5 Commits

Include renames

Author	SHA256	Message	Date
Yuvomi Mobile Contributors	11bf4ca620	ci: target Gitea Ubuntu and native Apple Silicon runners ... Move workflows into Gitea's workflow directory and use the supplied ubuntu-latest and macos-arm64 labels. Provision the Android SDK, require KVM without changing host permissions, support SHA-256 checkout and Gitea artifact uploads, and isolate scratch output on persistent runners. Skip untrusted fork PRs and keep release builds unsigned because Gitea ignores GitHub environment approval gates. Local workflow lint, repository invariants, ten preflight regressions, eight evidence-verifier tests, inline shell checks, scratch cleanup and SHA-256 fetch checks pass; remote runner execution remains unverified.	2026-10-21 07:40:19 +02:00
Yuvomi Mobile Contributors	9ca11e4fb5	test: exercise native Android flows against pinned upstream HTTPS and OIDC ... Add an ephemeral HTTPS proxy and standards-shaped RS256/S256-PKCE test IdP around the unmodified upstream checkout. Require unlocked devices and nonempty, failure-free JUnit evidence. The extended API 35 suite passes all seven cases, including native Blob/file transfer, session recreation, outage recovery, isolated OIDC and back navigation; eight evidence-verifier regressions also pass. API 37 and real-provider/device validation remain release gates.	2026-10-21 07:32:17 +02:00
Yuvomi Mobile Contributors	f7b9dcd91e	build: collect inspected unsigned Android artifacts with checksums ... Verify the production manifest, system-only trust, development APK signature and unsigned release outputs before collecting local artifacts. Record source identity and hashes outside Git. Exercised successfully against the built APKs and AAB; collection must follow a clean-source build.	2026-10-21 07:30:51 +02:00
Yuvomi Mobile Contributors	9088ee7e6a	ci: add pinned platform validation and maintainer-only signing workflows ... Provide Android API 35/37 and Xcode jobs, dependency advisory checks, source invariants, and checksum-verified tools. Actions lint and available Linux static checks pass; hosted CI and all Apple-platform builds still require authorized runners. The manual release workflow never publishes and uses only owner-supplied signing credentials.	2026-10-21 07:29:12 +02:00
Yuvomi Mobile Contributors	69c48169e2	fix(ios): restrict authentication capabilities and validate bootstrap types ... Require iOS 18.4 for explicit upload denial in the isolated authentication window. Add origin-bound generated download policy, app-switcher privacy, typed metadata regressions and original community icon assets. Seven portable tests and Swift formatting checks pass; Apple SDK validation remains external.	2026-10-20 23:45:01 +02:00