diff options
| -rw-r--r-- | .github/workflows/check-changelog.yml | 7 | ||||
| -rw-r--r-- | CHANGELOG.md | 378 | ||||
| -rw-r--r-- | android/CHANGELOG.md | 330 | ||||
| -rw-r--r-- | audits/2022-10-14-atredis.md | 2 | ||||
| -rwxr-xr-x | prepare-release.sh | 2 |
5 files changed, 355 insertions, 364 deletions
diff --git a/.github/workflows/check-changelog.yml b/.github/workflows/check-changelog.yml index 838629e685..8925a21074 100644 --- a/.github/workflows/check-changelog.yml +++ b/.github/workflows/check-changelog.yml @@ -4,15 +4,20 @@ on: pull_request: paths: - 'CHANGELOG.md' + - 'ios/CHANGELOG.md' + - 'android/CHANGELOG.md' env: LINE_LIMIT: 100 jobs: check-changelog: runs-on: ubuntu-latest + strategy: + matrix: + changelog: [CHANGELOG.md, ios/CHANGELOG.md, android/CHANGELOG.md] steps: - name: Checkout repository uses: actions/checkout@v3 - name: No lines must exceed ${{ env.LINE_LIMIT }} characters run: | awk 'length($0) > '$LINE_LIMIT' { print NR ": Line exceeds '$LINE_LIMIT' chars: " $0; found=1 } \ - END { if(found) exit 1 }' CHANGELOG.md + END { if(found) exit 1 }' ${{ matrix.changelog }} diff --git a/CHANGELOG.md b/CHANGELOG.md index 9788d9e826..4217f6079f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -27,10 +27,6 @@ Line wrap the file at 100 chars. Th dropped packets and does not take fragmentation into account. - Add ability to import server IP overrides in GUI. -#### Android -- Add the ability to create and manage custom lists of relays. -- Add Server IP overrides feature. - ### Changed - Change default obfuscation setting to `auto`. - Migrate obfuscation settings for existing users from `off` to `auto`. @@ -46,12 +42,6 @@ Line wrap the file at 100 chars. Th - Fix incorrectly showing "App lost contact with system service" notification on suspend. -## [android/2024.1] - 2024-04-05 -### Fixed -#### Android -- Fix 3D map animation distance calculation. - - ## [2024.1] - 2024-03-21 ### Fixed - Fix map scaling issues when changing display scale settings and when running under Wayland on @@ -63,37 +53,6 @@ Line wrap the file at 100 chars. Th gracefully. -## [android/2024.1-beta1] - 2024-03-18 -### Added -#### Android -- Add 3D map to the connect screen. -- Add support for all screen orientations. -- Add possibility to filter locations by provider. -- Add toggle for enabling or disabling split tunneling. -- Add auto-connect and lockdown guide on platforms with system vpn settings. - -### Changed -#### Android -- Migrate to Compose Navigation which also improves screen transition animations. -- Increase focus highlight opacity. -- Set auto-connect setting as legacy on platforms with system vpn settings. -- Change default obfuscation setting to `auto`. -- Migrate obfuscation settings for existing users from `off` to `auto`. -- Update support email address to new email address, support@mullvadvpn.net. - -### Fixed -#### Android -- Improve DPAD navigation. -- Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks. -- Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly - configured MTU. - -### Security -#### Android -- Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8. -- Add protection against some tapjacking vulnerabilities. - - ## [2024.1-beta2] - 2024-02-19 ### Added - Add account UUID to verbose 'mullvad account get -v' output. @@ -143,10 +102,6 @@ Line wrap the file at 100 chars. Th with VMWare. -## [android/2023.10] - 2023-12-14 -Identical to `android/2023.10-beta1`. - - ## [2024.1-beta1] - 2023-12-14 ### Added - Add CLI support for applying patches to the settings with `mullvad import-settings`. @@ -168,18 +123,6 @@ Identical to `android/2023.10-beta1`. - Fix stable releases being considered a downgrade from a beta version by `dnf`. -## [android/2023.10-beta1] - 2023-12-11 -### Fixed -#### Android -- Fix relay selector attempting to connect to OpenVPN relays in some circumstances. - - -## [android/2023.9] - 2023-12-06 -### Added -#### Android -- Add missing translations for in-app purchases and a few settings. - - ## [2023.6] - 2023-12-06 ### Changed - Update OpenVPN to 2.6.8 from 2.6.0. @@ -189,20 +132,6 @@ Identical to `android/2023.10-beta1`. peer. -## [android/2023.8] - 2023-11-28 -Identical to `android/2023.8-beta2`. - - -## [android/2023.8-beta2] - 2023-11-27 -### Fixed -#### Android -- Fix top bar flickering in some scrollable views. -- Fix welcome screen sometimes showing on app restart after adding time. -- Fix inconsistencies with the account history in the login view. -- Fix OS crash when sharing long logs by instead sharing the log content as a file. -- Improve in-app purchase and verification flow in some circumstances. - - ## [2023.6-beta1] - 2023-11-23 ### Added - Add customizable relay lists to the CLI on desktop. Custom lists can be managed through @@ -241,26 +170,6 @@ Identical to `android/2023.8-beta2`. the directory in ProgramData (CVE-2023-50446). -## [android/2023.8-beta1] - 2023-11-20 -### Changed -#### Android -- Add Google Play in-app purchases to the build distributed via Google Play. -- Add social media content blocker. -- Add support for setting per-app language in system settings. -- Improve device and expiry information throughout the app. -- Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs - voucher dialog, in-app notifications). -- Add share button to the log view which can be used to copy or in other ways share the log text. - This was partially added to due to limitations in Compose which result in it not being possible to - select and copy text in the log view. - - -## [android/2023.7] - 2023-10-11 -### Changed -#### Android -- Minor addition to problem report logs to aid debugging of user issues. - - ## [2023.5] - 2023-10-10 ### Added #### Linux @@ -271,14 +180,6 @@ Identical to `android/2023.8-beta2`. - Fix connectivity issues when switching between networks or disconnecting. -## [android/2023.6] - 2023-09-25 -### Fixed -#### Android -- Fix inconsistent dialog corner radius. -- Fix missing scrolling in the changes dialog. -- Fix unused bundled relay list. - - ## [2023.5-beta2] - 2023-09-20 ### Fixed #### macOS @@ -290,49 +191,6 @@ Identical to `android/2023.8-beta2`. - Fix inability to switch from a network to a higher-priority network without the tunnel timing out. -## [android/2023.6-beta2] - 2023-09-13 -### Fixed -#### Android -- Fix tunnel state and connection details sometimes getting stuck showing the wrong information. -- Fix MTU dismiss behavior. -- Fix DNS input crash. -- Fix inconsistent dialog padding. - - -## [android/2023.6-beta1] - 2023-08-29 -### Added -#### Android -- Add quantum resistant tunneling. -- Add UDP-over-TCP WireGuard obfuscation. -- Improve how the Android firewall handles incoming connections on Android 11+ devices. -- Add search bar to the Select location view. -- Add settings entry to configure WireGuard port by either using a predefined or custom port. - -### Changed -#### Android -- Combine the "Preferences" and "Account" settings sub-menus into a single one called - "VPN Settings". -- Make "Split tunneling" more accessible by placing it directly in the main settings menu. -- Migrate multiple views to Compose and MVVM (Settings, Account, Split tunneling, Select location). - -### Fixed -#### Android -- Reduce flickering in the main/connect view. - - -## [android/2023.5] - 2023-08-02 -### Changed -#### Android -- New fancy version number in order to try to resolve Google Play distribution issues. Otherwise - same as `android/2023.4`. - - -## [android/2023.4] - 2023-07-18 -### Changed -#### Android -- Prevent opening download page in Google Play builds. - - ## [2023.5-beta1] - 2023-07-13 ### Added - Add `--help` and `--version` options to the desktop GUI application. @@ -374,59 +232,6 @@ Identical to `android/2023.8-beta2`. - Fix misaligned read in `shadowsocks` leading to a panic on some platforms. -## [android/2023.3] - 2023-06-27 -### Changed -#### Android -- Change so that all links and texts leading to the mullvad webpage display a modified version of - the webpage that does not include links to the account page in order to comply with - the Google Play payment policies. This doesn't apply to F-Droid builds. -- Hide the FAQs and Guides button for Google Play users. - - -## [android/2023.2] - 2023-05-22 -### Changed -#### Android -- Change so that all links and texts leading to the account web page (which also includes a payment - flow) are either hidden or leads to the app itself (notification