mirror of
				https://github.com/f-droid/fdroidserver.git
				synced 2025-11-04 06:30:27 +03:00 
			
		
		
		
	
		
			
				
	
	
	
	
		
			18 KiB
		
	
	
	
	
	
	
	
			
		
		
	
	
			18 KiB
		
	
	
	
	
	
	
	
Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog
[2.4.2] - 2025-06-24
Fixed
- nightly: fix bug that clones nightly repo to wrong location https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1672
 - Sync translations for all supported languages: es pl ru
 
[2.4.1] - 2025-06-23
Added
- build: Clearer error messages when working with Git.
 - verify: generate .json files that list all reports https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1632
 
Fixed
- deploy: use master branch when working complete git-mirror repo https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1666
 - update: use ctime/mtime to control _strip_and_copy_image runs https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1665
 - update: If categories.yml only has icon:, then add name: https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1659
 - update: fix handling of Triple-T 1.0.0 graphics https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1652
 - update: never execute any VCS e.g. git https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1630
 - config: lazyload environment variables in config.yml https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1645
 - config: make localized name/description/icon optional https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1649
 - lint: add repo_key_sha256 to list of valid config keys https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1643
 - build: calculate all combinations of gradle flavors https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1638
 - build: set SOURCE_DATE_EPOCH from app's git otherwise fdroiddata metadata file https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1653
 - Sync translations for all supported languages: ca cs de fr ga ja pl pt pt_BR pt_PT ru sq tr uk zh_Hans
 
Removed
[2.4.0] - 2025-03-25
Added
- lint: support the base config.yml. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1606
 
Fixed
- Expand {env: foo} config syntax to be allowed any place a string is. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1610
 - Only show "unsafe permissions on config.yml" when secrets are present.
 - Standardized config files on ruamel.yaml with a YAML 1.2 data format. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1611
 - Brought back error when a package has multiple package types (e.g. xapk and apk). https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1602
 - Reworked test suite to be entirely based on Python unittest (thanks @mindston). https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1587
 - publish/signindex/gpgsign no longer load the qrcode and requests modules, and can operate without them installed.
 - scanner: add bun.lock as lock file of package.json https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1615
 - index: fail if user sets mirrors:isPrimary wrong https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1617 https://gitlab.com/fdroid/fdroidserver/-/issues/1125
 - Sync translations for all supported languages: bo ca cs de es fr ga hu it ja ko nb_NO pl pt pt_BR pt_PT ro ru sq sr sw tr uk zh_Hans zh_Hant
 
Removed
- checkupdates: remove auto_author: config, it is no longer used.
 - Purge support for the long-deprecated config.py config file. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1607
 
[2.3.5] - 2025-01-20
Fixed
- Fix issue where APKs with v1-only signatures and targetSdkVersion < 30 could be maliciously crafted to bypass AllowedAPKSigningKeys https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1588
 - Ignore apksigner v33.x, it has bugs verifying APKs with v3/v3.1 sigs. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1593
 - Sync translations for: ca cs de es fr ga ja pt_BR pt_PT ru sq sr uk zh_Hans
 
[2.3.4] - 2024-12-12
Fixed
- Fix localhost network tests on systems with IPv6.
 - lint: only error out on missing extlib on versions not archived.
 
[2.3.3] - 2024-12-11
Added
- verify: 
--clean-up-verifiedto delete files used when verifying an APK if the verification was successful. 
Fixed
- Support Python 3.13 in the full test suite.
 - Sync translations for: ca de fr ja pl ro ru sr ta
 - update: only generate index.png when making index.html, allowing the repo operator to set a different repo icon, e.g. not the QR Code.
 
[2.3.2] - 2024-11-26
Fixed
- install: fix downloading from GitHub Releases and Maven Central.
 - Sync translations for: ca fa fr pt ru sr ta zh_Hant
 
[2.3.1] - 2024-11-25
Fixed
- Sync all translations for: cs de es fr ga pt_BR ru sq zh_Hans.
 - Drop use of deprecated imghdr library to support Python 3.13.
 - Install biplist and pycountry by default on macOS.
 - Fixed running test suite out of dist tarball.
 
