Skylight Wallet

This commit adds a Windows build and installer to the project's automated release pipeline. It is a routine CI/CD change with no apparent security relevance.

This commit adds Windows support to a cryptocurrency wallet app. It includes platform-specific paths, notification settings, and precompiled Windows DLL files for Monero wallet operations. There is no direct evidence in the commit message or diff of a security vulnerability being fixed or introduced. The main security-relevant observation is that three binary DLL files are added to the repository without source code or build provenance, which could raise supply-chain trust concerns, but the commit itself does not claim they are malicious or compromised.

This commit fixes a typo in the automated release script. The script was looking for a .deb package file with an underscore in its name (skylight-wallet_*.deb), but the actual file produced uses a hyphen (skylight-wallet-*.deb). This one-character change ensures the built installer package is copied into the release folder correctly. It is a packaging/build fix, not a security fix.

This commit only changes the application's version number in a configuration file, from 1.0.5+10 to 1.0.6+11. There are no code changes, no security fixes, and no functional changes visible in the diff.

This commit fixes a minor user-experience bug in the wallet restore screen. Previously, if a user accidentally typed or pasted their secret recovery phrase with leading or trailing spaces, the app would treat it as invalid and fail to restore the wallet. The change simply removes those extra spaces before checking the phrase. It is not a security vulnerability and does not expose funds or data.

This commit removes a reused SOCKS connection pool and forces every network request to use a fresh connection that closes immediately after use. It also extends a connection test timeout from 10 to 20 seconds and cleans up unused proxy-port variables. The stated goal is to fix SOCKS requests that were timing out. There is no direct evidence in the commit of a security vulnerability being patched, but the change does remove a class of risks that connection pools can introduce, such as accidentally sending sensitive request data on a connection previously authenticated under different wallet state.

This commit only updates the project's README and adds two image assets: a feature graphic and a Google Play badge. There are no code changes, no configuration changes, and no security-relevant modifications.

This commit is a routine packaging and metadata update. It fixes how version numbers are handled in build scripts (allowing with or without a 'v' prefix), updates the application's version number from 1.0.4 to 1.0.5, and tweaks the package description and maintainer fields. There is no security-relevant change.

This commit adds the ability to build and release Debian (.deb) packages for the Skylight Wallet Linux app. It also removes an unused import in one Dart source file. There is no security-relevant change: no bug fixes, no vulnerability patches, no permission changes to existing files, and no new risky behavior.

This commit removes a single line of leftover debug code that was causing a fake incoming-transaction notification to appear every time the wallet home screen loaded. It also bumps the app's build number. There is no obvious security vulnerability in the removed code, but shipping debug notifications in a production build is a quality and trust issue.

This commit removes a Docker command-line flag that made the build container run as the current host user instead of the container's default user. The stated goal is to fix build permission problems. In itself, the change does not add a known vulnerability, but it means the build will now run as whatever user is configured inside the builder image. If that image runs as root, files created in the mounted workspace could end up owned by root, and any build-time scripts or tools will execute with the container user's privileges. There is no direct evidence in the commit that this is a security fix or that it introduces an exploitable flaw.

This commit changes the release workflow to run build commands in a non-login shell instead of a login shell. There is no security issue here. The change likely fixes a build problem caused by the login shell loading environment files or running scripts that interfered with the build container setup.

This commit only updates version numbers: the app version (1.0.3+7 to 1.0.4+8), the Flutter SDK used in the Docker builder (3.38.5 to 3.38.7), and the Dart SDK constraint (3.10.4 to 3.10.7). There are no code changes, no bug fixes, and no security-related changes visible in the diff.

This commit swaps out pre-built Monero wallet library files for newer versions across Android, iOS, and Linux. The actual code inside those libraries is binary and not shown, so we cannot tell from this commit alone whether the update fixes a security bug, adds a feature, or is routine maintenance. The only readable change is an iOS framework metadata tweak that removes a background-fetch mode and sets a minimum iOS version of 15.0.

This commit is a routine fix to the project's automated build pipeline for iOS. It restructures how iPhone and iPhone Simulator libraries are built and packaged into an Apple XCFramework, but it does not change any wallet code, cryptography, or user-facing behavior. There is no indication of a security issue.