actions) in order to comply with - the Google Play payment policies. This doesn't apply to F-Droid builds. - - -## [android/2023.1] - 2023-05-16 -### Fixed -#### Android -- Fix DNS input keyboard type. - - -## [android/2023.1-beta2] - 2023-05-09 -### Added -#### Android -- Add "Manage account" button to the account view. - -### Fixed -#### Android -- Fix missing payment info in out-of-time view. - - -## [android/2023.1-beta1] - 2023-05-03 -### Added -#### Android -- Add themed icon. -- Add DNS content blockers. - -### Changed -#### Android -- Clarify some of the error messages throughout the app. -- Increase WireGuard key rotation interval to 14 days. -- Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices. -- Hide "Buy more credit" buttons in the default release build published to Google Play, our website - and GitHub. The buttons are still visible for F-Droid builds. - -### Fixed -#### Android -- Fix adaptive app icon which previously had a displaced nose and some other oddities. -- Fix app version sometimes missing in the settings menu. - - ## [2023.4-beta1] - 2023-05-02 ### Added - Log select settings on each connection attempt. @@ -573,17 +378,6 @@ Identical to `android/2023.8-beta2`. queries to servers that would normally be blocked. -## [android/2022.3] - 2022-11-14 -### Added -#### Android -- Add privacy policy link in settings. -- Add initial privacy consent which is showed on each start until approved. - - -## [android/2022.2] - 2022-10-17 -Identical to android/2022.2-beta2 except for updated translations. - - ## [2022.5] - 2022-10-14 ### Fixed #### Linux @@ -675,22 +469,6 @@ Identical to android/2022.2-beta2 except for updated translations. interface. -## [android/2022.2-beta2] - 2022-09-09 -### Changed -#### Android -- Refresh device data when opening the account view to ensure the local data is up-to-date and that - the device hasn't been revoked. -- Disable settings button during login. - -### Fixed -#### Android -- Fix crash sometimes occurring during account creation. -- Fix tunnel info expansion state not remembered during pause and resume. -- Fix crash during some view transitions. -- Fix disabled login button on login failure. Instead, the login button will now still be enabled - on login failures to let the user re-attempt the login. - - ## [2022.4] - 2022-08-19 ### Added #### Windows @@ -707,36 +485,6 @@ Identical to android/2022.2-beta2 except for updated translations. actually transport. -## [android/2022.2-beta1] - 2022-08-11 -### Added -#### Android -- Add device management to the Android app. This simplifies knowing which device is which and adds - the option to log other devices out when the account already has five devices. - -### Changed -#### Android -- Lowered default MTU to 1280 on Android. -- Disable app icon badge for tunnel state notification/status. - -### Removed -#### Android -- Remove WireGuard view as it's no longer needed with the new way of managing devices. - -### Fixed -#### Android -- Fix unused dependencies loaded in the service/tile DI graph. -- Fix missing IPC message unregistration causing multiple copies of some messages to be received. -- Fix quick settings tile being unresponsive and causing crashes on some devices. -- Fix quick settings tile not working when the device is locked. It will now prompt the user to - unlock the device before attempting to toggle the tunnel state. -- Fix crash when clicking in-app URL notifications. - -### Security -#### Android -- Prevent location request responses from being received outside the tunnel when in the connected - state. - - ## [2022.3] - 2022-08-10 This release is for desktop only. @@ -874,10 +622,6 @@ This release is identical to 2022.2-beta2. one application. -## [android/2022.1] - 2022-03-01 -Identical to android/2022.1-beta3 except for a few updated translations. - - ## [2022.1] - 2022-03-01 This release is for desktop only. @@ -974,62 +718,6 @@ This release is identical to 2022.1-beta2 except that it has translations for ne whereas on Linux and macOS only root processes are able to reach the API. -## [android/2022.1-beta3] - 2022-02-08 -### Fixed -#### Android -- Fix app crash caused by quick settings tile. - - -## [android/2022.1-beta2] - 