Changes in version 116.0.5845.163.1:

• temporarily drop our new cross-origin referrer toggle due to it causing compatibility issues with some apps using the WebView despite not intending to change anything for the WebView so it will need some changes before being included again

A full list of changes from the previous release (version 116.0.5845.163.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Changes in version 116.0.5845.163.0

• update to Chromium 116.0.5845.163

A full list of changes from the previous release (version 116.0.5845.114.1) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Changes in version 116.0.5845.114.1:

• make cross-origin referrer behavior configurable

A full list of changes from the previous release (version 116.0.5845.114.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Changes in version 71:

• replace the previous release's fix for new Play services feature flag since the previous approach didn't work as intended

A full list of changes from the previous release (version 70) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 70:

• fix crash in sandboxed Google Play services location service caused by new feature flag (impacted a small subset of users with the feature flag deployed)

A full list of changes from the previous release (version 69) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 69:

• update max supported version of Play services to 23.33
• update max supported version of Play Store to 37.2

A full list of changes from the previous release (version 68) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 116.0.5845.114.0:

• update to Chromium 116.0.5845.114

A full list of changes from the previous release (version 116.0.5845.92.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Changes in version 68:

• update max supported version of Play services to 23.32
• update max supported version of Play Store to 37.1
• update Gradle to 8.3

A full list of changes from the previous release (version 67) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig)

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 116.0.5845.92.0:

• update to Chromium 116.0.5845.92

A full list of changes from the previous release (version 116.0.5845.78.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Changes in version 67:

• update max supported version of Play services to 23.31
• update max supported version of Play Store to 37.0

A full list of changes from the previous release (version 66) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 116.0.5845.78.0:

• update to Chromium 116.0.5845.78

A full list of changes from the previous release (version 115.0.5790.166.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

We're not receiving enough testing feedback from users on Pixel Fold. Since it's not as common as other devices, we need a higher proportion of users to help with using the Beta channel and providing feedback for releases in our #testing:grapheneos.org channel on Matrix.

We'll need to be receiving feedback in order to continue supporting the Pixel Fold. It currently has official, fully functional and stable GrapheneOS support.

Continuation of that will depend on the community providing feedback due to an issue with the device we got for testing.

• 2023080800-coral (Pixel 4, Pixel 4 XL) — extended support release for legacy devices with frozen 2022-11-01 patch level
• 2023080800 (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, emulator, generic, other targets)
• 2023080800-tangorpro (Pixel Tablet)
• 2023080800-felix (Pixel Fold)

Changes since the 2023080700 release:

• Sandboxed Google Play compatibility layer: fix handling of app install confirmation for the sandboxed Play Store in background processes since they're moving towards it with a partially deployed feature flag

Tags:

• 2023080700-coral (Pixel 4, Pixel 4 XL) — extended support release for legacy devices with frozen 2022-11-01 patch level
• 2023080700 (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, emulator, generic, other targets)
• 2023080700-tangorpro (Pixel Tablet)
• 2023080700-felix (Pixel Fold)

Changes since the 2023072600 release:

• full 2023-08-01 security patch level
• full 2023-08-05 security patch level
• rebased onto TQ3A.230805.001 (generic, coral), TQ3A.230805.001.B1 (tangorpro) and TQ3C.230805.001.A3 (felix) Android Open Source Project releases
• add workarounds for upstream Android issue with user profiles causing screenshots to break the recent app list and launcher
• kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.187
• kernel (Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.120
• Updater: add low-level ACCESS_NETWORK_STATE permission to prepare for it being required to run scheduled jobs depending on network state in Android 14
• Vanadium: update to version 115.0.5790.166.0
• GmsCompatConfig: update to version 65
• GmsCompatConfig: update to version 66

It's now possible to donate to the non-profit GrapheneOS Foundation via bank transfers in the EU/SEPA, UK, US, Australia, New Zealand, Canada, Hungary, Singapore and Turkey. International wire transfers from elsewhere are not currently a supported option.

https://grapheneos.org/donate#wise

This donation method mostly has no fees on our end. The only exception is a 4.14 USD fee for SWIFT wire transfers within the US as opposed to ACH payments which are free to receive. ACH is usually free/cheap on sender side so use ACH rather than sending a domestic wire transfer.

Changes in version 66:

• update max supported version of Play Store to 36.9
• update Android Gradle plugin to 8.1.0
• update Android build tools to 34.0.0

A full list of changes from the previous release (version 65) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release.

Changes in version 115.0.5790.166.0:

• update to Chromium 115.0.5790.166

A full list of changes from the previous release (version 115.0.5790.138.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

We've added support for Bitcoin donations to the non-profit GrapheneOS Foundation via a BIP47 payment code and PayNym due to high demand:

https://grapheneos.org/donate#bitcoin

We'll need to regularly sweep these to a fresh address from our hardware wallet since we can't yet use it directly.

It would be nice if hardware wallets implemented this so we could avoid the current compromise.

https://nitter.net/craigraw/status/1685887118235557890

We recently started using Sparrow wallet to generate Child Pays for Parent (CPFP) transactions with our hardware wallet but sadly can't do this with it yet.

