Bump flatted from 3.2.7 to 3.4.2 in /packages/SystemUI/scripts/token_alignment - #330
Open
dependabot[bot] wants to merge 400 commits into
Open
Conversation
dependabot
Bot
added
dependencies
…SELECTED Treat it same way other storage perms are treated for now.
This is a workaround for a bug that auto-dismisses crash dialog for native crash almost immediately after it is shown. Crash dialogs are shown only for foreground apps by default, there's no need to auto dismiss them.
Crash report dialog is not affected, it uses startActivityAsUser() already.
ANR stack traces file contains stack traces of all app's threads and of all threads of relevant or possibly relevant system processes, such as system_server.
Access to these files is controlled by their SELinux policy. They are labeled as anr_data_file. Enforcing additional read restrictions for ANR stack traces files through Unix permissions prevented LogViewer app from accessing them, since it doesn't run as the highly privileged UID 1000 (android.uid.system) which owns these files.
Adds a "Show details" item to crash and ANR (app not responding) dialogs which opens the LogViewer app.
…ystem_server side Don't require reboot or settings re-set for always on and lockdown to take effect on first vpn connection. The requirement for reboot, re-set at settings has been caused by a permission not granted or declared by VpnDialogs, which caused the unexpected behavior. Prevent this by checking the permission of local process instead.
In the general case, ContentProvider authorities can't be renamed because they aren't required to be based on the package name. Chromium always forms ContentProvider authorities by prefixing them with its package name, and relies on this invariant in code. When its package is renamed by original-package handling code, statements like String authority = context.getPackageName() + CONSTANT become invalid. Add a special-case for Vanadium to fix this.
This is needed for properly verifying updates of system packages.
versionCode of many system packages, including privileged ones, is set to the current SDK version and is thus not incremented during non-major OS upgrades. This allowed to downgrade them to the older version that had the same versionCode.
Change-Id: I5ccc4d61e52ac11ef33f44618d0e610089885b87
Squashed with:
Author: Daniel Micay <danielmicay@gmail.com>
Date: Wed Mar 15 06:32:20 2023 -0400
simplify removal of SUPL IMSI / phone number
This is not required for SUPL to work and the comment about Google is
unnecessary.
Adds a global data structure that is accessible by privileged installers and allows them to avoid installing the same package at the same time.
Applies to device PIN, SIM PIN and SIM PUK input screens.
The HIDL to AIDL compatibility layer for face unlock HAL allows the HAL to directly clear lockout via onLockoutChanged(0) without going through FaceResetLockoutClient, bypassing framework lockout enforcement from the previous commit. For HIDL HALs, we can't really distinguish FaceResetLockoutClient's reset calls versus calls from the HAL for temporary timeout release. Adapting the HIDL path to use handleResponse gating like AIDL would require reworking the synchronous finish in FaceResetLockoutClient#startHalOperation, since it calls onClientFinished before the asynchronous onLockoutChanged(0) callback arrives from the HAL. This would make the handleResponse client check always fail, and it'd use the alternateAction every time. HIDL is deprecated since Android 13 and GrapheneOS doesn't even support face unlock. But, for completeness, we disable HIDL face support entirely rather than fix it. Block HIDL face sensor registration in FaceProvider.initSensors, throw in AidlResponseHandler.onLockoutChanged in case the reset ever gets called somehow, and skip face HIDL tests.
Pixels enable this via GlanceableHubConfigOverlay (config_glanceableHubEnabled) and GlanceableHubSysuiConfigOverlay (config_swipeToOpenGlanceableHub). Stallion BD6A has the former but is missing config_swipeToOpenGlanceableHub in the SystemUI overlay, which leaves the swipe gesture blocked. Set the AOSP defaults so the feature works without overlays (emulator) and so stallion BD6A's swipe works. The Settings app needs a matching config_show_glanceable_hub_toggle_setting_mobile flip too, normally provided by GlanceableHubSettingsConfigOverlay. stallion BD6A and other Pixels already have this in the overlay. The user still has to toggle "Widgets on lock screen" to opt in.
Before this commit, active Java dynamic code loading restrictions were applied only inside non-isolated app processes.
GosCompatMapsScanTests installs `GosCompatCheckApp`, which itself has its own standalone UI so tests can be run outside of the test harness and as a regular app. The tests runs the native maps scanner in the app's separate `:maps_scan` process. This maps scanner is used by a library that is used by several popular apps. There are two variants: - direct JNI invocation from a Java worker thread - reflective Java invocation followed by JNI from a Java worker thread The separate process is not only for the standalone UI. It keeps both the UI and the instrumentation process alive if the native scanner crashes, and it lets the test report the crash through `ApplicationExitInfo` and the debuggerd tombstone instead of losing the whole test invocation. The tests force-stop the helper between attempts so each scan runs with a newly created app process, which better matches app startup behavior. The scan is triggered by a translucent activity because shell-started background services are rejected by ActivityManager background start policy. That trigger activity is protected by `android.permission.DUMP`, which shell holds, so it is exported for shell-driven tests without being generally launchable by apps. Note that we don't intend the GosCompatCheckApp to be preinstalled anywhere anyway; the app is installed by the test harness normally. Each variant must complete multiple scan attempts. Each attempt force-stops the helper app, starts a fresh `:maps_scan` process, clears stale result state from inside that process, and stops at the first failed attempt. The instrumentation reads the completion result with `run-as` instead of polling the helper provider so it does not hold a binder dependency on a process that may be crashing. If native code crashes, the failure includes the signal line, five memory-map entries around the faulting mapping, and a backtrace. The test also reports formatted and raw tombstone artifacts through Tradefed. Test: `atest GosCompatMapsScanTests` after reverting the commit "avoid adding pthread_internal_t guard for main thread" from bionic results in both tests failing and reporting SEGV_ACCERR Test: `atest GosCompatMapsScanTests` with the fix in bionic results in both tests passing
Requires gos-dhdutil in adevtool
Test: manual, Google Maps with precise location turned off now displays location indicator Test: atest SystemUITests:com.android.systemui.appops.AppOpsControllerTest \ SystemUITests:com.android.systemui.privacy.AppOpsPrivacyItemMonitorTest
Change-Id: I80ac5d3c2f41260f4929851f7afe29c1760d69db
Change-Id: I0d5408ea5fad52c8057d1b64125736cff2656965
This reverts commit 1faa969.
This reverts commit 0d0a610.
Change-Id: Ice784faafd4d2731acbfb2cf3566f768b530c2ee
This is needed for the ACCESS_LOCAL_NETWORK permission which was split from INTERNET in Android 17. Change-Id: I41b1d5a1e20f51009b6812b419bf4caa99875c8e
…oneAccount()" This reverts commit 33ecadf.
…s.Global ConnChecksSetting.get() is used by Vanadium. Accessing it worked without the UnsupportedAppUsage annotation due to broken hidden API access enforcement with the current exec spawning implementation.
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.2.7 to 3.4.2. - [Commits](WebReflection/flatted@v3.2.7...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/packages/SystemUI/scripts/token_alignment/flatted-3.4.2
branch
from
June 18, 2026 22:34
4bf5f3d to
01e67ea
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
14 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps flatted from 3.2.7 to 3.4.2.
Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updates