release(scanner): prepare 1.0.2 (versionCode 4) [depends on #17, #18] #19

Closed

james.maes wants to merge 4 commits from release/scanner-1.0.2 into main

pull from: release/scanner-1.0.2

merge into: QRun-IO:main

QRun-IO:main

QRun-IO:feat/session-user-activity

QRun-IO:feat/e2e-scan-base64-extra

QRun-IO:fix/slow-link-timeouts

QRun-IO:fix/signout-idp-session

QRun-IO:fix/metadata-load-timeout

QRun-IO:ci/release-gates

QRun-IO:fix/widget-icon-string-main

QRun-IO:fix/restore-main-tree

QRun-IO:fix/widget-icon-string

QRun-IO:release/scanner-1.0.2-notes

QRun-IO:fix/refresh-device-versions

QRun-IO:fix/company-signout-before-session-end

QRun-IO:test/available-scanner-photo-policy

QRun-IO:feature/gs1-record-photos

QRun-IO:docs/scanner-preview-publication

QRun-IO:feature/mobile-scanner-host

QRun-IO:feature/echo-scanner-presentation

QRun-IO:ci/qrun-android-publisher-main-20261102

QRun-IO:ci-proof/cache-interface-20261102

QRun-IO:ci-proof/android-shared-20261102

QRun-IO:archive/qrun-github-cutover-20261101/c55d3002b0d9/feature/echo-scanner-presentation

QRun-IO:migration/github-cutoff-reconcile-20261101

QRun-IO:archive/qrun-github-cutover-20261101/625a275de334/feature/mobile-scanner-host

QRun-IO:feature/orb-0.8-track

QRun-IO:feature/orb-0.7.17

QRun-IO:feature/orb-0712-stable-gate

QRun-IO:fix/package-token-0710

QRun-IO:fix/shared-publisher-context

QRun-IO:fix/current-registry

QRun-IO:feature/central-ci

Conversation 0 Commits 4 Files Changed 11

+294 -16

james.maes commented 2026-11-06 16:46:36 +00:00

Owner

Copy link

Copy source

Summary

Prepares QQQ Mobile scanner 1.0.2 (versionCode 4), superseding the unpublished signed 1.0.1 (versionCode 3) candidate.

Depends on #17 and #18. This branch is main (3325bd6) plus local merges of fix/company-signout-before-session-end (#17) and fix/refresh-device-versions (#18), plus one release commit. Merge #17 and #18 first; if their merge commits on main differ from the local merge commits here, rebase this branch onto the resulting main before merging (the release commit touches docs only, so the rebase is trivial).

Version. The scanner version is not hardcoded in Gradle; it is passed at build time, so the bump is recorded where 1.0.1 / 3 lived (RELEASING, INSTALLATION, SESSION-STATE, TODO, README) as the next build: -PscannerVersionName=1.0.2 -PscannerVersionCode=4. scanner-host/build.gradle.kts defaults are unchanged.

Release notes (CHANGELOG.md, new ## 1.0.2 (versionCode 4), candidate section):

• Company sign-out now completes: the device-session end previously ran before the provider logout, so nativeLogoutData never came back and the browser never opened (MC9400, production APK, real Authentik). (#17)
• The user name is shown after browser sign-in. (#17)
• App/OS version are reported on every heartbeat, effective with mobile-scanners server 1.6.0. (#18)

docs/RELEASING.md gains a "Next candidate: 1.0.2 (versionCode 4)" section with the exact unsigned build command and the isolated apksigner signing/verification/receipt steps mirrored from 1.0.1.

Validation

• Shared-library and scanner JVM tests passed on this merged tree: core 52, mobileapp 62, scanner-host 125 (0 failures)
• Scanner lintRelease clean: 0 errors, 0 warnings, 5 informational
• Native emulator tests: not run (docs-only release commit on top of #17 and #18)
• Hardware: nothing is built, signed, installed or published for 1.0.2; the MC9400 checks (company sign-out, appVersion on receipts) happen after the 1.0.2 build

Compatibility and rollout

Do NOT merge before #17 and #18. No tag, no release, no APK, no signing in this PR. Same permanent signer and higher versionCode so 1.0.2 updates 1.0.1 in place. No credentials, cookies, tokens or barcodes included.

