Skylight Wallet

This commit simply updates the GitHub Actions 'checkout' step from version 4 to version 6 in several workflow files. It is a routine dependency/maintenance change with no visible security fix or vulnerability introduced in the diff itself.

This commit only increases the app's build number from 18 to 19 in a configuration file (pubspec.yaml). There are no code changes, no security fixes, and no behavior changes. It is a routine version bump.

This commit only increases the app's version number from 1.0.9+17 to 1.0.10+18 in a configuration file. There are no code changes, no dependency updates, and no security-related content visible in the diff.

This commit adds a new setup screen and settings for choosing how the wallet fetches the Monero-to-fiat exchange rate. Users can now pick Tor-only (the default), clearnet (direct internet), or disabled. The clearnet option fetches the rate directly from Kraken's API without routing through Tor, which the app labels as 'not private.' This is a privacy-relevant change, not a code-execution vulnerability, because it lets users intentionally trade some privacy for reliability. The commit also renames many 'connection' labels to 'LWS' (light-wallet server) to avoid confusion with the new fiat API connection.

This commit only increases the app's build number from 17 to 18 in a configuration file. It contains no code changes, no security fixes, and no functional changes.

This commit simply adds a Git submodule pointing to an external Monero C library. There is no code change, no vulnerability introduced in the diff itself, and no security-relevant content beyond registering a dependency source.

This commit only increases the app's build number from 16 to 17 in a configuration file. It makes no code changes and presents no security relevance.

This commit only adds F-Droid store listing files—descriptions, screenshots, and icons. It does not change any wallet code, permissions, network behavior, or security settings. There is no security issue here.

This commit simply increases the app's build number from 15 to 16 in a configuration file. It makes no code changes and presents no security relevance.

This commit only changes the app's version number from 1.0.8+14 to 1.0.9+15 in a configuration file. There are no code changes, no security fixes, and no functional changes visible in the diff.

This commit updates the Flutter framework and the mobile_scanner package (used for QR code scanning) to newer patch/minor versions. Such updates often include routine bug fixes and security fixes, but the commit itself does not describe any specific vulnerability or security issue. Without a vendor security advisory or changelog, we cannot confirm this fixes a known security flaw.

This commit simply renames four GitHub secret variables used during iOS app release builds, adding an 'IOS_' prefix to each name (for example, 'BUILD_CERTIFICATE_BASE64' becomes 'IOS_BUILD_CERTIFICATE_BASE64'). The workflow still does the exact same thing: it decodes the iOS signing certificate and provisioning profile, creates a temporary keychain, and imports the certificate. There is no change to security behavior, no leaked secrets, and no vulnerability introduced or fixed in the code shown.

This commit is a purely cosmetic formatting change to the README file. It removes blank lines between two app store badge images and places them on the same line. There is no code change, no functional change, and no security relevance.

This commit simply adds an official Apple App Store badge to the project's README file and includes the corresponding Apple-provided SVG image asset. It is a marketing/documentation change with no code modifications, no security fixes, and no security-relevant behavior changes.

This commit adds a new automated GitHub Actions workflow to build and upload an iOS version of the Skylight Wallet app. It handles code signing and App Store submission. The workflow itself is a normal CI/CD addition, but it stores sensitive signing credentials as GitHub secrets and writes them to disk during the build. There is no direct vulnerability in the diff, but it increases the app's attack surface by introducing a new mobile platform build path and handling high-value secrets in automation.

This commit only increases the app's build number from 13 to 14 in a configuration file. It makes no code changes and has no security relevance.

This commit simply increases the app's version number from 1.0.7+12 to 1.0.8+13 in a configuration file. There are no code changes, no security fixes, and no behavior changes visible in this patch.