v27.190

Highlights for users

• Fixed an issue where a crafted, malformed image link in a message sent by an authenticated user could lead to credential disclosure if a user taps on the image to expand it. (CVE-2022-35962)

This issue was discovered internally by the Zulip developers. We
analyzed all message history on Zulip Cloud and determined it has
never been exploited there.

Zulip server administrators should also upgrade to Zulip Server 5.6 or
later, to make this issue impossible to exploit on their servers.

sha256sum -c <<EOF
7e8dde1c9d0770f610bcc3e266bea6f06d50df1e12ba1b9fc643252a048a590b  app-arm64-v8a-release.apk
3f446bceeae3768a3bcbf5d772bf566d62f5c0406b38cf13a02ded98f1cabb6e  app-armeabi-v7a-release.apk
93ce4142cd74ac072e2c10708c426c693f86844ad6ae0d5332d59878d6901c18  app-x86_64-release.apk
4029d10c90962e5714af399b2a8a7d5790697e5dd88060a360913a8f019502bf  app-x86-release.apk
5a2a9bf7c7af0b81e818ffc47eea3e6512a75482e21d134684863da9cd8a78f9  app-release.aab
EOF

v27.189

Highlights for users

• Fixed a bug where reacting to a message with 🎉 would sometimes fail. (#5430)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• Upgraded to React Native v0.67! (#5232)
• Removed the brittle needsInitialFetch subsystem. (PR #5300)
• Resolved issues: #5427, #5430, #5232

sha256sum -c <<EOF
0a1372736e65fffa91fddd4a544acf0bc9e151528891807994d75a1ef4dd232f  app-arm64-v8a-release.apk
be5d7b8094b6cbd17463bca8c3b6dad8c477cbee61962941ce3e5251537f7a4c  app-armeabi-v7a-release.apk
161c36678cb71bf070a3cde3841dd9c769b143253767bce57054d500d6fcc4ec  app-x86-release.apk
5a32e287cf703f955cb2c572ef4d6e443678e0a3fe4ac8173910ba7c4b444d7c  app-x86_64-release.apk
26a58a032c9ddcc20cca7a513f8c523c51d435d5f6050cd8b6145ae8acd3b71a  app-release.aab
EOF

v27.188

Highlights for users, vs. v27.186 (last prod release)

• Users' custom profile fields are now shown in the profile view. These can include pronouns, social-media usernames, job titles, etc. (#2900)
• Support for a new display setting, to be released in Zulip Server 6: "Display names of reacting users when few users have reacted to a message." (#5348)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for users, vs. v27.187 (last beta release)

• Fixed a regression in v27.187 that prevented the app from working with Zulip Server versions before 2.1. (Note that those versions are officially unsupported. Affected users should still get their server upgraded.) (#5418)
• Support for a new display setting, to be released in Zulip Server 6: "Display names of reacting users when few users have reacted to a message." (#5348)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• Fixed a flake in waitingPeriodThreshold tests. (#5404)
• Fixed a flake in message-list-diffing tests. (#5414)
• Removed most definitions in navActions.js, to help reduce our use of the deprecated NavigationService approach. (#4417)
• Replaced our uses of Flow's $PropertyType and $ElementType with the new, more concise index-access syntax. (PR #5406)
• We're now running the latest versions of ESLint and Prettier. (PR #5393)
• Resolved issues: #5348, #5418, #4139, #5414, #5404, #4417, PR #5393, #4254

sha256sum -c <<EOF
6563329193893c16a2d5f9e273c383f897a30d9cea68d62000c3029608bc1c0c  app-arm64-v8a-release.apk
92c02d6eb157e9df8ff69e914034cc54321e29a54db548f48c280275ce515cf6  app-armeabi-v7a-release.apk
ddcdc1b7f7e704c4a1952d332a6c9090adf37c1145dcce268e2f5b9435f0fb06  app-x86-release.apk
4deca975f3fe3aa861eed2a2b7fbe0b654e30e02f2436435971994b52e3c03f4  app-x86_64-release.apk
f6bcd41effaa5e573c5f9c1e63d619613215b78283759fdcad5c5d1ce3f8bc47  app-release.aab
EOF

