From 33522dfeaff02a519fe60af66c6e0f3606252c44 Mon Sep 17 00:00:00 2001 From: esefxdz Date: Wed, 29 Jul 2026 23:46:04 +0300 Subject: [PATCH] changelog: bump to v2.0.7 --- CHANGELOG.md | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 55bfe80..b1534ef 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,20 +5,29 @@ Versions follow [semver](https://semver.org/): MAJOR.MINOR.PATCH --- -## [1.0.7] — Unreleased +## [2.0.7] — Unreleased ### Added - **Manual update checker** — "Check for updates" button in sidebar - Uses GitHub Releases API to find the latest version - - Up to date → snackbar "✓ Up to date (v1.0.7)" - - Update available → opens Play Store or GitHub releases page immediately (no dialogs) + - Up to date → snackbar "✓ Up to date" + - Update available → opens Play Store or GitHub releases page immediately - **Website button** in sidebar → opens `https://getrevolt.app` +- **Timer syncing indicator** — shows "Connecting…" / "Syncing…" spinner during handshake ### Changed - Sidebar now has 6 rows: Ad Consent, Privacy Policy, About, Discord, Website, Check for updates +- API uses domain with proper TLS validation (traffic blends in with normal HTTPS) +- VPN tunnel destination pinned to hardcoded server IP (domain compromise = DoS only) + +### Security +- 6 new security audits (#8 through #12) covering domain exposure, network transit, server hardening, and pentesting +- SNI rotation per session — 5 spoofed sites instead of 1 +- Outbound abuse ports blocked (SMTP, NetBIOS, SSDP) +- Xray `flow: xtls-rprx-vision` properly set server-side ### Dependencies -- `package_info_plus` added to pubspec — for reading the local version from the app bundle +- `package_info_plus` added ---