release: cut v0.5.0 (Discovery & Polish)

Bumps versionCode 6 -> 7 and versionName 0.4.2 -> 0.5.0 and banks the
50+ Iter-91 -> Iter-142 slices that accumulated in CHANGELOG Unreleased
since v0.4.2 (2026-05-13). Highlights:

- In-app changelog viewer + Settings -> About -> What's new + auto-display
  after update.
- Global in-app Settings search wired through the existing toolbar
  SearchView and a static-XML harvested SettingsSearchIndex.
- Component rules preview at Settings -> Rules -> Component rules.
- Backup: AES metadata v7 with HKDF-SHA256 per-archive keys, scheduled
  freshness gate, launcher shortcut, foreground progress notifications,
  default-app role rebind, path-exclusion globs, root system-data, and
  a provider-backed Network destination.
- Installer: privilege cascade, split-APK cert mismatch dialog, batch
  install from File Manager, sensitive-action authentication gate.
- Privileges: KernelSU and Magisk diagnostics, Dhizuku detection,
  Restricted Settings walkthrough, OS-revert banner, ADB tcpip reuse.
- Automation: Tasker am:// intents, signature-gated broadcast API, QS
  freeze tile, Canta/UAD-NG/Hail profile import.
- File Manager: recursive in-folder search, ZIP create/extract, smali
  decode level option.
- AGP 9.2.0 / Gradle 9.4.1 migration with Gradle-10-safe scripts.
- Security: deep-link parser hardening, install-transcript redactor,
  CSV-injection defuse, shortcut export hardening.

NG-native res/raw/changelog.xml gains a v0.5.0 release block so the
auto-display dialog and the new What's-new entry render NG content.
fastlane/metadata/.../changelogs/7.txt is the F-Droid release summary.
ROADMAP last-updated line, v0.5.0 row, and README roadmap block all
reflect the cut; v0.5.x line tracks the Settings reorganization and
contextual help tooltips that were deferred from this release.

Author: SysAdminDoc

CHANGELOG.md

@@ -5,6 +5,65 @@ Format loosely follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## Unreleased
 
+## v0.5.0 — 2026-05-25
+
+Discovery & Polish release. Banks the Iter-91 → Iter-142 work that
+accumulated after v0.4.2 (2026-05-13). Highlights:
+
+- **Discovery** — Settings → About → "What's new" entry point, automatic
+  release-notes display after in-place updates, global in-app Settings
+  search wired through the existing toolbar SearchView, and a NG-native
+  bundled changelog so the in-app viewer no longer ships upstream
+  v4.0.5 release notes.
+- **Backup engine** — AES backup metadata v7 derives per-archive AES-GCM
+  content keys from the single `am_keystore.bks` master key through
+  HKDF-SHA256, CIFS/SMB streaming hardening, scheduled-backup freshness
+  gate, scheduled-backup launcher shortcut, scheduled-backup progress
+  notifications with API-36 ProgressStyle, default-app role rebind after
+  restore, backup path-exclusion globs, root-only Android System data
+  backups, provider-backed Network destination, profile blocklist
+  enumerates backup roots.
+- **Installer** — Privilege cascade (ADB → Shizuku → root) with route
+  chips and Dhizuku / MIUI diagnostics, split-APK cert-mismatch dialog,
+  batch APK install from File Manager, installer SHA-256 checksum
+  confirmation dialog, sensitive-action authentication gate for
+  install / uninstall / clear-data, Android 17 cleartext-traffic
+  deprecation warning, Android 17 ML-DSA key algorithm display.
+- **Rules** — New Settings → Rules → "Component rules" preview screen,
+  per-app rollback planner (App Details → "Revert AppManager changes"),
+  settings snapshot bundle portability v2 (rule TSVs included), OEM
+  uninstall-blocker bypass (Samsung One UI 8.5 SmartSuggestions / MIUI
+  core / OPlus uninstall-guarded packages), debloat-definition auto-update.
+- **Privileges** — KernelSU diagnostics (seccomp / sulog / App Profile),
+  Magisk `--drop-cap` policy surface, Dhizuku Provider detection,
+  Restricted Settings unlock walkthrough, OS-revert detection banner +
+  Doze allowlist diff, capability-dropping probe, persistent ADB
+  `tcpip 5555` detection + reuse in the onboarding Wireless ADB setup
+  branch.
+- **Filters & Finder** — Install-date filter + filter-applied chip,
+  permission-flags filter, Finder relevance scoring, backup-only Finder
+  results, tracker-name search, per-app language picker, `pm hide`
+  toggle, SELinux context display, audio-volume AppOps preset.
+- **Automation** — Tasker-parameterised `am://` intents, signature-gated
+  broadcast API, Quick Settings freeze tile, profile import (Canta /
+  UAD-NG / Hail), Material You / Monet AppWidget theming, assistant
+  quick actions on `ACTION_ASSIST`.
+- **File Manager** — Recursive in-folder search, ZIP create / extract
+  with zip-slip guard, smali decode-level option (`none` / `basic` /
+  `verbose`).
+- **Distribution & build** — AGP 9.2.0 / Gradle 9.4.1 migration with
+  Gradle-10-safe build scripts, F-Droid 2.0 ROM preseed templates,
+  LocalServer bootstrap smoke test, Support Info Bundle composer.
+- **Permission monitoring** — Permission Change Monitor and Signing-Cert
+  Change Alert (both opt-in, default OFF).
+- **Security** — Deep-link parser crash / validation-bypass fix,
+  install-transcript URI redactor hardening, onboarding root-manager
+  probe fragment-detach fix, OperationHistoryExporter CSV / formula
+  injection defuse, static launcher shortcut export hardening, GitHub
+  Actions script-injection mitigations.
+
+Full per-slice notes follow.
+
 ### Added — Global Settings search (2026-05-25)
 