🤖 Generated with Claude Code

## Summary Prepares QQQ Mobile scanner **1.0.2 (versionCode 4)**, superseding the unpublished signed 1.0.1 (versionCode 3) candidate. **Depends on #17 and #18.** This branch is `main` (`3325bd6`) plus local merges of `fix/company-signout-before-session-end` (#17) and `fix/refresh-device-versions` (#18), plus one release commit. Merge #17 and #18 first; if their merge commits on `main` differ from the local merge commits here, rebase this branch onto the resulting `main` before merging (the release commit touches docs only, so the rebase is trivial). **Version.** The scanner version is not hardcoded in Gradle; it is passed at build time, so the bump is recorded where 1.0.1 / 3 lived (RELEASING, INSTALLATION, SESSION-STATE, TODO, README) as the next build: `-PscannerVersionName=1.0.2 -PscannerVersionCode=4`. `scanner-host/build.gradle.kts` defaults are unchanged. **Release notes** (`CHANGELOG.md`, new `## 1.0.2 (versionCode 4), candidate` section): - Company sign-out now completes: the device-session end previously ran before the provider logout, so `nativeLogoutData` never came back and the browser never opened (MC9400, production APK, real Authentik). (#17) - The user name is shown after browser sign-in. (#17) - App/OS version are reported on every heartbeat, effective with mobile-scanners server 1.6.0. (#18) `docs/RELEASING.md` gains a "Next candidate: 1.0.2 (versionCode 4)" section with the exact unsigned build command and the isolated `apksigner` signing/verification/receipt steps mirrored from 1.0.1. ## Validation - [x] Shared-library and scanner JVM tests passed on this merged tree: core 52, mobileapp 62, scanner-host 125 (0 failures) - [x] Scanner `lintRelease` clean: 0 errors, 0 warnings, 5 informational - [ ] Native emulator tests: not run (docs-only release commit on top of #17 and #18) - [ ] Hardware: nothing is built, signed, installed or published for 1.0.2; the MC9400 checks (company sign-out, `appVersion` on receipts) happen after the 1.0.2 build ## Compatibility and rollout Do NOT merge before #17 and #18. No tag, no release, no APK, no signing in this PR. Same permanent signer and higher `versionCode` so 1.0.2 updates 1.0.1 in place. No credentials, cookies, tokens or barcodes included. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

james.maes added 5 commits 2026-11-06 16:46:38 +00:00

fix(auth): run provider logout before host session end; show OAuth user name ... cf82dd5d78

Company sign-out on the MC9400 (production APK, real Authentik) never opened
the browser: QViewModel.performLogout ran the host beforeLogout hook (scanner
device-session end, which runs the core logout server-side) before the
provider logout request, so POST /qqq/v1/logout found no session and returned
no nativeLogoutData. Company sign-out now requests the provider material
first, then ends the host session (401 tolerated), then clears local state.
Ordinary sign-out keeps the host-hook-first order.

Browser login now adopts the server-reported values.user.name so Account no
longer shows a blank current user.

Adds QViewModelLogoutTest (ordering, failing host end, ordinary order, user
name adoption, ManageSessionResponse.userName parsing) and documents the
finding in AUTHENTICATION.md and SESSION-STATE.md.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

fix(scanner): report osVersion and appVersion on every heartbeat ... f733a9906c

After the MC9400 in-place 1.0.0 to 1.0.1 update, scan receipts still showed
appVersion 1.0.0: the host sent osVersion/appVersion only at enrollment and
the server never refreshed them. MobileSessionApi now carries both values
(Build.VERSION.RELEASE and BuildConfig.VERSION_NAME, blank values omitted,
200-character cap) on each heartbeat so a mobile-scanners 1.6 server
refreshes the device record; older servers ignore the optional keys.

MobileSessionTest verifies the heartbeat payload carries only the two
version keys and no other device metadata. UI-API.md and SESSION-STATE.md
record the change.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Merge branch 'fix/company-signout-before-session-end' into release/scanner-1.0.2 efa5a229e4

Merge branch 'fix/refresh-device-versions' into release/scanner-1.0.2 8387962ca2

release(scanner): prepare 1.0.2 (versionCode 4) notes and build instructions ... 76bf8e4405

Supersedes the unpublished signed 1.0.1 (versionCode 3) candidate. The
version is passed at build time (-PscannerVersionName=1.0.2
-PscannerVersionCode=4); the docs now name that pair everywhere 1.0.1 / 3
was the next build. Release notes in CHANGELOG.md: company sign-out now
completes (device-session end ran before provider logout), user name shown
after browser sign-in, app/OS version reported on heartbeat (effective with
mobile-scanners server 1.6.0).

Nothing is built, signed, tagged or published. This branch carries the
local merges of PRs 17 and 18 and must be rebased after they merge.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

james.maes referenced this pull request 2026-11-06 23:29:23 +00:00

release(scanner): 1.0.2 (versionCode 4) notes and build instructions #20

james.maes closed this pull request 2026-11-06 23:29:58 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qqq-android#19