v27.187

Highlights for users

• Users' custom profile fields are now shown in the profile view. These can include pronouns, social-media usernames, job titles, etc. (#2900)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• Upgraded to React Native v0.66! (#5231)
• We now maintain React Navigation's type definitions as patched translations of the TypeScript definitions upstream, using TsFlower. (#5391)
• Synced Message type with the API doc at FL 132. (#5401)
• Resolved issues: #2900, #5391, #5231

sha256sum -c <<EOF
91f69100c6cd772b84937f34a300fe4762a25ef664f94eb70735276d7b9fcd5e  app-arm64-v8a-release.apk
49baa64cae34a61967d1e76779365ce6ad424e6b73ba0cbb0dc56f1c6790f700  app-armeabi-v7a-release.apk
1decfe9589d2e7c17f775fac5f18008d198e5aaca0c6f61e673318932001be56  app-x86-release.apk
c3819c19e3518f0cb740be2b405f73d69fb9d7183df867bfbbde98bf05affb9e  app-x86_64-release.apk
f54dd2c91a25918e75b995fd89ad29800c58f44601883bc517e9e3d79bc797b2  app-release.aab
EOF

v27.186

Highlights for users, vs. v27.183 (last prod release)

• Support for creating web-public streams. (#5250)
• We now offer the app in Mongolian. Many thanks to our kind volunteer translators!
• In the Home tab, topics with unread @-mentions are now highlighted with "@". (#4857)
• When searching for an emoji, you can now separate words with spaces, rather than having to type underscores. (#4636)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for users, vs v27.185 (last beta)

• (Android) Fixed a bug where the app sometimes wouldn't start. (#5383)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers, vs. v27.185

• Migrated to use servers' new user_settings object when possible. (#4933)

• Improved various types to better model the server API. (PRs #5373, #5374, #5376, #5379, #5384, #5386, #5388)

• Resolved issues: #5250, #5386, #4658, #5383, #4933, #5199

sha256sum -c <<EOF
534ee57d59fc44e28c45065e097a4269b83c48fe269216c5e77e6688801e9900  app-arm64-v8a-release.apk
c4cff47b6d155db9230dbbfdb23df6ce052cef531492c51c0e407c6b4f5da127  app-armeabi-v7a-release.apk
570fb9fb3dec477893e9c4e6148b81224570b95f735cf6582bfc88ed159ffed4  app-x86-release.apk
2aa388fb0b2c1306223adf4390acb7f6a5f0e8da3d66d0dab488cbb26c007450  app-x86_64-release.apk
9e964fb306ea0f398a305ba286f4b8c1830f853ab29bf513df4c463c92f54ede  app-release.aab
EOF

v27.185

Highlights for users, vs. v27.183 (last prod release)

• In the Home tab, topics with unread @-mentions are now highlighted with "@". (#4857)
• When searching for an emoji, you can now separate words with spaces, rather than having to type underscores. (#4636)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for users, vs v27.184 (last beta)

• In the Home tab, topics with unread @-mentions are now highlighted with "@". (#4857)
• When searching for an emoji, you can now separate words with spaces, rather than having to type underscores. (#4636)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers, vs. v27.184

• Fixed an incompatibility between React Navigation 5 and React Native v0.65. We'd taken the RN 65 upgrade in v27.184, the previous release, which was beta-only. (#5368)

• Our development environment, and CI, now use Node v16. (#4263)

• Synced API types with the API doc at FL 121: api.createStream and api.updateStream (#5341); ApiResponseServerSettings, InitialDataRealm, RealmDataForUpdate (#5349, #5354); StreamUpdateEvent (#5346); User and CrossRealmBot (#5351).

