ProtonPass

Recent Commits

• Antoine Marchaud(28 Jul 26)

  fix: index items refreshed by user events so they appear in the items list

• Victor(28 Jul 26)

  fix(ci): also cap Flank's job-level run timeout testTimeout (15m) bounds each shard's on-device test execution but not APK upload, matrix scheduling, or Flank's own result-polling overhead, so total job wall time could still exceed it. runTimeout (20m) caps the whole Flank invocation across all shards for a real job-level ceiling.

• Victor(28 Jul 26)

  fix(ci): bound selective test job time with timeout and uniform sharding Flank's default time-estimate sharding has no real historical data to work from, so it can pack far more tests into one shard than another (observed 85 vs 4), letting a single straggling shard gate the whole job indefinitely. Force count-based uniform sharding and cap Flank's per-test timeout so a hung test fails fast instead of stalling CI.

• Victor(28 Jul 26)

  chore: update changelog

• Victor(28 Jul 26)

  chore(release): version 1.40.2 → 1.40.3

• Victor(28 Jul 26)

  feat(logging): add logout observability Record privacy-safe logout reason codes and include the anonymous logout log in diagnostics shared by a logged-in user. Merge source logs chronologically, tag each exported line by source, and collapse consecutive duplicates without changing either original log. Biometric lock still shares only the anonymous log.

• Victor(28 Jul 26)

  fix(sync): clear user sync state during logout Reset the user event cursor, clear password history, and centralize cleanup when local shares are removed. This prevents stale sync data from surviving a logout.

• Victor(27 Jul 26)

  fix: improve file logging

• Antoine Marchaud(27 Jul 26)

  fix: unit tests

• Antoine Marchaud(27 Jul 26)

  feat: add feature flag for Pass Monitor per check exclusion

• Antoine Marchaud(27 Jul 26)

  feat: add feature flag for compromised passwords

• Antoine Marchaud(27 Jul 26)

  feat: add feature flag for the username generator

• Antoine Marchaud(06 May 26)

  feat: password penalty check

• Antoine Marchaud(24 Jul 26)

  fix: put the generated username in the username field when the form is expanded

• L10n bot(24 Jul 26)

  i18n(weekly-mr): Upgrade translations from crowdin (8a74ae7a).

• Victor(23 Jul 26)

  fix: improve sync

• Antoine Marchaud(23 Jul 26)

  fix: redirect to the correct app for rate app

• Victor(23 Jul 26)

  fix(passkeys): remove forgeable AOSP test key from privileged allowlist The vendored privileged-browser allowlist trusted the public AOSP platform test certificate as a `release` signer. Its private key is published in the AOSP tree, so any app could sign with it, pass the privileged-browser check in PasskeyOriginVerifier, and mint a passkey assertion for an arbitrary web origin (subject to user selection). - Strip the public test key from the allowlist and refresh the snapshot to the current upstream (adds Opera, Waterfox, Perplexity Comet, and others). - Teach scripts/ci/checkPasskeyPrivilegedBrowserAllowlist.sh to strip publicly-known AOSP test keys on every sync, so the scheduled upstream auto-update job can no longer reintroduce them. userdebug signers are kept (AndroidX honors them only on userdebug devices). - Add a PasskeyOriginVerifierTest guard that fails the build if any known public AOSP test key reappears in the allowlist.

• Antoine Marchaud(29 Apr 26)

  feat: add username generator

• Antoine Marchaud(16 Jul 26)

  feat: spead the word

• Victor(27 Apr 26)

  chore: update libraries

• Antoine Marchaud(22 Jul 26)

  fix: index synced items after the DB transaction so they appear in the paginated list

• Victor(22 Jul 26)

  ci: improve check unused string speed

• Victor(22 Jul 26)

  ci: parallelize build stage, narrow flavor build triggers, persist build cache - Add needs: [] to build-stage jobs so they run alongside analyze instead of waiting for it to finish. - build:alpha/play/fdroid/quest:prod:debug auto-trigger only on flavor- relevant paths (app/build.gradle.kts and any module's build.gradle.kts, plus src/<flavor>/** across modules), falling back to manual otherwise. nogms is untouched since it has no dedicated source sets. - Cache .gradle/build-cache across jobs alongside the existing dependency cache. - Make Flank's numUniformShards opt-in via -Pflank.numUniformShards, only passed by the nightly full-suite job. Sharding the selective per-MR job made it slower (small per-module test counts meant per-shard emulator boot overhead dominated), so that job is left unsharded.

• Antoine Marchaud(21 Jul 26)

  fix: explore tab

• Victor(22 Jul 26)

  fix: use suspend dao calls

• Victor(21 Jul 26)

  test: clarify biometrics-to-none test name to reflect full-disable path Rename 'changing from biometrics to password' to 'biometrics to None without enforcement - full disable path' to accurately reflect that it exercises the onBiometryAuthUnSet code path (full app lock disable) rather than the onBiometryAuthToPassword path (password-mode fallback).

• Victor(21 Jul 26)

  fix: missing none auth option

• Antoine Marchaud(21 Jul 26)

  feat: add compromised passwords and allow user to exclude an item for a subset of checks in Pass Monitor

• Antoine Marchaud(21 Jul 26)

  fix: run global monitor state DB updates off the main thread