App Store v37 is in Beta/Alpha. To try it out, select the Beta channel via the menu in App Store's page for itself. Vanadium in GrapheneOS 2026102100 was 2 versions old so you can uninstall WebView updates and update again via a small delta update. WebView has no data to lose via uninstall updates.

Show Post

There are similar savings for the Vanadium WebView. Until recently, the Vanadium browser and WebView shared a browser engine library via Trichrome builds. Chromium deprecated Trichrome due to bugs and Chrome stopped using it so we did too. We highly prioritized App Store delta updates due to this.

Show Post

The latest arm64 Vanadium browser APK is 325MB. It was previously downloaded as a 131MB gzip file created with zopfli. It's now downloaded as a 17MB update for users who were on one of the most recent 2 Vanadium releases. It's down to 95MB via Brotli for users on older versions without deltas.

Show Post

The latest version extends the cryptographic hashes to covering the compressed APKs and deltas to verify those prior to decompression. This means a compromised update server can't use the new Rust Brotli decompression library and Rust delta library as additional attack surface to exploit the client.

Show Post

Our App Store has always used a signed JSON file for metadata with a timestamp for downgrade protection. That has cryptographic hashes of each APK for verification. There's also the standard OS package manager verification via whole file signatures in each APK and version code downgrade protection.

Show Post