 - The Settings toolbar SearchView is now wired to an in-app preference index

README.md

@@ -92,7 +92,8 @@ for the current active backlog. Version targets:
 - **v0.2.0** ✅ — applicationId rename to `io.github.sysadmindoc.AppManagerNG`, fresh keystore, GitHub Actions release pipeline, NG CONTRIBUTING.md
 - **v0.3.0** ✅ — Material 3 dashboard refresh, Pro Mode toggle, edge-to-edge (Android 15/16 compliance), AMOLED/dark/light themes
 - **v0.4.0** ✅ — Permission Inspector (review/bulk-revoke dangerous permissions across all apps; critical-package guard; recovery action) + Onboarding capability wizard
-- **v0.5.0** (in flight) — Discovery & Polish: in-app changelog viewer, global in-app Settings search, Settings reorganization by task, contextual help tooltips, plus the Iter-91 → Iter-142 batch (scheduled auto-backup, AES v7 archive-key derivation, ADB tcpip reuse, KernelSU/Magisk drop-cap diagnostics, installer privilege cascade, OEM debloat-blocker bypass, per-app rollback, snapshot-bundle portability v2, component-rules preview, …). See `CHANGELOG.md` `Unreleased`.
+- **v0.5.0** ✅ 2026-05-25 — Discovery & Polish: in-app changelog viewer + auto-display after update, global in-app Settings search, plus the Iter-91 → Iter-142 batch (scheduled auto-backup polish, AES metadata v7 HKDF per-archive keys, ADB tcpip reuse, KernelSU/Magisk drop-cap diagnostics, Dhizuku detection, Restricted Settings unlock walkthrough, installer privilege cascade, OEM debloat-blocker bypass, per-app rollback, snapshot-bundle portability v2, Component rules preview, Tasker am:// intents, QS freeze tile, FM recursive search and ZIP create/extract, AGP 9.2.0). See `CHANGELOG.md`.
+- **v0.5.x** — Settings reorganization by task, contextual help tooltips (deferred from v0.5.0).
 - **v0.6.0** — Rootless Power: Routine Operations / Scheduler, Multi-Tag per App, Saved Filter Presets, Tracker Blocking via AppOps, Premium Polish Phase 2.
 
 ## Install

ROADMAP.md

@@ -2,7 +2,7 @@
 
 **Status:** Living document — update on every version bump.  
 **Baseline:** v0.1.0, forked from [App Manager](https://github.com/MuntashirAkon/AppManager) @ `3d11bcb` (post-v4.0.5), 2026-04-30.  
-**Last updated:** 2026-05-25 — Iter-142 active backlog consolidated. The live checklist for Iter-142+ work lives in [`RESEARCH_FEATURE_PLAN_2026-05-25.md`](RESEARCH_FEATURE_PLAN_2026-05-25.md) §Prioritized Roadmap (NF-01..NF-18 + EI-01..EI-10, P0→P3). Tick boxes there as items ship; this ROADMAP retains the long-form T1–T21 source-of-truth and Eng-Debt Register.
+**Last updated:** 2026-05-25 — **v0.5.0 cut** (versionCode 7, "Discovery & Polish"). Banks the Iter-91 → Iter-142 batch (AES metadata v7, scheduled-backup polish, installer privilege cascade, Component Rules preview, NG-native bundled changelog, global Settings search, What's-new entry) over v0.4.2. The live Iter-142+ checklist lives in [`RESEARCH_FEATURE_PLAN_2026-05-25.md`](RESEARCH_FEATURE_PLAN_2026-05-25.md) §Prioritized Roadmap (NF-01..NF-18 + EI-01..EI-10, P0→P3). Tick boxes there as items ship; this ROADMAP retains the long-form T1–T21 source-of-truth and Eng-Debt Register.
 
 **Prior (iter-141, 2026-05-18):** Shipped the T5 **Persistent ADB tcpip 5555 Detection in Shizuku Setup** row: onboarding now probes `127.0.0.1:5555`, surfaces a detected fixed `adb tcpip` session, and lets users connect through ADB-over-TCP without redoing Android Wireless debugging pairing.
 
@@ -272,8 +272,8 @@ Hard constraints:
 | **v0.2.0** ✅ | Identity | `applicationId` + namespace rename → `io.github.sysadmindoc.AppManagerNG`; new release keystore; GitHub Actions release pipeline; NG-specific CONTRIBUTING.md |
 | **v0.3.0** ✅ | UX Refresh | Material 3 dashboard; Pro Mode toggle; edge-to-edge (Android 15/16 compliance); AMOLED/dark/light themes |
 | **v0.4.0** ✅ | Permission Inspector | Review and bulk-revoke dangerous runtime permissions across all installed apps; critical-package denylist guard; in-app recovery action for previously revoked system packages |
-| **v0.5.0** | Settings & Discovery | Settings reorganization by task; global in-app search; contextual help tooltips; in-app changelog viewer |
-| **v0.6.0** | Rootless Power | Shizuku integration; rootless debloat; wireless ADB auto-pairing |
+| **v0.5.0** ✅ 2026-05-25 | Discovery & Polish | In-app changelog viewer + What's new entry + first-run-after-update bottom sheet; global in-app Settings search; Component rules preview; AES metadata v7 HKDF per-archive keys; scheduled-backup polish (freshness gate, launcher shortcut, progress notifications, role rebind, exclusion globs, root system-data, network destination); installer privilege cascade + split-APK cert mismatch; KernelSU/Magisk/Dhizuku/Restricted Settings/OS-revert diagnostics; Tasker am:// intents, QS freeze tile, profile importers; FM recursive search and ZIP create/extract; AGP 9.2.0 build; security and CI hardening. Settings reorganization by task and contextual help tooltips deferred to v0.5.x point release. |
+| **v0.6.0** | Rootless Power | Routine Operations / Scheduler, Multi-Tag per App, Saved Filter Presets, Tracker Blocking via AppOps, Premium Polish Phase 2. |
 
 ---
 

app/build.gradle

@@ -15,8 +15,8 @@ android {
         applicationId = 'io.github.sysadmindoc.AppManagerNG'
         minSdk = min_sdk
         targetSdk = target_sdk
-        versionCode = 6
-        versionName = "0.4.2"
+        versionCode = 7
+        versionName = "0.5.0"
         // AndroidX JUnit4 instrumentation runner so AndroidJUnit4-annotated tests
         // (e.g. AppsDbMigrationTest) are discovered. Default is the legacy
         // android.test.InstrumentationTestRunner which would silently skip them.

