From 233fe0db5b40353c0a8a9b1e54aa5ec22f52be97 Mon Sep 17 00:00:00 2001
From: GrapheneOS <contact@grapheneos.org>
Date: Wed, 27 Nov 2024 12:12:37 -0500
Subject: [PATCH] fix serious upstream Bluetooth contact sharing bug and our
 change to it

---
 static/releases.html | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/static/releases.html b/static/releases.html
index 427fd72a..0d1efacb 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -545,6 +545,9 @@
                     <p>Changes since the 2024111700 release:</p>
 
                     <ul>
+                        <li>Settings: revert our attempt at disabling Bluetooth contact sharing by default for hands-free calling devices in our <a href="#2024111700">2024111700</a> release because it didn't address an upstream Android security bug and caused it to occur when invoked from the foreground (i.e. directly by a user in the Settings app) instead of only the background (i.e. Settings being opened by a pairing request)</li>
+                        <li>Settings: fix an upstream Android security bug causing Bluetooth contact sharing to be enabled for hands-free calling devices even though the dialog shows it will be disabled, which only previously occurred when invoked from the background but began occurring in the foreground too after out previous change which attempted to fix this issue</li>
+                        <li>Settings: always disable Bluetooth contact sharing by default instead of enabling it by default for pairing requests made by the user in the foreground where the user can choose to disable it</li>
                         <li>fix upstream bug breaking in-call service components provided by packages only installed in secondary users, which was mainly occurring with user installed Android Auto which unlike the stock OS isn't installed in Owner by default to mask this bug</li>
                         <li>Sandboxed Google Play compatibility layer: make Google text-to-speech app queryable by other apps in the same profile by default as it is on the stock OS since libraries using it don't declare the query explicitly (note apps and their libraries can declare any queries they want including for any app with a launcher activity and there's no approval along with there being other ways to detect apps)</li>
                         <li>Settings: opt-out of Android 15 edge-to-edge for the developer options app picker activity since it's not properly supported yet (upstream bug)</li>