Notable changes in version 36:

• fix crash in handling background install confirmation on Android 16 and later
• ignore PendingActions from untrusted callers of MainActivity to avoid the potential for users to be tricked into installing an APK via the standard install dialog (reported by @thomasbuilds)
• remove usage of buggy experimental BadgeUtils functionality from the Material Components library
• update AndroidX Activity KTX library to 1.13.0
• update AndroidX Core KTX library to 1.18.0
• update AndroidX Navigation libraries and plugin to 2.9.8
• update Glide library to 5.0.7
• update Bouncy Castle library to 1.84
• update Android Gradle plugin to 9.2.0
• update Kotlin to 2.3.21
• update Kotlin Symbol Processing to 2.3.7
• update Gradle to 9.4.1
• raise TLS key pinning expiry date to 2027-04-01

A full list of changes from the previous release (version 35) is available through the Git commit log between the releases.

App Store is the client for the GrapheneOS app repository. It's included in GrapheneOS but can also be used on other Android 12+ operating systems. Our app repository currently provides our standalone apps, out-of-band updates to certain GrapheneOS components and a mirror of the core Google Play apps and Android Auto to make it easy for GrapheneOS users to install sandboxed Google Play with versions of the Google Play apps we've tested with our sandboxed Google Play compatibility layer.

GrapheneOS users must obtain GrapheneOS app updates through our App Store since verified boot metadata is required for out-of-band system app updates on GrapheneOS as part of extending verified boot to them.