Tags:

• 2024121200 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, emulator, generic, other targets)

Changes since the 2024120900 release:

• SystemUI: disable migrate_clocks_to_blueprint and communal_hub flags to avoid upstream Android 15 QPR1 lockscreen layout regressions
• fix upstream bug causing the Microphone (RECORD_AUDIO) permission to be required for for local audio routing via REMOTE_SUBMIX instead of only the MODIFY_AUDIO_ROUTING permission with this explicit purpose (this caused Android Auto to require the Microphone permission for routing audio on both the stock OS and GrapheneOS, but it impacts GrapheneOS more due to permissions not being granted by default to Android Auto and most people not wanting to give it the Microphone permission)
• Settings: show current app battery usage mode in summary of App battery usage item
• Settings: add back Unrestricted battery usage option to App battery usage screen to undo the usability regression introduced by Android 14 QPR2 where Optimized vs. Unrestricted was hidden away in an inner mode accessed by pressing the text next to an allow background toggle for controlling the Restricted mode (they likely did this to discourage users enabling Unrestricted, but GrapheneOS users need this much more than stock OS users especially if they don’t use sandboxed Google Play and the new UI is very confusing/misleading instead of simply giving users a direct choice between the 3 modes)
• Dialer: add proper dark mode support for dialogs
• Android Debug Bridge: fix upstream use-after-free bug for network-based connections which is being caught by our always enabled hardware memory tagging support for the base OS in hardened_malloc
• Android Debug Bridge: backport support for v4 signatures in streaming app installs from Android’s development branch to support updating GrapheneOS apps directly with the streaming-based ADB install commands instead of needing to push them to the device and then install them (this stopped working after Android 15 since we had to replace signed fs-verity metadata with v4 signatures for our implementation of extending verified boot to system APK updates to close a major security hole in standard Android verified boot)
• kernel (6.6): update to latest GKI LTS branch revision
• Vanadium: update to version 131.0.6778.135.0