Changes in version 136.0.7103.125.0:

  • update to Chromium 136.0.7103.125
  • enforce certificate transparency in the same way as Chrome branded builds since it was disabled for Chromium release builds based on the assumption that Chromium forks won’t keep up with updates (Vanadium ships major updates on the same day and ships certain updates early)
  • disable network time fallback support for certificate errors, etc. since GrapheneOS provides very reliable HTTPS network time not depending on either UDP or cellular working
  • disable more optimization and text safety classifier feature flags to make sure none of it is ever used
  • fully disable support for the Google password leak detection service and hide the no-op toggle for it

A full list of changes from the previous release (version 136.0.7103.87.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn’t yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won’t be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.