[2.3.0] - 2024-11-21
Added
- YAML 1.2 as native format for all .yml files, including metadata and config.
 - install: will now fetch F-Droid.apk and install it via 
adb. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1546 - scanner: scan APK Signing Block for known block types like Google Play Signature aka "Frosting". https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1555
 - Support Rclone for deploying to many different cloud services.
 - deploy: support deploying to GitHub Releases. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1471
 - scanner: support libs.versions.toml https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1526
 - Consider subdir for triple-t metadata discovery in Flutter apps. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1541
 - deploy: added 
index_only:mode for mirroring the index to small hosting locations. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1420 - Support publishing repos in AltStore format. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1465
 - Support indexing iOS IPA app files. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1413
 - deploy: config/mirrors.yml file with support for adding per-mirror metadata,
like 
countryCode:. - Repo's categories are now set in the config files.
 - lint: check syntax of config files.
 - publish: 
--error-on-failedto exit when signing/verifying fails. - scanner: 
--refreshandrefresh_config:to control triggering a refresh of the rule sets. - Terminal output colorization and 
--colorargument to control it. - New languages: Catalan (ca), Irish (ga), Japanese (ja), Serbian (sr), and Swahili (sw).
 - Support donation links from 
community_bridge,buy_me_a_coffee. 
Fixed
- Use last modified time and file size for caching data about scanned APKs instead of SHA-256 checksum. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1542
 repo_web_base_url:config for generating per-app URLs for viewing in browsers. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1178fdroid scannerflags WebAssembly binary .wasm files. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1562- Test suite as standard Python 
unittestsetup (thanks @ghost.adh). - scanner: error on dependency files without lock file. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1504
 - nightly: finding APKs in the wrong directory. (thanks @WrenIX) https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1512
 AllowedAPKSigningKeysworks with all single-signer APK signatures. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1466- Sync all translations for: cs de it ko pl pt pt_BR pt_PT ro ru sq tr uk zh_Hans zh_Hant.
 - Support Androguard 4.x.
 - Support Python 3.12.
 
Removed
- Drop all uses of stats/known_apks.txt and the 
update_stats:config key. https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1547 - The 
maven:field is now always a string, withyesas a legacy special value. It is no longer treated like a boolean in any case. - scanner: jcenter is no longer an allowed Maven repo.
 - build: 
--reset-serverremoved (thanks @gotmi1k). 
[2.2.2] - 2024-04-24
Added
- Include sdkmanager as dep in setup.py for Homebrew package. https://github.com/Homebrew/homebrew-core/pull/164510
 
[2.2.1] - 2023-03-09
Added
download_repo_index_v2()anddownload_repo_index_v2()API functions https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1323
Fixed
- Fix OpenJDK detection on different CPU architectures https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1315
 
Removed
- Purge all references to 
zipalign, that is delegated to other things https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1316 - Remove obsolete, unused 
buildozerbuild type https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1322 
[2.2.0] - 2023-02-20
Added
- Support index-v2 format, localizable Anti-Features, Categories
 - New entry point for repos, entry.jar, signed with modern algorithms
 - New config/ subdirectory for localizable configuration
 - Script entries in metadata files (init, prebuild, build, etc) now handled as lists so they now support using && or ; in the script, and behave like .gitlab-ci.yml and other CI YAML.
 - GPG signatures for index-v1.json and index-v2.json
 - Use default.txt as fallback changelog when inserting fastlane metadata
 - scanner: F-Droid signatures now maintained in fdroid/suss
 - scanner: maintain signature sources in config.yml, including Exodus Privacy
 - scanner: use dexdump for class names
 - scanner: directly scan APK files when given a path
 - scanner: recursively scan APKs for DEX and ZIP using file magic
 - signindex: validate index files before signing
 - update: set ArchivePolicy based on VercodeOperation/signature
 - Include IPFS CIDv1 in index-v2.json for hosting repos on IPFS
 - Per-repo beta channel configuration
 - Add Czech translation
 
Fixed
- apksigner v30 or higher now required for verifying and signing APKs
 - 3.9 as minimum supported Python version
 - Lots of translation updates
 - Better pip packaging
 - nightly: big overhaul for reliable operation on all Debian/Ubuntu versions
 - Improved logging, fewer confusing verbose messages
 - scanner: fix detection of binary files without extension
 - import: more reliable operation, including Flutter apps
 - Support Java 20 and up
 
Removed
- Remove obsolete 
fdroid statscommand 
[2.1.1] - 2022-09-06
- gradlew-fdroid: Include latest versions and checksums
 - nightly: update Raw URLs to fix breakage and avoid redirects
 - signindex: gpg-sign index-v1.json and deploy it
 - update: fix --use-date-from-apk when used with files (#1012)
 
[2.1] - 2022-02-22
For a more complete overview, see the 2.1 milestone
[2.0.5] - 2022-09-06
Fixed
- gradlew-fdroid: Include latest versions and checksums
 - nightly: add support for GitHub Actions
 - nightly: update Raw URLs to fix breakage and avoid redirects
 - update: fix --use-date-from-apk when used with files (#1012)
 - Fix GitLab CI
 
[2.0.4] - 2022-06-29
Fixed
- deploy: ensure progress is instantiated before trying to use it
 - signindex: gpg-sign index-v1.json and deploy it 1080 1124
 
