GrapheneOS releases
grapheneos.org
Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

Tags:

  • 2025012600 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, emulator, generic, other targets)

Changes since the 2025011500 release:

  • disable standard Android feature holding a 10 minute screen wake lock after the screen brightness is raised at least 2 times within 5 minutes since this is confusing for users and it’s far better if keep awake is done explicitly
  • always show Linux kernel crash notifications from hardware memory tagging (Hardware Tag-Based KASAN) instead of only when system crash reporting is enabled by users
  • Messaging: begin under the hood overhaul including fully porting to target API 35 (Android 15)
  • recovery: remove spurious warning after sideloading an update fails on A/B update devices
  • change build username and hostname to match the stock Pixel OS format instead of setting both to grapheneos due to bad actors using it to ban using GrapheneOS
  • return green as the value of ro.boot.verifiedbootstate for user installed apps (not the base OS or system apps) due to bad actors using it to ban using GrapheneOS
  • SettingsIntelligence: don’t show preference summaries in search results since it doesn’t work properly for ones depending on dynamic string formatting and isn’t done by SettingsIntelligenceGoogle on the stock Pixel OS
  • Contact Scopes: fix spoofing of OP_GET_CONTACTS for apps not requesting WRITE_CONTACTS
  • Sandboxed Google Play compatibility layer: improve infrastructure
  • Sandboxed Google Play compatibility layer: allow blocking the Sandboxed Google Play is running notification
  • Sandboxed Google Play compatibility layer: add per-app Play Integrity menu in the per-app Settings configuration that’s shown after an app uses the Play Integrity API
  • Sandboxed Google Play compatibility layer: add per-app toggle for blocking using the Play Integrity API via the per-app Play Integrity menu as a workaround for apps which ban devices based on it but don’t require providing it to their service yet
  • Sandboxed Google Play compatibility layer: add shortcut to the per-app Play Integrity API menu for contacting the app developer by leaving a review through the Play Store page
  • Sandboxed Google Play compatibility layer: add menu for viewing all apps which have used the Play Integrity API with a shortcut in the per-app Play Integrity API menu
  • Sandboxed Google Play compatibility layer: show optional notification upon detection of Play Integrity usage providing a shortcut to the per-app Play Integrity API menu and another for hiding further notifications for the app which is also available as a toggle in the per-menu
  • hardened_malloc: update libdivide to 5.2.0
  • TalkBack (screen reader): update dependencies
  • TalkBack (screen reader): make builds fully reproducible by removing the use of DATE and TIME by brltty along with making the liblouis translation table zip use deterministic file order and timestamps
  • kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.124
  • kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.68
  • Vanadium: update to version 132.0.6834.79.0
  • Vanadium: update to version 132.0.6834.79.1
  • Vanadium: update to version 132.0.6834.79.2
  • Vanadium: update to version 132.0.6834.122.0
  • GmsCompatConfig: update to version 153
  • KindnessInfinityOPMEnglish
    7·
    4 days ago

    This release won’t be making it to the Beta and Stable channels due to a regression for changing the per-app settings added by GrapheneOS for apps in the work profile or Private Space when Settings is launched from the Owner user. We’ll make a new release later today with a fix.

    Source