• RootErrorBoundary will now send all of errorInfo to Sentry. (#5357)

• Resolved issues: #5368, #4636, #5166, #4263, #4857, #5347

sha256sum -c <<EOF
1e0776750f72c6eabb947b5b47e9f6dfbf83b694581a5081224ed5e27e6a3c23  app-arm64-v8a-release.apk
0a8f3841619a352c67569e66b517b91ccd67066fcb8929e08077b4ff13564386  app-armeabi-v7a-release.apk
6035b4cb500f0649bf2db70a8d2ba572059b9d549f04adc10f3a54e496cb3a81  app-x86-release.apk
1b2cba19b422f37bd79acc38cfe8a87cb3af92614528faad84dfb67fa69e5355  app-x86_64-release.apk
c7a15ab98a8e1d5e7a5e301f2bbf7d66a764ee9ff50b1b235211c4d31d265d29  app-release.aab
EOF

v27.184

Highlights for users

• The badge for unread @-mentions at the top of the Home tab now looks better. (#5278)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• Upgraded to React Native v0.65! See commit 72583b1 for how to resolve an expected error from CocoaPods when you run yarn. (#5230)

• Bumped to server-3.0 (a.k.a. server-2.2) the threshold for warning users of unsupported old servers. (PR #5334)

• Bumped @sentry/react-native to ^3.3.3 to fix an issue in the release process. (#5335)

• Resolved issues: #5185, #5230, #5278, PR #5334

sha256sum -c <<EOF
a178cd594063f95cce14ad055d18f7123fcc9bfc6d00a77ba8d81854f371daab  app-arm64-v8a-release.apk
cfeb428b4636540f4cf7c4d0b96977c5fc47f6182fe6417fcbffa73b4fd51a7d  app-armeabi-v7a-release.apk
b4aaecc93f40ee57c94cdc9c4d386645fa46012ce3bd5d84288ffdf3f511d1c2  app-x86-release.apk
5772a85a7a8f05562305f4a89cf8609c323f66e1a5c9f73cebbeb8ff1d6352e1  app-x86_64-release.apk
4ec80faf01fc1dc17ad3656e3e93301057c813dbcb8c77131ec0d16398818267  app-release.aab
EOF

v27.183

Highlights for users

• Fixed a bug where you couldn't paste an org URL from the clipboard when logging in. (#5228)
• When choosing an emoji, popular ones now appear at the top of the list, including 🎉, 😄, and ❤️. (#4636)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• We now store persistent data in a sound way! (#4841)

• We now use typeahead.sort_emojis from @zulip/shared, for sorting emojis in the picker and autocomplete. (PR #5326, toward #4636)

• New setup for using custom icons in @zulip/shared. (#5307)

• Type coverage has increased to 98%. (#5323)

• ComposeBox is now a function component using React Hooks. (#5312)

• Resolved issues: #4841, #5228, PR #5312, #5307, PR #5310

sha256sum -c <<EOF
4dccf946ab23ef7845fc84879aaa38f45dc9609983ea1a0992514a774d4e76d3  app-arm64-v8a-release.apk
ea8c587e61ab3e1a6c9cb612cf849688c79433f06b5c692b404edae42f5345b2  app-armeabi-v7a-release.apk
6fb7a87b16047eced520449f603bd797bf28c9bd4b5b50679ad1520d2130f89c  app-x86-release.apk
b52c17bb6fbbbd62c914db28b89e3866b6ee2476f50f7432cfc91f04884a4311  app-x86_64-release.apk
28e50847cc8bf72d08e33acef2e274fd42a49cf95c4732c2013f44f4cc5e6b2d  app-release.aab
EOF

v27.182

Highlights for users

• Support for new Zulip Server 5.0 features:
  • You can now set your status with an emoji. (#4925)
  • You can now mark a topic as resolved. (#5202)
• New options "Copy link to topic" and "Copy link to stream" when you long-press on a topic or stream. (#4863, #5154)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers

• (Android) Our GitHub release now has a separate APK for each ABI, instead of one bigger APK. (#5295)
• Server-version logging tags are now set before reducers handle REGISTER_COMPLETE. (PR #5261)
• Sentry will now split "Unhandled Zulip API event type" into separate issues per event type. (PR #5243)
• Breadcrumbs are now sent to Sentry with the type and op of Zulip events: https://zulip.com/api/get-events (PR #5239)
• For VS Code users, we now properly specify what auto-formatter the project uses. (PR #5285)
• We've finished switching from stream names to stable IDs for identifying streams, as far as server support allows. (#3918)
• No more runtime import cycles, enforced with linting. (PR #5266)
• Updated to v0.0.9 of @zulip/shared. (#5292)
• Resolved issues: #3710, #5295, PR #5285, #5022, #4925, #5202, #5255, #5154, #4863, #3918, #5251, #2688, PR #5266, PR #5261, PR #5258, PR #5253, #3767, #5014, PR #5243, PR #5239

sha256sum -c <<EOF
570ba2cf99817c48d066ba0a1f12a2695a89015897932a3fa326b35976f4d22b  app-arm64-v8a-release.apk
7a10df2b1de897c03bced0fd08558d73eac11242a948a32d9ba8292fbea41f87  app-armeabi-v7a-release.apk
32ab83521f09f5e9993b90a9b88e58f6cbb4a2519d9ee9905ebe10d427cdbcb5  app-x86-release.apk
17c4b30e140dad95e60142d70498c3b71af2c43d636a1db71edc95152068693a  app-x86_64-release.apk
315b7b3db75c4e759460b2bb60b08d3998fb3baa5acd67cc59bf719e51f944fa  app-release.aab
EOF

v27.181

Highlights for users, vs v27.178 (last prod release)

• (Android) Notifications have a distinct sound, show more context, and expand to individual conversations. (#2691, #4842, #5136, #3150)
• Fixed one cause of slow startup times. (#5226)
• Fixed a family of bugs when a stream is renamed while you're looking at it. (#4333)
• Wordle players rejoice: Zulip fully supports the emoji for large green, yellow, and black squares. (#5220)

Plus, like every release, other fixes and improvements for your Zulip experience.

Highlights for developers, vs. 27.177 (last release from main)

• Platforms and dependencies:

  • Bumped targetSdkVersion to 31, aka Android 12. Almost a year ahead of deadline! (#5101)

  • Upgraded to Flow v0.141.0. (#5219)

  • Upgraded to React Native v0.64.3 from v0.64.2, so a new minor release. (#5167)

  • Migrated to Expo modules, from their "unimodules". This unblocks upgrading Expo packages more generally, and we did. (#5133, #5203)

• Server versions and API:

  • We warn to Sentry on server versions before server-3.0. The minimum supported version, the threshold for warning users, remains server-2.1. (#5218)

  • Our code now relies on server-1.9, i.e. Zulip Server 1.9+, released in 2018. These changes affected only comments and tests; future changes to rely on 2.0 and later will change actual behavior, as did the change in v27.177 to rely on server-1.8. (#5192)

  • In update_message events for server stealth-edits, we handle a possible future protocol with user_id: null instead of omitted. (#5194)

• We link separately to /policies/ on zulip.com and on the current server, rather than only to /terms/ and /privacy/ on the current server. (#5168)

• Types and data structures:

  • Our migrations for our Redux data now have tests. These found a year-old migration didn't work; it's fixed. (#5190)

  • We now use stream IDs instead of stream names to identify streams in most places, including the Narrow type. (#5183, #5205, #4333, #5223, toward #3918)

  • We now use $ReadOnlyArray and read-only object types in lots more places, including all the array and object types in our actions and other Redux-related types. (#5186)

• Resolved issues: #5145, #4840, #5168, #5156, #5162, #5171, #5101, #5187, #4687, #5195, #5206, #5133, #4333, #5130, #5218, #5220, #3150, #5223, #5226

  • Of these, #4840, #5156, and #5162 were also in the two cherry-pick releases v27.178 and v27.179.

  • #5206 was a regression in v27.180, not present in any beta or production release.

  • User-visible fixes not detailed in user highlights include: #5187, #5195, #5223, plus #5068 (in beta v27.176 highlights), plus see v27.177 and v27.176.

Highlights for developers in 27.177, vs. 27.176

(This was an alpha-only release.)

• We now warn the user when the server isn't registered for push notifications. (#1507)

• The tools/checkout-keystore script, used in preparing the published builds, now decrypts the keystore with Sequoia PGP rather than GPG. (PR #5144)

• Resolved issues: #5136, #1507, #4631, #5138, #5031, #5140, #5143, #5153

  • User-visible fixes not detailed in user highlights include: #4631, #5143

sha256sum -c <<EOF
8c836126d4e331937a745653c6c3c1b79e5114a0cdb443b6c040268ea92e8548  app-release.apk
3c361e4a031df11439919f91fa8a122c1610ec7141ad6dacb3786b0b2b03207a  app-release.aab
EOF