[2.0.3] - 2021-07-01
Fixed
- Support AutoUpdateMode: Version without pattern 931
 
[2.0.2] - 2021-06-01
Fixed
- fix "ruamel round_trip_dump will be removed" 932
 
[2.0.1] - 2021-03-09
Fixed
- metadata: stop setting up source repo when running lint/rewritemeta
 - scanner: show error if scan_binary fails to run apkanalyzer
 - common: properly parse version from NDK's source.properties
 - update: stop extracting and storing XML icons, they're useless
 - index: raise error rather than crash on bad repo file
 - update: handle large, corrupt, or inaccessible fastlane/triple-t files
 - Update SPDX License List
 - checkupdates: set User-Agent to make gitlab.com happy
 - Run push_binary_transparency only once
 
[2.0] - 2021-01-31
For a more complete overview, see the 2.0 milestone
Added
fdroid updateinserts donation links based on upstream's FUNDING.yml (!754)- Stable, public API for most useful functions (!798)
 - Load with any YAML lib and use with the API, no more custom parser needed (!826) (!838)
 - config.yml for a safe, easy, standard configuration format (!663)
 - Config options can be set from environment variables using this syntax:
keystorepass: {env: keystorepass}(!669) - Add SHA256 to filename of repo graphics (!669)
 - Support for srclibs metadata in YAML format (!700)
 - Check srclibs and app-metadata files with yamllint (!721)
 - Added plugin system for adding subcommands to 
fdroid(!709) fdroid update,fdroid publish, andfdroid signindexnow work with SmartCard HSMs, specifically the NitroKey HSM (!779) (!782)fdroid updatesupport for Triple-T Gradle Play Publisher v2.x (!683)- Translated into: bo de es fr hu it ko nb_NO pl pt pt_BR pt_PT ru sq tr uk zh_Hans zh_Hant
 
Fixed
- Smoother process for signing APKs with 
apksigner(!736) (!821) apksigneris used by default on new repos- All parts except build and publish work without the Android SDK (!821)
 - Description: is now passed to clients unchanged, no HTML conversion (!828)
 - Lots of improvements for scanning for proprietary code and trackers (!748) (!REPLACE) (!844)
 fdroid mirrornow generates complete, working local mirror repos- fix build-logs dissapearing when deploying (!685)
 - do not crash when system encoding can not be retrieved (!671)
 - checkupdates: UpdateCheckIngore gets properly observed now (!659, !660)
 - keep yaml metadata when rewrite failed (!658)
 - import: 
template.ymlnow supports omitting values (!657) - build: deploying buildlogs with rsync (!651)
 fdroid initgenerates PKCS12 keystores, drop Java < 8 support (!801)- Parse Version Codes specified in hex (!692)
 - Major refactoring on core parts of code to be more Pythonic (!756)
 fdroid initnow works when installed with pip
Removed
- Removed all support for .txt and .json metadata (!772)
 - dropped support for Debian 8 jessie and 9 stretch
 - dropped support for Ubuntu releases older than bionic 18.04
 - dropped 
fdroid server updateandfdroid server init, usefdroid deploy fdroid dscannerwas removed. (!711)make_current_version_linkis now off by default- Dropped 
force_build_toolsconfig option (!797) - Dropped 
accepted_formatsconfig option, there is only .yml now (!818) Provides:was removed as a metadata field (!654)- Remove unused 
latestapps.dat(!794) 
1.1.4 - 2019-08-15
Fixed
- include bitcoin validation regex required by fdroiddata
 - merged Debian patches to fix test suite there
 
1.1.3 - 2019-07-03
Fixed
- fixed test suite when run from source tarball
 - fixed test runs in Debian
 
1.1.2 - 2019-03-29
Fixed
- fix bug while downloading repo index (!636)
 
1.1.1 - 2019-02-03
Fixed
- support APK Signature v2 and v3
 - all SDK Version values are output as integers in the index JSON
 - take graphics from Fastlane dirs using any valid RFC5646 locale
 - print warning if not running in UTF-8 encoding
 - fdroid build: hide --on-server cli flag
 
1.1 - 2019-01-28
Fixed
- a huge update with many fixes and new features: https://gitlab.com/fdroid/fdroidserver/milestones/7
 - can run without and Android SDK installed
 - much more reliable operation with large binary APK collections
 - sync all translations, including newly added languages: hu it ko pl pt_PT ru
 - many security fixes, based on the security audit
 - NoSourceSince automatically adds SourceGone Anti-Feature
 - aapt scraping works with all known aapt versions
 - smoother mirror setups
 - much faster 
fdroid updatewhen using androguard