GrapheneOS

The stable release of Android 15 QPR2 is coming out today. Since around the same time last year with Android 14 QPR2, quarterly releases have been trunk-based which means they ship the development branch changes. It's a large release similar to a yearly release under the hood.

We did some work to prepare for the quarterly release and we'll be hard at work porting to it. We made an early March security release with the Android Security Bulletin patches yesterday. The full Pixel 2025-03-05 patch level requires Android 15 QPR2 so it's a high priority.

Android Security Bulletins are the subset of the Android security patches backported to older releases (12, 12L, 13, 14, 15). Those don't include Moderate or Low severity patches and only cover a small subset of hardware-related patches. The full patches require more than that.

We regularly use the ASB backports to make an early security update prior to the stock Pixel OS and Android Open Source Project monthly, quarterly or yearly release being published. We're currently waiting for the AOSP quarterly release to be pushed, hopefully within a few hours.

Ideally, we'd have early access to the monthly, quarterly and yearly release to get the porting and testing done early. Instead, we need to make an enormous effort to quickly port everything and work through any issues to get quarterly and yearly releases out in a couple days.

Most Android OEMs have early access as Google partners. Google's security team wanted to get us partner access but their business team vetoed it and has unreasonable, essentially unobtainable requirements for getting it. We need an OEM to work with us and it would help us a lot.