android/rsend/versions, branch 0.2.1 [no description] app: release 0.2.1 2026-08-23T00:00:00+00:00 Lena lena@omega 2026-08-23T00:00:00+00:00 4bc9e8522099deaa3de25d4cb6fb721dc9f42878 Advance the version once from the released 0.2.0 base and publish the matching changelog. No transfer, protocol or storage behaviour changed, so the store description stands. The dashboard screenshot prints BuildConfig.VERSION_NAME, so it is the one store image a version bump invalidates. Recaptured on the same 1080x2400 profile with the same demo state. 
Advance the version once from the released 0.2.0 base and publish the
matching changelog. No transfer, protocol or storage behaviour changed,
so the store description stands.

The dashboard screenshot prints BuildConfig.VERSION_NAME, so it is the
one store image a version bump invalidates. Recaptured on the same
1080x2400 profile with the same demo state.
build: pin the build host and the shipped ABIs 2026-08-23T00:00:00+00:00 Lena lena@omega 2026-08-23T00:00:00+00:00 174521e494159bb0e65c551b440fe732767bdd6d The native scripts picked an NDK host tag for macOS as well, but ci/setup-toolchain.sh provisions nothing outside Linux x86_64 and no pipeline exercises the other branch. Fail with the message setup already gives instead of naming a toolchain nobody can obtain here. The armeabi-v7a and x86 cases were never reachable either: ABIS ships arm64-v8a and x86_64, and ci/verify-apk.sh has no machine check for the other two, so adding one to ABIS failed the build it was meant to enable. Record what a new ABI actually costs instead of inviting a one-line edit that cannot work. 
The native scripts picked an NDK host tag for macOS as well, but
ci/setup-toolchain.sh provisions nothing outside Linux x86_64 and no
pipeline exercises the other branch. Fail with the message setup already
gives instead of naming a toolchain nobody can obtain here.

The armeabi-v7a and x86 cases were never reachable either: ABIS ships
arm64-v8a and x86_64, and ci/verify-apk.sh has no machine check for the
other two, so adding one to ABIS failed the build it was meant to
enable. Record what a new ABI actually costs instead of inviting a
one-line edit that cannot work.
app: release 0.2.0 2026-08-16T00:00:00+00:00 Lena lena@omega 2026-08-16T00:00:00+00:00 6578dc47a7d1f7946528e9540d9cfa2e9a5d88d2 Document the multi-remote release, publish matching store metadata, and advance the version once from the released 0.1.3 base. 
Document the multi-remote release, publish matching store metadata,
and advance the version once from the released 0.1.3 base.
build: pin and verify release inputs 2026-08-16T00:00:00+00:00 Lena lena@omega 2026-08-16T00:00:00+00:00 8c6390571d28ff21a98ed3802458aceddbb6d2a0 Support Alpine/musl and Debian/glibc hosts, lock downloaded and Gradle artifacts, and verify native and APK security properties. 
Support Alpine/musl and Debian/glibc hosts, lock downloaded and
Gradle artifacts, and verify native and APK security properties.
native: harden rsync and SSH transport 2026-08-16T00:00:00+00:00 Lena lena@omega 2026-08-16T00:00:00+00:00 beaa0c970d6c3538119b8a34a3f2f754b45e54cf Update rsync to 3.5.0 and Go to 1.26.6. Bound SSH handshakes, pin host-key types, and build 16 KB-aligned hardened executables. 
Update rsync to 3.5.0 and Go to 1.26.6. Bound SSH handshakes, pin
host-key types, and build 16 KB-aligned hardened executables.
ci: pin toolchains and verify release artifacts 2026-07-13T22:00:29+00:00 Lena lena@omega 2026-07-01T00:00:00+00:00 2aa6920fb1568249d2466fa1b13760d1a51c0e8f Checksum-pin every downloaded toolchain archive. Before publishing, verify the APK was built from HEAD, the tag matches versionName, apksigner passes, and the tree is clean; publish a sha256 sidecar and treat published assets as immutable. Compare full unsigned APKs in verify-repro and run the Android unit tests in CI. 
Checksum-pin every downloaded toolchain archive. Before publishing,
verify the APK was built from HEAD, the tag matches versionName,
apksigner passes, and the tree is clean; publish a sha256 sidecar
and treat published assets as immutable. Compare full unsigned APKs
in verify-repro and run the Android unit tests in CI.
ci: pin the exact JDK release 2026-07-01T00:00:00+00:00 Lena lena@omega 2026-07-01T00:00:00+00:00 f8253eace9d231b276024dd66406d890c1d954e1 The Adoptium "latest 17 GA" endpoint floats while versions promises never to float. Pin the full Temurin build and fetch it by version. 
The Adoptium "latest 17 GA" endpoint floats while versions promises
never to float. Pin the full Temurin build and fetch it by version.
rsend: push phone folders to a home SSH host over rsync 2026-01-01T00:00:00+00:00 Lena lena@omega 2026-01-01T00:00:00+00:00 7e04941bccb2683f8a6e3ee38a99c50129234dd1 A small Android app for one-way folder backup, a KISS alternative to Syncthing. It bundles rsync (built from pinned source via the NDK) and a pure-Go SSH transport, both shipped in the APK as lib*.so and run from the native library directory. rsend pins the host key, stores the ed25519 identity Keystore-encrypted, pushes each folder additively or as a mirror, and runs on demand or on a WiFi-only schedule. The build is self-contained and reproducible: make setup provisions the toolchain, make builds rsync, rsh, and the APK. 
A small Android app for one-way folder backup, a KISS alternative to
Syncthing. It bundles rsync (built from pinned source via the NDK) and
a pure-Go SSH transport, both shipped in the APK as lib*.so and run from
the native library directory.

rsend pins the host key, stores the ed25519 identity Keystore-encrypted,
pushes each folder additively or as a mirror, and runs on demand or on a
WiFi-only schedule. The build is self-contained and reproducible: make
setup provisions the toolchain, make builds rsync, rsh, and the APK.