PayPal has restored our non-profit GrapheneOS Foundation account. We should be able to withdraw all donations made through it in the past few weeks. We received no info on why our account was permanently banned with funds held for 180 days or why they now restored our account.

We understand people want to donate via credit cards and bank transfers. GitHub Sponsors has worked very well for us as the main credit card donation option. GitHub covers processing fees for donations from individuals so we pay 0% instead of 30¢ + ~4% fees for most donations.

We're going to open a GitHub Sponsors account for the non-profit GrapheneOS Foundation. It's currently the only remaining donation option not yet moved over to the GrapheneOS Foundation. It may take a couple weeks to approve us based on our experience with PayPal and our bank.

We also plan to add support for Wise in order to support local bank transfers internationally instead of only within Canada.

We could also add our own Stripe donation option, but it would have 30¢ + ~4% fees instead of 0% fees for donations from individuals like GitHub Sponsors.

Changes in version 65:

• update max supported version of Play services to 23.30
• update max supported version of Play Store to 36.8

A full list of changes from the previous release (version 64) is available through the Git commit log between the releases (only changes to the gmscompat_config text file and config-holder/ directory are part of GmsCompatConfig).

Unfortunately, PayPal permanently locked our GrapheneOS Foundation account today. No reason has been provided for the account being locked. All we've done is accept donations. We added our bank account information yesterday in order to begin withdrawing money and it was locked.

GrapheneOS Foundation is a non-profit organization incorporated federally in Canada. PayPal required us to provide both proof of identity and address for each director along with other documents, etc. to have our account approved. We received CA$3,950.75 of donations through it.

We accept cryptocurrency donations to the GrapheneOS Foundation, but PayPal was currently the only way to donate to it via credit card:

https://grapheneos.org/donate

GrapheneOS as a project accepts credit card donations with 0% fees for donations from individuals via GitHub Sponsors.

We can try to set up GitHub Sponsors for the GrapheneOS Foundation. It takes a long time to go through the KYC process for a non-profit organization since they require it for each director and more beyond that. This is why these things are taking so long for us to set up.

GitHub Sponsors still has 0% fees for donations from individuals compared to 30 cents + 2.9% + 1% for international PayPal donations along with their 3%/4% currency conversion fee. Stripe is only slightly cheaper than PayPal: 0.8% international fee and 2% for currency conversion.

We believe our account was shut down because we accept cryptocurrency donations including via Monero. PayPal partially locked our account and demanded proof for source and purpose of each transaction. We provided a link to https://grapheneos.org/donate. Our account was then force closed.

Our GrapheneOS Foundation non-profit finally has official bank accounts and can directly accept Interac e-Transfers in Canada:

https://grapheneos.org/donate

We'll be adding more donation options in the near future and also a simpler way to donate via credit card without an account.

GitHub Sponsors still charges 0% fees for credit card donations from individuals so we want to keep it as an option. We'll look into setting up an account for the GrapheneOS Foundation. We plan to add Stripe as another option for people who don't want to make a GitHub account.

Tags:

• 2023072600-coral (Pixel 4, Pixel 4 XL) — extended support release for legacy devices with frozen 2022-11-01 patch level
• 2023072600 (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, emulator, generic, other targets)
• 2023072600-tangorpro (Pixel Tablet)
• 2023072600-felix (Pixel Fold)

Changes since the 2023072400 release:

• Sandboxed Google Play compatibility layer: fix crash caused by regression in the previous release which was caught in Alpha/Beta testing and blocked us from releasing it to the Stable channel
• Settings: improve GrapheneOS user management setting infrastructure
• Settings: move run in background settings right below switch user settings
• Settings: unify app install settings into three options for non-guest users and two for guest users and move them right above the install available apps settings
• Settings: remove incorrect caching of default guest user manager restrictions
• Vanadium: update to version 115.0.5790.138.0

Changes in version 115.0.5790.138.0:

• update to Chromium 115.0.5790.138

A full list of changes from the previous release (version 115.0.5790.138.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Tags:

• 2023072400-coral (Pixel 4, Pixel 4 XL) — extended support release for legacy devices with frozen 2022-11-01 patch level
• 2023072400 (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, emulator, generic, other targets
• 2023072400-tangorpro (Pixel Tablet)
• 2023072400-felix (Pixel Fold

Changes since the 2023071100 release:

• replace our changes to AOSP APN and CarrierConfig configurations with a GrapheneOS CarrierConfig2 app for easier maintenance, improved MVNO support and support for recently added configuration options
• add infrastructure for comparing CarrierConfig2 against Google's CarrierSettings app
• show installer package name in error reports to help with identifying issues caused by broken installers
• update timezone module to Android mainline 331910000
• Sandboxed Google Play compatibility layer: support overriding ComponentEnabledSettings via GmsCompatConfig
• Sandboxed Google Play compatibility layer: add missing string for "Missing Play Games app" notification channel name
• Sandboxed Google Play compatibility layer: avoid uncaught exceptions with location rerouting when client only has coarse location permission
• Vanadium: update to version 115.0.5790.85.0
• Vanadium: update to version 115.0.5790.136.0
• GmsCompatConfig: update to version 63
• GmsCompatConfig: update to version 64
• Auditor: update to version 74