2022-01-27 -### Fixed -#### Android -- Fix app sometimes crashing during startup on Android TVs. - - -## [android/2022.1-beta1] - 2022-01-26 -### Added -#### Android -- Add toggle for Split tunneling view to be able to show system apps -- Add support of adaptive icons (available only from Android 8). - -### Changed -- Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first - few attempts. - -#### Android -- Improve stability by running the UI and the tunnel management logic in separate processes. -- Remove dialog warning that only custom local DNS servers are supported, since public custom DNS - servers are now supported. -- Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required). -- Change so that swiping the notification no longer kills the service since that isn't a common way - of handling the lifecycle in Android. Instead rely on the following mechanisms to kill the - service: - * Swiping to remove app from the Recents/Overview screen. - * Android Background Execution Limits. - * The System Settings way of killing apps ("Force Stop"). -- Change Quick Settings tile label to reflect the action of clicking the tile. Also add a subtitle - on supported Android versions (Q and above) to reflect the state. -- Hide the tunnel state notification from the lock screen. - -### Fixed -#### Android -- Fix banner sometimes incorrectly showing (e.g. "BLOCKING INTERNET"). -- Fix tunnel state notification sometimes re-appearing after being dismissed. -- Fix invalid URLs. Rely on browser locale rather than app/system language. -- Automatically disable custom DNS when no servers have been added. -- Fix issue where erasing wireguard MTU value did not clear its setting. -- Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon -properly after initialization. -- Fix UI sometimes not updating correctly while no split screen or after having a dialog from - another app appear on top. -- Fix request to connect from notification or quick-settings tile not connecting if VPN permission - isn't granted to the app. The app will now show the UI to ask for the permission and correctly - connect after it is granted. -- Fix quick-settings tile sometimes showing the wrong tunnel state. -- Fix TV-only apps not appearing in the Split Tunneling screen. -- Fix status bar having the wrong color after logging out. - - ## [2021.6] - 2021-11-17 ### Fixed - Fix the font for Russian. Issue introduced in 2021.6-beta1. @@ -1250,56 +938,15 @@ So there might be warnings when installing this for a while. This release is for desktop only. ### Added -- Preserve log of old daemon instance when upgrading on Desktop. - -#### Linux -- Always enable `src_valid_mark` config option when connecting to allow policty based routing. - -### Changed -- Allow whitespace in account token in CLI. -- Read account token from standard input unless given as an argument in CLI. -- Make WireGuard automatic key rotation interval mandatory and between 1 and 7 days. -- Show default, minimum, and maximum key rotation intervals in CLI. -- Attempt to send problem reports using other endpoints if using the primary one fails. -- Upgrade wireguard-go to version 20210225140808 (Windows: v0.3.8) -- Settings format updated to `v3`. - -### Fixed -- Fix GUI not showing correct view if disconnected from the daemon during app startup. -- Fix incorrectly displayed "inconsistent version" text in settings if disconnected from daemon on - startup. - -#### Linux -- Further improve offline monitor to properly receive `ENETUNREACH`. - -### Security -- Always reconnect appropriately after an upgrade. Previously, installing the app twice in - succession, with auto-connect disabled, would cause it to re-launch in the disconnected state. - - -## [android/2021.1] - 2021-05-04 -This release is for Android only. - -This release is identical to android/2021.1-beta1. -This is our first non beta release for the Android platform! - - -## [android/2021.1-beta1] - 2021-04-06 -This release is for Android only. From now on, Android releases will have this new header format -that is the same as the git tag they receive: `android/<version>`. - -### Added - Enable isolation of the Electron renderer process to protect against potentially malicious