Vanadium 110.0.5481.64 is now available our app repository's alpha channel for GrapheneOS users.
This is the first out-of-band update for Vanadium since we resolved weaknesses with Android Verified Boot and fixed an Android 13 original-package bug which were blocking doing this.
This 2023020200 release of GrapheneOS contains the relevant improvements enabling this:
https://grapheneos.org/releases#2023020200
Previously, there were multiple blockers. Our app repository client has had the required dependency handling and atomic multi-package update support for a while now.
Our app repository client supports these features in a generic way. Dependency handling and atomic multi-package installation were already being used for sandboxed Google Play. Google Play services and Google Play Store have a circular dependency and also each depend on GSF.
Due to sandboxed Google Play, those have a versioned dependency on the sandboxed Google Play compatibility layer (GmsCompat) and the configuration it uses to define shims (GmsConfigCompat) which we update out-of-band to quickly ship compatibility improvements without OS updates.
We use atomic multi-package installation to install a group of apps with dependencies. There's no moment where a partial update is applied. Circular dependencies have first class support. Downloads can be fully parallel and installation is parallel for groups with dependencies.