From 2cfe7648673b890ecb8c96ccf3ea5e16e0a1c5d5 Mon Sep 17 00:00:00 2001 From: jkaczman Date: Mon, 18 May 2026 09:24:54 -0400 Subject: [PATCH 1/7] chore: update crate and pubspec to 1.0.2 --- lib/routes/design_lab_page.dart | 2 +- pubspec.yaml | 2 +- rust/Cargo.lock | 14 +++++++------- rust/Cargo.toml | 4 ++-- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/lib/routes/design_lab_page.dart b/lib/routes/design_lab_page.dart index 05ab764..5169ed0 100644 --- a/lib/routes/design_lab_page.dart +++ b/lib/routes/design_lab_page.dart @@ -653,7 +653,7 @@ Widget? designLabTargetPage(String target, {String themeName = 'dark'}) { return const camera_settings.SettingsPage( cameraName: 'Front Door', previewFirmwareVersion: '1.4.2', - previewOsVersion: '1.0.0', + previewOsVersion: '1.0.2', previewSelectedResolution: '4K', previewSelectedFps: 30, previewNotificationsEnabled: true, diff --git a/pubspec.yaml b/pubspec.yaml index c19ba49..355663b 100644 --- a/pubspec.yaml +++ b/pubspec.yaml @@ -16,7 +16,7 @@ publish_to: 'none' # Remove this line if you wish to publish to pub.dev # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html # In Windows, build-name is used as the major, minor, and patch parts # of the product and file versions while build-number is used as the build suffix. -version: 1.0.0+5 +version: 1.0.2+7 environment: sdk: ^3.7.2 diff --git a/rust/Cargo.lock b/rust/Cargo.lock index e23b007..29bb3d4 100644 --- a/rust/Cargo.lock +++ b/rust/Cargo.lock @@ -1862,7 +1862,7 @@ dependencies = [ [[package]] name = "rust_lib_secluso_flutter" -version = "1.0.0" +version = "1.0.2" dependencies = [ "bincode", "flutter_rust_bridge", @@ -1921,8 +1921,8 @@ dependencies = [ [[package]] name = "secluso-app-native" -version = "1.0.0" -source = "git+https://github.com/secluso/secluso?rev=183642cc858c0e0e1b5a70a13992ae367dc67351#183642cc858c0e0e1b5a70a13992ae367dc67351" +version = "1.0.2" +source = "git+https://github.com/secluso/secluso?rev=7bcbb4e4785fddab7f309b9535b29b98d54136fc#7bcbb4e4785fddab7f309b9535b29b98d54136fc" dependencies = [ "anyhow", "bincode", @@ -1941,8 +1941,8 @@ dependencies = [ [[package]] name = "secluso-client-lib" -version = "1.0.0" -source = "git+https://github.com/secluso/secluso?rev=183642cc858c0e0e1b5a70a13992ae367dc67351#183642cc858c0e0e1b5a70a13992ae367dc67351" +version = "1.0.2" +source = "git+https://github.com/secluso/secluso?rev=7bcbb4e4785fddab7f309b9535b29b98d54136fc#7bcbb4e4785fddab7f309b9535b29b98d54136fc" dependencies = [ "anyhow", "base64-url", @@ -1962,8 +1962,8 @@ dependencies = [ [[package]] name = "secluso-client-server-lib" -version = "1.0.0" -source = "git+https://github.com/secluso/secluso?rev=183642cc858c0e0e1b5a70a13992ae367dc67351#183642cc858c0e0e1b5a70a13992ae367dc67351" +version = "1.0.2" +source = "git+https://github.com/secluso/secluso?rev=7bcbb4e4785fddab7f309b9535b29b98d54136fc#7bcbb4e4785fddab7f309b9535b29b98d54136fc" dependencies = [ "anyhow", "rand 0.9.4", diff --git a/rust/Cargo.toml b/rust/Cargo.toml index ee4cd55..d7127da 100644 --- a/rust/Cargo.toml +++ b/rust/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "rust_lib_secluso_flutter" -version = "1.0.0" +version = "1.0.2" edition = "2021" [lib] @@ -21,7 +21,7 @@ tracing-log = "0.2.0" [dependencies.secluso-app-native] git = "https://github.com/secluso/secluso" -rev = "183642cc858c0e0e1b5a70a13992ae367dc67351" +rev = "7bcbb4e4785fddab7f309b9535b29b98d54136fc" package = "secluso-app-native" [lints.rust] From 09d42c27c6ae941c3d1de1e82a531e9507da953b Mon Sep 17 00:00:00 2001 From: jkaczman Date: Tue, 19 May 2026 10:20:37 -0400 Subject: [PATCH 2/7] feat(releases): check reproducibility of android aab in workflow --- .../workflows/aab-reproducibility-check.yml | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/aab-reproducibility-check.yml diff --git a/.github/workflows/aab-reproducibility-check.yml b/.github/workflows/aab-reproducibility-check.yml new file mode 100644 index 0000000..89be68a --- /dev/null +++ b/.github/workflows/aab-reproducibility-check.yml @@ -0,0 +1,31 @@ +name: Check Reproducibility of Android AAB + +on: + workflow_dispatch: + pull_request: + types: [labeled] + +concurrency: + group: android-aab-repro-check-${{ github.ref }} + cancel-in-progress: true + +permissions: + contents: read + +jobs: + build-reproducible-linux-deploy: + if: github.event_name == 'workflow_dispatch' || github.event.label.name == 'verify-android-aab-reproducible' + runs-on: ubuntu-24.04 + timeout-minutes: 90 + + steps: + - name: Check out repo + uses: actions/checkout@v4 + + - name: Run build script + id: build + shell: bash + run: | + set -Eeuo pipefail + + env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh \ No newline at end of file From 9a2bff312b74b4c5359c1da0db6dde5195784858 Mon Sep 17 00:00:00 2001 From: jkaczman Date: Tue, 19 May 2026 11:12:03 -0400 Subject: [PATCH 3/7] fix(releases): use sudo to run; sha256sum final result --- .github/workflows/aab-reproducibility-check.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/aab-reproducibility-check.yml b/.github/workflows/aab-reproducibility-check.yml index 89be68a..39a4ae3 100644 --- a/.github/workflows/aab-reproducibility-check.yml +++ b/.github/workflows/aab-reproducibility-check.yml @@ -13,7 +13,7 @@ permissions: contents: read jobs: - build-reproducible-linux-deploy: + build-reproducible-aab-deploy: if: github.event_name == 'workflow_dispatch' || github.event.label.name == 'verify-android-aab-reproducible' runs-on: ubuntu-24.04 timeout-minutes: 90 @@ -28,4 +28,6 @@ jobs: run: | set -Eeuo pipefail - env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh \ No newline at end of file + sudo env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh + + sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file From 902c0d9bd1600c78dcf35393aa9567d073d2235b Mon Sep 17 00:00:00 2001 From: jkaczman Date: Tue, 19 May 2026 12:02:36 -0400 Subject: [PATCH 4/7] fix: use sudo to check hash of aab --- .github/workflows/aab-reproducibility-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/aab-reproducibility-check.yml b/.github/workflows/aab-reproducibility-check.yml index 39a4ae3..d0da3b0 100644 --- a/.github/workflows/aab-reproducibility-check.yml +++ b/.github/workflows/aab-reproducibility-check.yml @@ -30,4 +30,4 @@ jobs: sudo env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh - sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file + sudo sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file From 147b22470f699b319f90b448db6ae8042d5bb6e5 Mon Sep 17 00:00:00 2001 From: jkaczman Date: Sat, 20 Jun 2026 05:30:58 -0400 Subject: [PATCH 5/7] refactor: move emit artifact hash into new step for ergonomics --- .github/workflows/aab-reproducibility-check.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/aab-reproducibility-check.yml b/.github/workflows/aab-reproducibility-check.yml index d0da3b0..23ac944 100644 --- a/.github/workflows/aab-reproducibility-check.yml +++ b/.github/workflows/aab-reproducibility-check.yml @@ -29,5 +29,6 @@ jobs: set -Eeuo pipefail sudo env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh - - sudo sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file + - name: Emit artifact hash + shell: bash + run: sudo sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file From e3a90f40610b97922d5c7f0a3f5df5d91355e2b0 Mon Sep 17 00:00:00 2001 From: jkaczman Date: Sat, 20 Jun 2026 06:08:53 -0400 Subject: [PATCH 6/7] fix: revert https://github.com/secluso/mobile_client/pull/84 change of pubspec.lock --- pubspec.lock | 40 ++++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/pubspec.lock b/pubspec.lock index ff29d36..5be7eae 100644 --- a/pubspec.lock +++ b/pubspec.lock @@ -157,10 +157,10 @@ packages: dependency: transitive description: name: characters - sha256: faf38497bda5ead2a8c7615f4f7939df04333478bf32e4173fcb06d428b5716b + sha256: f71061c654a3380576a52b451dd5532377954cf9dbd272a78fc8479606670803 url: "https://pub.dev" source: hosted - version: "1.4.1" + version: "1.4.0" checked_yaml: dependency: transitive description: @@ -667,26 +667,26 @@ packages: dependency: transitive description: name: leak_tracker - sha256: "33e2e26bdd85a0112ec15400c8cbffea70d0f9c3407491f672a2fad47915e2de" + sha256: "6bb818ecbdffe216e81182c2f0714a2e62b593f4a4f13098713ff1685dfb6ab0" url: "https://pub.dev" source: hosted - version: "11.0.2" + version: "10.0.9" leak_tracker_flutter_testing: dependency: transitive description: name: leak_tracker_flutter_testing - sha256: "1dbc140bb5a23c75ea9c4811222756104fbcd1a27173f0c34ca01e16bea473c1" + sha256: f8b613e7e6a13ec79cfdc0e97638fddb3ab848452eff057653abd3edba760573 url: "https://pub.dev" source: hosted - version: "3.0.10" + version: "3.0.9" leak_tracker_testing: dependency: transitive description: name: leak_tracker_testing - sha256: "8d5a2d49f4a66b49744b23b018848400d23e54caf9463f4eb20df3eb8acb2eb1" + sha256: "6ba465d5d76e67ddf503e1161d1f4a6bc42306f9d66ca1e8f079a47290fb06d3" url: "https://pub.dev" source: hosted - version: "3.0.2" + version: "3.0.1" lints: dependency: transitive description: @@ -723,26 +723,26 @@ packages: dependency: transitive description: name: matcher - sha256: dc0b7dc7651697ea4ff3e69ef44b0407ea32c487a39fff6a4004fa585e901861 + sha256: dc58c723c3c24bf8d3e2d3ad3f2f9d7bd9cf43ec6feaa64181775e60190153f2 url: "https://pub.dev" source: hosted - version: "0.12.19" + version: "0.12.17" material_color_utilities: dependency: transitive description: name: material_color_utilities - sha256: "9c337007e82b1889149c82ed242ed1cb24a66044e30979c44912381e9be4c48b" + sha256: f7142bb1154231d7ea5f96bc7bde4bda2a0945d2806bb11670e30b850d56bdec url: "https://pub.dev" source: hosted - version: "0.13.0" + version: "0.11.1" meta: dependency: transitive description: name: meta - sha256: "23f08335362185a5ea2ad3a4e597f1375e78bce8a040df5c600c8d3552ef2394" + sha256: e3641ec5d63ebf0d9b41bd43201a66e3fc79a65db5f61fc181f04cd27aab950c url: "https://pub.dev" source: hosted - version: "1.17.0" + version: "1.16.0" mime: dependency: transitive description: @@ -1255,10 +1255,10 @@ packages: dependency: transitive description: name: test_api - sha256: "8161c84903fd860b26bfdefb7963b3f0b68fee7adea0f59ef805ecca346f0c7a" + sha256: fb31f383e2ee25fbbfe06b40fe21e1e458d14080e3c67e7ba0acfde4df4e0bbd url: "https://pub.dev" source: hosted - version: "0.7.10" + version: "0.7.4" timezone: dependency: transitive description: @@ -1391,10 +1391,10 @@ packages: dependency: transitive description: name: vector_math - sha256: d530bd74fea330e6e364cda7a85019c434070188383e1cd8d9777ee586914c5b + sha256: "80b3257d1492ce4d091729e3a67a60407d227c27241d6927be0130c98e741803" url: "https://pub.dev" source: hosted - version: "2.2.0" + version: "2.1.4" video_player: dependency: "direct main" description: @@ -1590,5 +1590,5 @@ packages: source: hosted version: "3.1.3" sdks: - dart: ">=3.9.0-0 <4.0.0" - flutter: ">=3.32.0" + dart: ">=3.8.0 <4.0.0" + flutter: ">=3.32.0" \ No newline at end of file From 0cc23cbe0b9a56bc0d938c0104dd81971c5c695a Mon Sep 17 00:00:00 2001 From: jkaczman Date: Wed, 22 Jul 2026 10:02:42 -0400 Subject: [PATCH 7/7] refactor: use GITHUB_WORKSPACE env var --- .github/workflows/aab-reproducibility-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/aab-reproducibility-check.yml b/.github/workflows/aab-reproducibility-check.yml index 23ac944..1756e68 100644 --- a/.github/workflows/aab-reproducibility-check.yml +++ b/.github/workflows/aab-reproducibility-check.yml @@ -31,4 +31,4 @@ jobs: sudo env SECLUSO_REPRO_CLEAN=1 SECLUSO_REPRO_USE_HOST_CACHES=0 SECLUSO_REPRO_GRADLE_JVMARGS='-Xmx2G -XX:MaxMetaspaceSize=512m -XX:ReservedCodeCacheSize=256m -XX:+HeapDumpOnOutOfMemoryError' tool/repro/build_aab_with_docker.sh - name: Emit artifact hash shell: bash - run: sudo sha256sum /home/runner/work/mobile_client/mobile_client/build/reproducible/app-release-unsigned.aab \ No newline at end of file + run: sudo sha256sum "$GITHUB_WORKSPACE/build/reproducible/app-release-unsigned.aab" \ No newline at end of file