third party dependencies. +- Preserve log of old daemon instance when upgrading on Desktop. - Add 51820 to list of WireGuard ports in app settings. - Add option to connect to WireGuard relays over IPv6. - Add Burmese translations. -#### Android -- Allow reaching the API server when connecting, disconnecting or in a blocked state. -- Add FAQs & Guides menu entry to the Settings screen. -- Add TV banner for better user experience and requirements. -- Style StatucBar and NavigationBar to make our app a bit more beautiful. +#### Linux +- Always enable `src_valid_mark` config option when connecting to allow policty based routing. ### Changed - Update Electron from 11.0.2 to 11.2.1 which includes a newer Chromium version and @@ -1308,9 +955,13 @@ that is the same as the git tag they receive: `android/<version>`. - Only download a new relay list if it has been modified. - Connect to the API only via TLS 1.3 - Shrink account history capactity from 3 account entries to 1. - -#### Android -- WireGuard key is now rotated sooner: every four days instead of seven. +- Allow whitespace in account token in CLI. +- Read account token from standard input unless given as an argument in CLI. +- Make WireGuard automatic key rotation interval mandatory and between 1 and 7 days. +- Show default, minimum, and maximum key rotation intervals in CLI. +- Attempt to send problem reports using other endpoints if using the primary one fails. +- Upgrade wireguard-go to version 20210225140808 (Windows: v0.3.8) +- Settings format updated to `v3`. #### Windows - Upgrade Wintun from 0.9.2 to 0.10.1. @@ -1318,6 +969,9 @@ that is the same as the git tag they receive: `android/<version>`. ### Fixed - Fix delay in showing/hiding update notification when toggling beta program. - Improve responsiveness when reconnecting after some failed connection attempts. +- Fix GUI not showing correct view if disconnected from the daemon during app startup. +- Fix incorrectly displayed "inconsistent version" text in settings if disconnected from daemon on + startup. #### Windows - Fix "cannot find the file" error while creating a Wintun adapter by upgrading Wintun. @@ -1327,9 +981,11 @@ that is the same as the git tag they receive: `android/<version>`. - Stop using NM for managing DNS if it's newer than 1.26. - Fix DNS issues where NM would overwrite Mullvad tunnel's DNS config in systemd-resolved. - Fix issues with hosts where the firewall is doing reverse path filtering. +- Further improve offline monitor to properly receive `ENETUNREACH`. -#### Android -- Fix input area sometimes disappearing when returning to the Login screen. +### Security +- Always reconnect appropriately after an upgrade. Previously, installing the app twice in + succession, with auto-connect disabled, would cause it to re-launch in the disconnected state. ## [2021.2] - 2021-02-18 diff --git a/android/CHANGELOG.md b/android/CHANGELOG.md new file mode 100644 index 0000000000..dcb2a01618 --- /dev/null +++ b/android/CHANGELOG.md @@ -0,0 +1,330 @@ +# Android changelog +All changes to the software that can be noticed from the users' perspective should have an entry in +this file. Except very minor things that will not affect functionality, such as log message changes +and minor GUI adjustments. + +### Format + +The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/). + +Entries should have the imperative form, just like commit messages. Start each entry with words like +add, fix, increase, force etc.. Not added, fixed, increased, forced etc. + +Line wrap the file at 100 chars. That is over here -> | + +### Categories each change fall into + +* **Added**: for new features. +* **Changed**: for changes in existing functionality. +* **Deprecated**: for soon-to-be removed features. +* **Removed**: for now removed features. +* **Fixed**: for any bug fixes. +* **Security**: in case of vulnerabilities. + +## [Unreleased] +### Added +- Add the ability to create and manage custom lists of relays. +- Add Server IP overrides feature. + + +## [android/2024.1] - 2024-04-05 +### Fixed +- Fix 3D map animation distance calculation. + + +## [android/2024.1-beta1] - 2024-03-18 +### Added +- Add 3D map to the connect screen. +- Add support for all screen orientations. +- Add possibility to filter locations by provider. +- Add toggle for enabling or disabling split tunneling. +- Add auto-connect and lockdown guide on platforms with system vpn settings. + +### Changed +- Migrate to Compose Navigation which also improves screen transition animations. +- Increase focus highlight opacity. +- Set auto-connect setting as legacy on platforms with system vpn settings. +- Change default obfuscation setting to `auto`. +- Migrate obfuscation settings for existing users from `off` to `auto`. +- Update support email address to new email address, support@mullvadvpn.net. + +### Fixed +- Improve DPAD navigation. +- Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks. +- Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly + configured MTU. + +### Security +- Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8. +- Add protection against some tapjacking vulnerabilities. + + +## [android/2023.10] - 2023-12-14 +Identical to `android/2023.10-beta1`. + + +## [android/2023.10-beta1] - 2023-12-11 +### Fixed +- Fix relay selector attempting to connect to OpenVPN relays in some circumstances. + + +## [android/2023.9] - 2023-12-06 +### Added +- Add missing translations for in-app purchases and a few settings. + + +## [android/2023.8] - 2023-11-28 +Identical to `android/2023.8-beta2`. + + +## [android/2023.8-beta2] - 2023-11-27 +### Fixed +- Fix top bar flickering in some scrollable views. +- Fix welcome screen sometimes showing on app restart after adding time. +- Fix inconsistencies with the account history in the login view. +- Fix OS crash when sharing long logs by instead sharing the log content as a file. +- Improve in-app purchase and verification flow in some circumstances. + + +## [android/2023.8-beta1] - 2023-11-20 +### Changed +- Add Google Play in-app purchases to the build distributed via Google Play. +- Add social media content blocker. +- Add support for setting per-app language in system settings. +- Improve device and expiry information throughout the app. +- Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs + voucher dialog, in-app notifications). +- Add share button to the log view which can be used to copy or in other ways share the log text. + This was partially added to due to limitations in Compose which result in it not being possible to + select and copy text in the log view. + + +## [android/2023.7] - 2023-10-11 +### Changed +- Minor addition to problem report logs to aid debugging of user issues. + + +## [android/2023.6] - 2023-09-25 +### Fixed +- Fix inconsistent dialog corner radius. +- Fix missing scrolling in the changes dialog. +- Fix unused bundled relay list. + + +## [android/2023.6-beta2] - 2023-09-13 +### Fixed +- Fix tunnel state and connection details sometimes getting stuck showing the wrong information. +- Fix MTU dismiss behavior. +- Fix DNS input crash. +- Fix inconsistent dialog padding. + + +## [android/2023.6-beta1] - 2023-08-29 +### Added +- Add quantum resistant tunneling. +- Add UDP-over-TCP WireGuard obfuscation. +- Improve how the Android firewall handles incoming connections on Android 11+ devices. +- Add search bar to the Select location view. +- Add settings entry to configure WireGuard port by either using a predefined or custom port. + +### Changed +- Combine the "Preferences" and "Account" settings sub-menus into a single one called + "VPN Settings". +- Make "Split tunneling" more accessible by placing it directly in the main settings menu. +- Migrate multiple views to Compose and MVVM (Settings, Account, Split tunneling, Select location). + +### Fixed +- Reduce flickering in the main/connect view. + + +## [android/2023.5] - 2023-08-02 +### Changed +- New fancy version number in order to try to resolve Google Play distribution issues. Otherwise + same as `android/2023.4`. + + +## [android/2023.4] - 2023-07-18 +### Changed +- Prevent opening download page in Google Play builds. + + +## [android/2023.3] - 2023-06-27 +### Changed +- Change so that all links and texts leading to the mullvad webpage display a modified version of + the webpage that does not include links to the account page in order to comply with + the Google Play payment policies. This doesn't apply to F-Droid builds. +- Hide the FAQs and Guides button for Google Play users. + + +## [android/2023.2] - 2023-05-22 +### Changed +- Change so that all links and texts leading to the account web page (which also includes a payment + flow) are either hidden or leads to the app itself (notification actions) in order to comply with + the Google Play payment policies. This doesn't apply to F-Droid builds. + + +## [android/2023.1] - 2023-05-16 +### Fixed +- Fix DNS input keyboard type. + + +## [android/2023.1-beta2] - 2023-05-09 +### Added +- Add "Manage account" button to the account view. + +### Fixed +- Fix missing payment info in out-of-time view. + + +## [android/2023.1-beta1] - 2023-05-03 +### Added +- Add themed icon. +- Add DNS content blockers. + +### Changed +- Clarify some of the error messages throughout the app. +- Increase WireGuard key rotation interval to 14 days. +- Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices. +- Hide "Buy more credit" buttons in the default release build published to Google Play, our website + and GitHub. The buttons are still visible for F-Droid builds. + +### Fixed +- Fix adaptive app icon which previously had a displaced nose and some other oddities. +- Fix app version sometimes missing in the settings menu. + + +## [android/2022.3] - 2022-11-14 +### Added +- Add privacy policy link in settings. +- Add initial privacy consent which is showed on each start until approved. + + +## [android/2022.2] - 2022-10-17 +Identical to android/2022.2-beta2 except for updated translations. + + +## [android/2022.2-beta2] - 2022-09-09 +### Changed +- Refresh device data when opening the account view to ensure the local data is up-to-date and that + the device hasn't been revoked. +- Disable settings button during login. + +### Fixed +- Fix crash sometimes occurring during account creation. +- Fix tunnel info expansion state not remembered during pause and resume. +- Fix crash during some view transitions. +- Fix disabled login button on login failure. Instead, the login button will now still be enabled + on login failures to let the user re-attempt the login. + + +## [android/2022.2-beta1] - 2022-08-11 +### Added +- Add device management to the Android app. This simplifies knowing which device is which and adds + the option to log other devices out when the account already has five devices. + +### Changed +- Lowered default MTU to 1280 on Android. +- Disable app icon badge for tunnel state notification/status. + +### Removed +- Remove WireGuard view as it's no longer needed with the new way of managing devices. + +### Fixed +- Fix unused dependencies loaded in the service/tile DI graph. +- Fix missing IPC message unregistration causing multiple copies of some messages to be received. +- Fix quick settings tile being unresponsive and causing crashes on some devices. +- Fix quick settings tile not working when the device is locked. It will now prompt the user to + unlock the device before attempting to toggle the tunnel state. +- Fix crash when clicking in-app URL notifications. + +### Security +- Prevent location request responses from being received outside the tunnel when in the connected + state. + + +## [android/2022.1] - 2022-03-01 +Identical to android/2022.1-beta3 except for a few updated translations. + + +## [android/2022.1-beta3] - 2022-02-08 +### Fixed +- Fix app crash caused by quick settings tile. + + +## [android/2022.1-beta2] - 2022-01-27 +### Fixed +- Fix app sometimes crashing during startup on Android TVs. + + +## [android/2022.1-beta1] - 2022-01-26 +### Added +- Add toggle for Split tunneling view to be able to show system apps +- Add support of adaptive icons (available only from Android 8). + +### Changed +- Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first + few attempts. +- Improve stability by running the UI and the tunnel management logic in separate processes. +- Remove dialog warning that only custom local DNS servers are supported, since public custom DNS + servers are now supported. +- Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required). +- Change so that swiping the notification no longer kills the service since that isn't a common way + of handling the lifecycle in Android. Instead rely on the following mechanisms to kill the + service: + * Swiping to remove app from the Recents/Overview screen. + * Android Background Execution Limits. + * The System Settings way of killing apps ("Force Stop"). +- Change Quick Settings tile label to reflect the action of clicking the tile. Also add a subtitle + on supported Android versions (Q and above) to reflect the state. +- Hide the tunnel state notification from the lock screen. + +### Fixed +- Fix banner sometimes incorrectly showing (e.g. "BLOCKING INTERNET"). +- Fix tunnel state notification sometimes re-appearing after being dismissed. +- Fix invalid URLs. Rely on browser locale rather than app/system language. +- Automatically disable custom DNS when no servers have been added. +- Fix issue where erasing wireguard MTU value did not clear its setting. +- Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon + properly after initialization. +- Fix UI sometimes not updating correctly while no split screen or after having a dialog from + another app appear on top. +- Fix request to connect from notification or quick-settings tile not connecting if VPN permission + isn't granted to the app. The app will now show the UI to ask for the permission and correctly + connect after it is granted. +- Fix quick-settings tile sometimes showing the wrong tunnel state. +- Fix TV-only apps not appearing in the Split Tunneling screen. +- Fix status bar having the wrong color after logging out. + + +## [android/2021.1] - 2021-05-04 +This release is for Android only. + +This release is identical to android/2021.1-beta1. +This is our first non beta release for the Android platform! + + +## [android/2021.1-beta1] - 2021-04-06 +This release is for Android only. From now on, Android releases will have this new header format +that is the same as the git tag they receive: `android/<version>`. + +### Added +- Add 51820 to list of WireGuard ports in app settings. +- Add option to connect to WireGuard relays over IPv6. +- Add Burmese translations. +- Allow reaching the API server when connecting, disconnecting or in a blocked state. +- Add FAQs & Guides menu entry to the Settings screen. +- Add TV banner for better user experience and requirements. +- Style StatucBar and NavigationBar to make our app a bit more beautiful. + +### Changed +- Allow provider constraint to specify multiple hosting providers. +- Only download a new relay list if it has been modified. +- Connect to the API only via TLS 1.3 +- Shrink account history capactity from 3 account entries to 1. +- WireGuard key is now rotated sooner: every four days instead of seven. + +### Fixed +- Improve responsiveness when reconnecting after some failed connection attempts. +- Fix input area sometimes disappearing when returning to the Login screen. + +For older non-stable releases, see the main changelog ../CHANGELOG.md diff --git a/audits/2022-10-14-atredis.md b/audits/2022-10-14-atredis.md index 39a466142b..053e742119 100644 --- a/audits/2022-10-14-atredis.md +++ b/audits/2022-10-14-atredis.md @@ -10,7 +10,7 @@ For the desktop app, version [2022.4] was audited. On Android, version [2022.2-b was audited and on iOS the Test Flight version [2022.3 (build 1)] was audited. [2022.4]: ../CHANGELOG.md#20224---2022-08-19 -[2022.2-beta1]: ../CHANGELOG.md#android20222-beta1---2022-08-11 +[2022.2-beta1]: ../android/CHANGELOG.md#android20222-beta1---2022-08-11 [2022.3 (build 1)]: https://github.com/mullvad/mullvadvpn-app/commit/b05f9c588f5c88e98a9d36af84765bbd1254be43 Quoting the key conclusions of the report: diff --git a/prepare-release.sh b/prepare-release.sh index 2f0e1b7157..91829b142a 100755 --- a/prepare-release.sh +++ b/prepare-release.sh @@ -56,7 +56,7 @@ if [[ "$DESKTOP" == "true" && $(grep "^## \\[$PRODUCT_VERSION\\] - " CHANGELOG.m exit 1 fi -if [[ "$ANDROID" == "true" && $(grep "^## \\[android/$PRODUCT_VERSION\\] - " CHANGELOG.md) == "" ]]; then +if [[ "$ANDROID" == "true" && $(grep "^## \\[android/$PRODUCT_VERSION\\] - " android/CHANGELOG.md) == "" ]]; then echo "It looks like you did not add $PRODUCT_VERSION to the changelog?" echo "Please make sure the changelog is up to date and correct before you proceed." exit 1 |