Skip to content

release: freeRASP 9.0.0 (Android SDK 20.0.1) - #241

Merged
tompsota merged 11 commits into
masterfrom
chore/android-sdk-20.0.1
Nov 13, 2026
Merged

tompsota merged 11 commits into
masterfrom
chore/android-sdk-20.0.1

Conversation

@tompsota

@tompsota tompsota commented Nov 10, 2026 •

Copy link
Copy Markdown
Member

What's new

Bumps the Android SDK from 19.3.1 to 20.0.1. 20.0.0 renamed the artifact to app.talsec.rasp:TalsecRasp-Community-{platform}. The app.talsec.plugin Gradle plugin 1.1.0 already resolves the new coordinate, so only sdkVersion changes.

The plugin also exposes the SDK's new features (Android only):

  • Ongoing call detection: ThreatCallback.onOngoingCall(CallState) (new CallState enum: started, ongoing, stopped) plus Talsec.startOngoingCallDetection() / stopOngoingCallDetection(). The state reaches Dart through a new Pigeon method, regenerated with pigeon 22.7.4 and dart-formatted.
  • Screen control blocking: Talsec.blockScreenControl() / isScreenControlBlocked()
  • Overlay windows hiding (Android 12+, needs HIDE_OVERLAY_WINDOWS): Talsec.blockOverlayWindows() / isOverlayWindowsBlocked()
  • Execution states: RaspExecutionStateCallback.onCriticalChecksFinished / onPostponedChecksFinished

Adapting to SDK changes

  • Breaking: RaspExecutionStateCallback.onAllChecksFinished → onFastChecksFinished and RaspExecutionState.allChecksFinished → fastChecksFinished, on all platforms. The Android SDK replaced onAllChecksFinished() with onFastChecksFinished(), and the plugin API now uses the same name. On Android it fires when the fast checks finish, while the postponed checks may still run. On iOS it is driven by the SDK's onAllChecksFinished(). Hence the major version bump to 9.0.0.
  • isScreenCaptureBlocked() now passes the current activity, as the SDK requires.
  • The new Dart methods throw UnimplementedError outside Android, as addToWhitelist does.
  • The pending [Unreleased] iOS fix (iOS: Talsec.start blocks the platform (main) thread on a synchronous keychain/XPC call — 30 s hang and watchdog termination on iOS 26 #231) is folded into the 8.4.0 section.

The changelog adds a ### Flutter section and the Android SDK notes for 20.0.0 and 20.0.1 from CHANGELOG_FREE_RASP.md. Entries the plugin section already covers (the new APIs, the execution-state change, isScreenCaptureBlocked(activity)) are dropped from the Android part, and the remaining ones carry no ❗️Breaking marker.

Tested on the Android emulator (Pixel 10 Pro, API 36)

  • flutter analyze is clean. flutter test passes 85 tests (new: execution-state mapping, onOngoingCall forwarding, Android-only guards).
  • Example app builds against TalsecRasp-Community-Flutter:20.0.1 and starts
  • onFastChecksFinished and onPostponedChecksFinished received
  • Screen control and overlay toggles switch to Protected
  • Simulated GSM call reported started then stopped, while the dialer had the foreground, via the background cache
  • After the rename: all checks and the Android build pass again; the Flutter example also builds for the iOS simulator. The rename wasn't re-run on the emulator.
  • iOS not re-tested. iOS native code is unchanged.

Before merging

  • Apply the release label (merging a labeled PR publishes the release)
  • Attach dSYMs if the release workflow requires them, even though the iOS SDK is unchanged

dSYMs.zip

🤖 Generated with Claude Code

tompsota and others added 3 commits November 10, 2026 15:20
Bump the Android SDK to 20.0.1 (app.talsec.rasp:TalsecRasp-Community-Flutter)
and expose its new features:

- ongoing call detection: ThreatCallback.onOngoingCall with CallState,
  Talsec.startOngoingCallDetection/stopOngoingCallDetection
- screen control blocking: blockScreenControl/isScreenControlBlocked
- overlay windows hiding: blockOverlayWindows/isOverlayWindowsBlocked
- onCriticalChecksFinished/onPostponedChecksFinished execution states

onAllChecksFinished is now driven by the SDK's onFastChecksFinished, which
fires where the removed onAllChecksFinished used to.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
The execution state that fires when the fast (standard) checks complete is
renamed on all platforms to match the Android SDK's onFastChecksFinished. On
iOS it is driven by the SDK's onAllChecksFinished. This is a breaking change,
so the package major version is bumped.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
@tompsota tompsota changed the title release: freeRASP 8.4.0 (Android SDK 20.0.1) release: freeRASP 9.0.0 (Android SDK 20.0.1) Nov 11, 2026
tompsota and others added 2 commits November 11, 2026 10:13
…plugin

The plugin hides these native API changes from its users, so they move from
the Android Breaking Changes section to Changed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
tompsota and others added 4 commits November 11, 2026 12:10
…ce (#242)

* refactor(android): move plugin to the app.talsec.rasp namespace

Align the Android package of the plugin with the Android SDK's app.talsec.rasp,
adding the platform as the last segment.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* refactor(android): update package names to app.talsec.rasp

Completes the move of the plugin sources: package declarations, imports,
Gradle namespace and build configuration.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>
Talsec.start now uses TalsecMode.BACKGROUND, as the React Native plugin
already does, so the SDK initializes off the calling thread.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
@tompsota
tompsota added this pull request to stack #245 November 12, 2026 09:17
@tompsota tompsota added the release Create a new release on GH and publish package label Nov 13, 2026
@tompsota
tompsota removed this pull request from stack #245 November 13, 2026 22:04
* feat!: unify the public API with the other freeRASP plugins

- config fields follow the native SDKs: AndroidConfig.certificateHashes,
  supportedAlternativeStores; IOSConfig.appBundleIds, appTeamId
- threat names match the other plugins: onAdbEnabled, onUnsecureWifi,
  Threat.deviceID, Threat.unsecureWifi
- every method throws only TalsecException or a subclass; new
  UnsupportedPlatformException replaces UnimplementedError, and the
  malware/external-id exceptions are now exported

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* test(ios): use the renamed config keys in RunnerTests

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* refactor!: hide Talsec internals, tighten malware callback, unify unknown-code handling

- Talsec.private and the channel fields are private; tests use an
  internal createTalsecForTesting factory that freerasp.dart hides
- MalwareCallback takes List<SuspiciousAppInfo> suspiciousApps
- ThreatX.fromInt throws ArgumentError; Talsec terminates the app on an
  unknown threat or execution state code, like the JS plugins

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* fix: use @VisibleForTesting for the test factory

@internal is not exported by flutter/foundation in Flutter 3.24, the
minimum supported version used by CI.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* refactor!: replace Pigeon with the threat event channel (#244)

* refactor!: replace Pigeon with the threat event channel

Malware and ongoing call detections are sent over the existing threat
EventChannel as {type, ...} maps next to the plain threat codes, so one
subscription delivers every detection in order. PackageInfo,
SuspiciousAppInfo and CallState become hand-written Dart types with the
same names; ThreatCallback no longer extends the generated
TalsecPigeonApi. The pigeon dev dependency and generated code are removed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* fix: import @internal and @immutable from package:meta

flutter/foundation does not export @internal in Flutter 3.24, the minimum
supported version used by CI.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>
@tompsota
tompsota merged commit de2c10c into master Nov 13, 2026
6 checks passed
@tompsota
tompsota deleted the chore/android-sdk-20.0.1 branch November 13, 2026 22:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release Create a new release on GH and publish package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant