Commit Graph

7 Commits

Author SHA1 Message Date
LukeMackin
de8126cd11 fix: expo-constants/expo-updates降级到SDK52配套版本(~17.0.0/~0.27.5) 2026-07-20 13:50:33 +08:00
LukeMackin
ffd5d4d8e5 fix: AndroidManifest添加launchMode=singleTask+MainApplication适配expo prebuild 2026-07-20 13:47:52 +08:00
LukeMackin
b7f276f718 feat: Expo SDK升级到53, pnpm install成功 2026-07-20 13:17:06 +08:00
LukeMackin
bdde28cd7b fix: expo-updates版本改为镜像可用的~0.27.5 (sdk-52) 2026-07-20 13:04:03 +08:00
LukeMackin
74619a2713 fix(android): 安全修复 — SHA256原生层计算+TOCTOU+域名白名单
- PackageInstallerModule: DigestInputStream边写边算SHA256, 原生层校验消除TOCTOU
- updater: remove expo-crypto, add download domain whitelist, 错误消息去敏感路径
- package.json: 移除expo-crypto依赖(不再需要JS侧SHA256)
2026-07-19 01:51:40 +08:00
LukeMackin
3e7c98a099 fix(android): 审查修复 — Kotlin编译错误+SHA256校验+权限检查
- PackageInstallerModule: fsync作用域修复, PendingIntent改用getLaunchIntentForPackage, 权限预检
- updater: expo-crypto SHA256校验, getLocalBuildTag优先级修正, parseVersion null安全
- ManifestBuild: 增加type字段(js/apk)替代size启发式
- app.json: fallbackToCacheTimeout 0→3000
- shared: catch静默→console.warn
2026-07-19 01:48:00 +08:00
LukeMackin
9f8659c293 feat(android): OTA双轨更新 — shared版本号+Android Expo/PackageInstaller
- packages/shared: 版本号解析 vX.Y.Z-dav-{client}-{build} + manifest远程检查
- packages/client-android: Expo52 + expo-updates JS bundle OTA
- PackageInstallerModule.kt: APK静默安装原生模块(~60行Kotlin)
- monorepo: pnpm workspace + 版本号体系
2026-07-19 01:41:36 +08:00