app/src/main/res/raw/changelog.xml

@@ -6,6 +6,35 @@
     and the upstream-hosted DTD URL must not be fetched at runtime.
 -->
 <changelog>
+    <release
+        type="stable release"
+        version="v0.5.0"
+        code="7"
+        date="25 May 2026">
+        <note>Discovery and Polish release. Banks the Iter-91 -> Iter-142 work.</note>
+        <new title="Discovery">Settings -> About -> What's new opens the in-app changelog viewer directly; the app now surfaces release notes once after each in-place update.</new>
+        <new title="Discovery">Global in-app Settings search: the toolbar SearchView indexes every static preference XML and routes taps through the existing am://settings deep link.</new>
+        <new title="Rules">Settings -> Rules -> Component rules preview lists every package with an AppManagerNG rule file or active IFW XML; tap a row for an IFW XML preview and a jump to App Details.</new>
+        <new title="Backup">AES backup metadata v7 derives per-archive AES-GCM content keys from the BKS master key through HKDF-SHA256; v6-and-older restores stay backward compatible.</new>
+        <new title="Backup">Scheduled Auto-Backup gains a freshness-window gate, a pinned launcher shortcut, foreground progress notifications (API 36 ProgressStyle), default-app role rebind, path-exclusion globs, root-only Android System data backups, and a provider-backed Network destination.</new>
+        <new title="Installer">Privilege cascade tries ADB / Shizuku / root before falling back to Android confirmation; split APKs are checked against the base APK signing cert; batch install from File Manager handles .apk / .apks / .apkm / .xapk.</new>
+        <new title="Security">Optional sensitive-action authentication gate for install, uninstall, and clear-data; signing-cert change monitor and dangerous-permission change monitor (both opt-in).</new>
+        <new title="Privileges">KernelSU and Magisk diagnostics (seccomp, sulog, App Profile, drop-cap policy); Dhizuku detection; Restricted Settings unlock walkthrough; OS-revert detection banner with Doze allowlist diff; persistent ADB tcpip 5555 reuse in onboarding.</new>
+        <new title="Filters">Install-date range filter; permission-flags filter; Finder relevance scoring; backup-only Finder results; tracker-name search.</new>
+        <new title="App Info">Per-app language picker (Android 13+); `pm hide` toggle; SELinux context display; audio-volume AppOps preset.</new>
+        <new title="Automation">Tasker-parameterised am:// intents; signature-gated broadcast API; Quick Settings freeze tile; profile import from Canta / UAD-NG / Hail.</new>
+        <new title="File Manager">Recursive in-folder search; ZIP create / extract with zip-slip protection; smali decode-level option.</new>
+        <new title="Distribution">F-Droid 2.0 ROM preseed templates; LocalServer bootstrap smoke test; Support Info Bundle composer.</new>
+        <improve title="Build">Migrated to AGP 9.2.0 / Gradle 9.4.1 with Gradle-10-safe build scripts, pinned NDK 28.2.13676358, and an `androidComponents` server packaging path.</improve>
+        <improve title="UI">Material You / Monet AppWidget theming; assistant quick actions on Android Assist.</improve>
+        <fix title="Security">Hardened deep-link parser against crash and validation-bypass; closed userinfo / query / fragment leak in install transcript redactor; defused CSV / formula injection in op-history exports; locked down static launcher shortcuts behind a trampoline.</fix>
+        <note subtext="true">
+            Multi-file AES backups produced by v0.4.0 / v0.4.1 (metadata v5) reused the GCM IV across files and remain
+            unsafe to restore. v0.4.2+ writes metadata v6+ with per-file IV derivation and v0.5.0 layers HKDF-SHA256
+            per-archive key derivation through metadata v7 on top.
+        </note>
+    </release>
+
     <release
         type="stable release"
         version="v0.4.2"

fastlane/metadata/android/en-US/changelogs/7.txt

@@ -0,0 +1,10 @@
+Discovery & Polish release. 50+ slices since v0.4.2.
+
+- In-app changelog viewer and global Settings search.
+- AES backup metadata v7 (HKDF per-archive keys), scheduled-backup freshness gate, launcher shortcut, progress notifications, role rebind, exclusion globs, root system-data backup, provider-backed Network destination.
+- Installer privilege cascade with route chips, split-APK cert-mismatch dialog, batch install from File Manager, optional auth gate for install / uninstall / clear-data.
+- Component rules preview, per-app rollback, snapshot portability v2, OEM bypass.
+- KernelSU + Magisk diagnostics, Dhizuku detection, Restricted Settings walkthrough, OS-revert banner.
+- Tasker am:// intents, broadcast API, QS freeze tile, Canta/UAD-NG/Hail import.
+- File Manager recursive search, ZIP create/extract.
+- AGP 9.2.0 / Gradle 9.4.1; security and CI hardening.