Skylight Wallet

This commit only updates the app's version number and switches its internal wallet-core library to a newer pinned commit. No actual code changes are shown, and the commit message does not say anything about fixing a security problem. On its own, this diff does not demonstrate any vulnerability or security fix.

This commit fixes two real security gaps in a mobile cryptocurrency wallet. First, when the app was sent to the background and later reopened, it could return to an already-unlocked wallet with the password still in memory, letting anyone with the phone reach the seed phrase. The patch now locks the app on resume. Second, simply viewing the seed/secret keys only showed a warning sheet; now it also requires a fingerprint or face scan first. The commit message frames this as 'unifying lock requests between apps,' but the code comments and changes clearly describe the underlying security problems.

This commit removes a local QR-restore parser and switches the wallet to use a shared parser from another package. It also fixes two unrelated bugs in the send screen: one that could permanently block fee estimates after a single failure, and another that displayed tiny 'Max' balances in scientific notation, breaking sending. There is no obvious security vulnerability in the diff itself; the main concern is whether the new shared parser is as safe as the old one, which cannot be judged from this commit alone.

This commit adds Face ID and Touch ID support to unlock the Skylight Wallet app on iOS. It is a feature addition, not a security fix. There is no evidence in the commit of a vulnerability, bug, or security-relevant change beyond normal biometric authentication integration.

This commit fixes a security bug in how the Skylight Wallet app copies sensitive information to the clipboard. Previously, some screens copied wallet addresses and secret keys using the regular system clipboard, which could leave that data exposed in the clipboard history. The patch makes those screens use the app's secure clipboard helper instead, which marks the data as sensitive and clears it automatically. It also adjusts Android 13+ so the app doesn't show a duplicate 'copied' confirmation when the operating system already shows one.

This commit fixes a user-interface bug in the wallet's settings screen. Previously, when the on-screen keyboard appeared, it could cover the bottom of a settings form because the popup sheet was sized using the full screen height. The change subtracts the keyboard area from the available height so the sheet shrinks accordingly, keeping input fields visible and usable. There is no security issue here.

This commit only changes user-facing text strings in the Skylight Wallet app. It updates labels, descriptions, and warnings shown to users in English and Portuguese to be clearer and more informative about privacy and security risks. No code logic, security behavior, or functionality was modified.

This commit swaps out precompiled Monero wallet library files for newer versions across Android, iOS, Linux, and Windows. The only human-readable change is updating the iOS framework's bundle identifier from 'com.skylight.MoneroWallet' to 'org.magicgrants.MoneroWallet'. The actual code inside the binary libraries is not shown, so we cannot tell from this commit alone whether the update fixes security bugs, introduces them, or is purely routine maintenance.

This commit simply turns off automated desktop builds for Linux and Windows in the project's release pipeline. It does not change any wallet code, fix a bug, or introduce a security feature. The Android build remains active, and the release job no longer waits for the disabled desktop jobs.

This is a one-line shell script fix that changes how the build script reads the required Rust compiler version from a configuration file. The old method could fail to extract the version correctly in some cases, potentially causing a build to use the wrong Rust toolchain. The new method is simpler and more robust. There is no direct evidence this is a security vulnerability, but build reproducibility and toolchain correctness are security-relevant for software supply-chain integrity.

This commit is a build-maintenance change, not a security fix. It creates one central file (rust-toolchain.toml) that declares which Rust compiler version to use, and updates build scripts and Docker configuration to read from that file instead of hard-coding an older version. There is no change to wallet logic, cryptography, or user-facing behavior.

This commit simply updates version numbers and switches several software dependencies to newer pinned versions. There is no visible code change in the app itself, and the commit message gives no indication that any security problem is being fixed. Without inspecting the actual contents of the updated dependency versions, we cannot tell whether this update addresses a security issue or is just routine maintenance.

This commit is a routine product update that brings user-interface improvements from another wallet project ("spice") into Skylight Wallet. It changes labels and help text, updates the address-book design, adds a language picker to the welcome screen, and refreshes the privacy policy and terms of service. There is no evidence of a security fix or vulnerability being introduced.

This commit is a routine code cleanup. It removes several unused or dead utility files, widgets, and tests, and moves one small status icon definition into the screen that uses it. There is no change to how the app handles money, keys, network connections, or user data, and nothing in the commit suggests a security fix.