest versions and checksums
• nightly: update Raw URLs to fix breakage and avoid redirects
• signindex: gpg-sign index-v1.json and deploy it
• update: fix --use-date-from-apk when used with files (#1012)

[2.1] - 2022-02-22

For a more complete overview, see the 2.1 milestone

[2.0.5] - 2022-09-06

Fixed

• gradlew-fdroid: Include latest versions and checksums
• nightly: add support for GitHub Actions
• nightly: update Raw URLs to fix breakage and avoid redirects
• update: fix --use-date-from-apk when used with files (#1012)
• Fix GitLab CI

[2.0.4] - 2022-06-29

Fixed

• deploy: ensure progress is instantiated before trying to use it
• signindex: gpg-sign index-v1.json and deploy it 1080 1124

[2.0.3] - 2021-07-01

Fixed

• Support AutoUpdateMode: Version without pattern 931

[2.0.2] - 2021-06-01

Fixed

• fix "ruamel round_trip_dump will be removed" 932

[2.0.1] - 2021-03-09

Fixed

• metadata: stop setting up source repo when running lint/rewritemeta
• scanner: show error if scan_binary fails to run apkanalyzer
• common: properly parse version from NDK's source.properties
• update: stop extracting and storing XML icons, they're useless
• index: raise error rather than crash on bad repo file
• update: handle large, corrupt, or inaccessible fastlane/triple-t files
• Update SPDX License List
• checkupdates: set User-Agent to make gitlab.com happy
• Run push_binary_transparency only once

[2.0] - 2021-01-31

For a more complete overview, see the 2.0 milestone

Added

• fdroid update inserts donation links based on upstream's FUNDING.yml (!754)
• Stable, public API for most useful functions (!798)
• Load with any YAML lib and use with the API, no more custom parser needed (!826) (!838)
• config.yml for a safe, easy, standard configuration format (!663)
• Config options can be set from environment variables using this syntax: keystorepass: {env: keystorepass} (!669)
• Add SHA256 to filename of repo graphics (!669)
• Support for srclibs metadata in YAML format (!700)
• Check srclibs and app-metadata files with yamllint (!721)
• Added plugin system for adding subcommands to fdroid (!709)
• fdroid update, fdroid publish, and fdroid signindex now work with SmartCard HSMs, specifically the NitroKey HSM (!779) (!782)
• fdroid update support for Triple-T Gradle Play Publisher v2.x (!683)
• Translated into: bo de es fr hu it ko nb_NO pl pt pt_BR pt_PT ru sq tr uk zh_Hans zh_Hant

Fixed

• Smoother process for signing APKs with apksigner (!736) (!821)
• apksigner is used by default on new repos
• All parts except build and publish work without the Android SDK (!821)
• Description: is now passed to clients unchanged, no HTML conversion (!828)
• Lots of improvements for scanning for proprietary code and trackers (!748) (!REPLACE) (!844)
• fdroid mirror now generates complete, working local mirror repos
• fix build-logs dissapearing when deploying (!685)
• do not crash when system encoding can not be retrieved (!671)
• checkupdates: UpdateCheckIngore gets properly observed now (!659, !660)
• keep yaml metadata when rewrite failed (!658)
• import: template.yml now supports omitting values (!657)
• build: deploying buildlogs with rsync (!651)
• fdroid init generates PKCS12 keystores, drop Java < 8 support (!801)
• Parse Version Codes specified in hex (!692)
• Major refactoring on core parts of code to be more Pythonic (!756)
• fdroid init now works when installed with pip

Removed

• Removed all support for .txt and .json metadata (!772)
• dropped support for Debian 8 jessie and 9 stretch
• dropped support for Ubuntu releases older than bionic 18.04
• dropped fdroid server update and fdroid server init, use fdroid deploy
• fdroid dscanner was removed. (!711)
• make_current_version_link is now off by default
• Dropped force_build_tools config option (!797)
• Dropped accepted_formats config option, there is only .yml now (!818)
• Provides: was removed as a metadata field (!654)
• Remove unused latestapps.dat (!794)

1.1.4 - 2019-08-15

Fixed

• include bitcoin validation regex required by fdroiddata
• merged Debian patches to fix test suite there

1.1.3 - 2019-07-03

Fixed

• fixed test suite when run from source tarball
• fixed test runs in Debian

1.1.2 - 2019-03-29

Fixed

• fix bug while downloading repo index (!636)

1.1.1 - 2019-02-03

Fixed

• support APK Signature v2 and v3
• all SDK Version values are output as integers in the index JSON
• take graphics from Fastlane dirs using any valid RFC5646 locale
• print warning if not running in UTF-8 encoding
• fdroid build: hide --on-server cli flag

1.1 - 2019-01-28

Fixed

• a huge update with many fixes and new features: https://gitlab.com/fdroid/fdroidserver/milestones/7
• can run without and Android SDK installed
• much more reliable operation with large binary APK collections
• sync all translations, including newly added languages: hu it ko pl pt_PT ru
• many security fixes, based on the security audit
• NoSourceSince automatically adds SourceGone Anti-Feature
• aapt scraping works with all known aapt versions
• smoother mirror setups
• much faster fdroid update when using androguard