Address the F-Droid submission review (fdroiddata!41394): the pairing form takes one device address instead of two loose ports, and both screens now clear the system bars under Android 15's edge-to-edge.
Captured with ./test screenshots. Both tracked shots were taken before the inset fix: the main screen has its header under the status bar, and the settings shot is missing its title and first section header behind the action bar.
The store screenshots were made by hand, so nothing kept them in step with the UI. Add ./test screenshots, which boots a pixel_6 AVD on the same image the e2e tier uses and overwrites the tracked PNGs. The AVD is its own so a capture run cannot disturb the device state e2e asserts against, and the panel comes from the device profile: forcing geometry with wm size on a booted software-GPU emulator ANRs SystemUI and the ANR dialog lands in the capture. SystemUI demo mode does the same, so the status bar is left live. Each shot is rejected unless the app owns the focused window and the PNG has the expected geometry.
The form asked for a host, a pairing port and a connection port as three separate fields. Nothing on screen says which port is which, and the two are only distinguishable if the reader already knows how adb pair works on Android 11+. Take the connection endpoint the way the target prints it, as a single "ip:port" string copied off the Wireless debugging screen, and leave the pairing dialog with just its port and code. Devices.parseAddress() does the split and rejects anything malformed rather than guessing: an unbracketed IPv6 literal would otherwise be split at the wrong colon. Reported on the F-Droid submission (fdroiddata!41394).
targetSdk 35 makes every window edge-to-edge on Android 15. Neither activity handled insets, so Main drew its header under the status bar and the Settings ScrollView started at window y=0: the framework action bar covered its first 80dp and the navigation bar covered the last rows. Pad both roots by the system bar insets. Main adds the IME inset as well, since an edge-to-edge window is not resized when the keyboard opens. Settings drops the framework action bar and draws its own title like Main already does, which removes the action-bar-versus-inset interaction entirely. Reported on the F-Droid submission (fdroiddata!41394).
Migrate hosting from Codeberg to GitLab. Update the LGPL source-availability notices in THIRD_PARTY_NOTICES to gitlab.com/0xlena/scrcpy-android.
Cut 0.2 for the F-Droid submission: it carries the opus playback fix, transactional session bring-up and teardown, the activity hardening, and the release-input verification. versionCode 2 corresponds to the already-written changelog for the store listing.
Pin and verify what goes into a release: JitPack confined to the SPAKE2 module via exclusiveContent, the vendored subtree pulled by commit SHA instead of a mutable tag, a pinned Docker base digest with a checksummed cmdline-tools download, and a verifyScrcpyServer task wired into every assets merge. The expected server checksum can be overridden with -PscrcpyServerSha256 when the jar is built from source. build-apk now requires apksigner and fails unless independent signature verification succeeds. Split the test image into unit and e2e targets so JVM-only test runs do not download an emulator. Ship THIRD_PARTY_NOTICES and the LGPL text for SPAKE2 in the APK. Add scripts/check as the host quality gate.
Opus playback never worked: feed() called dequeueInputBuffer() on a codec in async-callback mode, which always throws, so every packet was silently dropped. Feed input through the async callback with a bounded pending queue instead. Make bring-up transactional: roll back partially opened streams and the server shell on failure, join reader threads on stop, and close the owning ADB streams before releasing sinks. Replace the openAbstract watchdog thread with a real timeout in the vendored AdbConnection.open(), which also removes the half-open stream from the lookup table on failure. Harden the activity: release owned Surfaces, gate callbacks on a destroyed flag and a session generation, serialize reconnect, and handle target replacement via singleTask + onNewIntent. Propagate device-list write failures instead of swallowing them, bound the clipboard payload and the video pending queue against hostile peers, and discard incomplete recordings instead of keeping corrupt files. Use the mediaPlayback foreground-service type; Android 15 stops dataSync services after six hours. Drop the unused ACCESS_NETWORK_STATE permission.