android: upgrade to androidx.core:core:1.16.0 from com.android.support:support-compat:28.0.0
What the developer wrote
Authored by Sander van Grieken
android: upgrade to androidx.core:core:1.16.0 from com.android.support:support-compat:28.0.0
What changed, and why it matters
This commit updates one Android support library used by the Electrum mobile app from an older Google library to a newer equivalent. It is a routine dependency migration (Android Support Library to AndroidX). The change itself does not visibly add or remove app features, and there is no direct evidence in the commit that it fixes a specific security bug. However, staying on old, unmaintained support libraries can leave apps exposed to known vulnerabilities over time, so the change is plausibly security-relevant as general hygiene.
Treat as routine maintenance. Verify the AndroidX Core 1.16.0 dependency resolves cleanly, review the AndroidX Core release notes for any security advisories, and continue migrating other com.android.support dependencies to AndroidX to reduce legacy-library risk. No urgent action is indicated by this commit alone.
Security signals we found
Dependency update from legacy Android Support Library to AndroidX Core
Old dependency (support-compat 28.0.0) is no longer maintained by Google
No explicit security claim, CVE, or advisory referenced in commit
No accompanying source-code changes to mitigate a specific flaw
Evidence from the diff
The single-line change in contrib/android/buildozer_qml.spec replaces the Gradle dependency com.android.support:support-compat:28.0.0 with androidx.core:core:1.16.0. This is the AndroidX migration of the legacy Support Library’s core compatibility helpers. The commit message and diff do not reference a CVE, advisory, bug report, or security issue. No code changes accompany the dependency swap. The newer AndroidX Core version may include bug and security fixes relative to the 2018-era support-compat 28.0.0, but this commit does not identify any specific vulnerability being remediated.
Changed components
Electrum Android build configuration (contrib/android/buildozer_qml.spec)Android Gradle dependency: androidx.core:core / former com.android.support:support-compatInspect captured patch +1 / −1
diff --git a/contrib/android/buildozer_qml.spec b/contrib/android/buildozer_qml.spec
index 2c6120a..2d08a7f 100644
--- a/contrib/android/buildozer_qml.spec
+++ b/contrib/android/buildozer_qml.spec
@@ -168,7 +168,7 @@ android.add_src = electrum/gui/qml/java_classes/
# kotlin-stdlib is required for zxing-cpp (BarcodeScannerView)
android.gradle_dependencies =
- com.android.support:support-compat:28.0.0,
+ androidx.core:core:1.16.0,
org.jetbrains.kotlin:kotlin-stdlib:1.8.22
android.add_activities = org.electrum.qr.SimpleScannerActivity, org.electrum.biometry.BiometricActivity
Why this scored 26/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.