| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-05-07 | add missing face unlock strings | Daniel Micay | |
| 2022-05-07 | gmscompat location redirection improvements | Daniel Micay | |
| 2022-05-06 | PDF Viewer version 14 | Daniel Micay | |
| 2022-05-06 | update GKI for Pixel 6 | Daniel Micay | |
| 2022-05-06 | unlock animation workaround | Daniel Micay | |
| 2022-05-06 | Dialer Bluetooth fixes | Daniel Micay | |
| 2022-05-06 | Settings string fix | Daniel Micay | |
| 2022-05-05 | Camera version 33 | Daniel Micay | |
| 2022-05-05 | Camera updates | Daniel Micay | |
| 2022-05-05 | drop progress parameter from replicate rsync | Daniel Micay | |
| 2022-05-05 | use new rsync fsync parameter | Daniel Micay | |
| 2022-05-05 | add file locking to deploy/process scripts | Daniel Micay | |
| 2022-05-04 | Bump stylelint from 14.8.1 to 14.8.2 | dependabot[bot] | |
| Bumps [stylelint](https://github.com/stylelint/stylelint) from 14.8.1 to 14.8.2. - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](https://github.com/stylelint/stylelint/compare/14.8.1...14.8.2) --- updated-dependencies: - dependency-name: stylelint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> | |||
| 2022-05-04 | fix raviole boosted color mode settings string | Daniel Micay | |
| 2022-05-04 | fix factory image script non-bash /bin/sh compat | Daniel Micay | |
| 2022-05-04 | adevtool improvements | Daniel Micay | |
| 2022-05-04 | Update Qualcomm PSDS S3 URLs based on reverse engineering results | flawedworld | |
| 2022-05-03 | whitespace / text wrapping fixes | Daniel Micay | |
| 2022-05-03 | Document GSMA TS.43 carriers | flawedworld | |
| 2022-05-03 | enable thread pool AIO support | Daniel Micay | |
| 2022-05-03 | fix wording | Daniel Micay | |
| 2022-05-03 | expand Camera privacy policy | Daniel Micay | |
| 2022-05-03 | publish new release notes | Daniel Micay | |
| 2022-05-03 | new build number 2022050301 | Daniel Micay | |
| 2022-05-03 | add privacy indicator exemption for Phone services | Daniel Micay | |
| 2022-05-03 | drop configuration for clearing legacy push cookie | Daniel Micay | |
| 2022-05-02 | fix typo in most recent tag list | Daniel Micay | |
| 2022-05-02 | make recent tag lists consistent | Daniel Micay | |
| 2022-05-02 | publish new release notes | Daniel Micay | |
| 2022-05-02 | add last release to table of contents | Daniel Micay | |
| 2022-05-02 | new build number | Daniel Micay | |
| 2022-05-02 | compatibility fix for adevtool | Daniel Micay | |
| 2022-05-02 | split up dependencies again | Daniel Micay | |
| 2022-05-02 | Update adevtool docs | flawedworld | |
| 2022-05-02 | Note that the GrapheneOS app repo is implemented | lberrymage | |
| 2022-05-02 | prepare release notes for monthly update | Daniel Micay | |
| 2022-05-02 | add resolver setup to baseline configuration | Daniel Micay | |
| 2022-05-01 | Camera version 30 | Daniel Micay | |
| 2022-05-01 | screenshot EXIF metadata reduction feature | Daniel Micay | |
| 2022-05-01 | clarify alpha channel | Daniel Micay | |
| 2022-05-01 | publish new release notes | Daniel Micay | |
| 2022-04-30 | disable traditional stateful TLS session cache | Daniel Micay | |
| This is useless for TLSv1.3 since there's no longer any distinction in the protocol based on whether the server is using stateless or stateful session resumption. OpenSSL has a non-standard anti-replay mechanism for 0-RTT based on stateful session resumption but 0-RTT still ends up being a downgrade for the TLS security properties. nginx disables that feature since otherwise 0-RTT wouldn't work with the default stateless approach. Since this cache is only used for TLSv1.2 when stateless resumption isn't disabled and nearly all TLSv1.2 clients support tickets, it isn't getting any significant use. It provides worse forward secrecy than tickets because we implement ticket key rotation based on the expiry time and sessions aren't actively purged from the stateful cache when they expire. Cached session state varies in size and nginx ends up writing errors to the log when clearing out a session fails to make room for a new one due to it being larger. It's best to finally get rid of this flawed approach to session resumption. TLSv1.3 provides the option of forward secrecy for resumed sessions and it's the only approach that's normally enabled so we don't need to worry about this anymore once TLSv1.2 is disabled as long as we never enable 0-RTT which weakens forward secrecy and other security properties. | |||
| 2022-04-30 | reorder release notes | Daniel Micay | |
| 2022-04-30 | new build number 2022043000 | Daniel Micay | |
| 2022-04-30 | consistently refer to Updater as System Updater | Daniel Micay | |
| 2022-04-30 | add Alpha channel | Daniel Micay | |
| 2022-04-30 | carriersettings-extractor cleanup | Daniel Micay | |
| 2022-04-29 | add missing context | Daniel Micay | |
| 2022-04-29 | update Chromium to 101.0.4951.41 | Daniel Micay | |
| 2022-04-29 | nearby devices gmscompat improvements | Daniel Micay | |
