v2.12.1

What's Changed

• fix: restore older -version/--version notation by @iBotPeaches in #3911
• Update apktool.bat to properly handle minor decimal versions to find highest version by @mdee5test in #3913
• build(deps): bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 by @dependabot[bot] in #3912
• build(deps): bump commons-io:commons-io from 2.19.0 to 2.20.0 by @dependabot[bot] in #3915
• build(deps): bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 by @dependabot[bot] in #3930
• build(deps): bump gradle/actions from 4.4.1 to 4.4.2 by @dependabot[bot] in #3945
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #3957
• build(deps): bump actions/setup-java from 4 to 5 by @dependabot[bot] in #3958
• build(deps): bump commons-cli:commons-cli from 1.9.0 to 1.10.0 by @dependabot[bot] in #3932
• build(deps): bump gradle/actions from 4.4.2 to 4.4.3 by @dependabot[bot] in #3976
• build(deps): bump org.xmlunit:xmlunit-legacy from 2.10.3 to 2.10.4 by @dependabot[bot] in #3977

New Contributors

• @mdee5test made their first contribution in #3913

Full Changelog: v2.12.0...v2.12.1

v2.12.0

What's Changed

• [main] v2.11.1 by @iBotPeaches in #3817
• docs: update readme for doc repo move by @iBotPeaches in #3821
• fix: roundtrip XML values containing CDATA-like strings by @vbfox in #3826
• build(deps): bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre by @dependabot in #3829
• build(deps): bump gradle/actions from 4.3.0 to 4.3.1 by @dependabot in #3835
• build(deps): bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre by @dependabot in #3836
• build(deps): bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 by @dependabot in #3844
• build(deps): bump commons-io:commons-io from 2.18.0 to 2.19.0 by @dependabot in #3846
• build(deps): bump com.google.guava:guava from 33.4.6-jre to 33.4.7-jre by @dependabot in #3845
• build(deps): bump com.google.guava:guava from 33.4.7-jre to 33.4.8-jre by @dependabot in #3852
• tweak: filter redundant flags in flag attrs by @IgorEisberg in #3849
• feat: support for API 36 (Baklava) by @iBotPeaches in #3857
• build(deps): bump com.android.tools:r8 from 8.7.18 to 8.9.35 by @dependabot in #3856
• Handle another round of "ApkEditor" Protect decoding. by @iBotPeaches in #3862
• Revert "build(deps): bump com.android.tools:r8 from 8.7.18 to 8.9.35" by @iBotPeaches in #3866
• refactor: migrate tests to aapt2 + related fixes by @IgorEisberg in #3865
• refactor: convert meta classes to pojo by @IgorEisberg in #3868
• optimize: improve doNotCompress lookups by @IgorEisberg in #3872
• build(deps): bump gradle/actions from 4.3.1 to 4.4.0 by @dependabot in #3875
• smali: restore -api option and limit to 29 by @IgorEisberg in #3879
• build(deps): bump org.xmlunit:xmlunit-legacy from 2.10.0 to 2.10.2 by @dependabot in #3884
• build(deps): bump gradle/actions from 4.4.0 to 4.4.1 by @dependabot in #3893
• build(deps): bump org.xmlunit:xmlunit-legacy from 2.10.2 to 2.10.3 by @dependabot in #3897
• Upgrade aapt2 to latest AOSP (Android 16) sources. by @iBotPeaches in #3864
• [Release] v2.12.0 by @iBotPeaches in #3904

New Contributors

• @vbfox made their first contribution in #3826

Full Changelog: v2.11.1...v2.12.0

v2.11.1

What's Changed

• redundancy: remove unspecial special cases by @IgorEisberg in #3755
• build(deps): bump com.android.tools:r8 from 8.5.35 to 8.7.18 by @dependabot in #3762
• chore: add testcase for feature flags (api 35) by @iBotPeaches in #3774
• fix: support featureFlags anywhere by @IgorEisberg in #3771
• Fix disassembly of WhatsApp w/ un-ordered resources. by @iBotPeaches in #3799
• build(deps): bump gradle/actions from 4.2.2 to 4.3.0 by @dependabot in #3800
• fix: check for oob after jumps in table spec by @iBotPeaches in #3807
• fix: update XML element retrieval to use correct parent nodes by @aytee6 in #3811

New Contributors

• @aytee6 made their first contribution in #3811

Full Changelog: v2.11.0...v2.11.1

v2.11.0

What's Changed

• API 35 Preview - Vanilla Ice Cream by @iBotPeaches in #3696
• refactor: ApkDecoder & ApkBuilder overhaul by @IgorEisberg in #3699
• build(deps): bump commons-io:commons-io from 2.16.1 to 2.17.0 by @dependabot in #3701
• build(deps): bump com.google.guava:guava from 33.3.0-jre to 33.3.1-jre by @dependabot in #3703
• style: clean up tab intendation by @IgorEisberg in #3707
• new: featureFlags support for SDK 35 apps by @IgorEisberg in #3706
• fix: decoding APK with many compact entries and unknown uses-sdk attrs by @IgorEisberg in #3705
• new: support building with compact entries by @IgorEisberg in #3708
• refactor: clean up external pull parser and introduce brut.j.xml by @IgorEisberg in #3709
• fix: avoid trying to parse raw AndroidManifest by @IgorEisberg in #3720
• fix: update license reference by @emmanuel-ferdman in #3721
• refactor: tweaks IO handling by @IgorEisberg in #3723
• feat: add user, system certificate in existing network security config by @swngarg-lt in #3724
• feat: support for Android Baklava Developer Preview 1 by @iBotPeaches in #3728
• build(deps): bump gradle/actions from 4.1.0 to 4.2.0 by @dependabot in #3727
• build(deps): bump gradle/actions from 4.2.0 to 4.2.1 by @dependabot in #3733
• build(deps): bump commons-io:commons-io from 2.17.0 to 2.18.0 by @dependabot in #3732
• refactor: ExtDataInput rework, source layout and formatting by @IgorEisberg in #3738
• build(deps): bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 by @dependabot in #3745
• build: update to smali/baksmali 3.0.9 by @iBotPeaches in #3747
• refactor: Config/Tests/misc rework by @IgorEisberg in #3746
• build(deps): bump gradle/actions from 4.2.1 to 4.2.2 by @dependabot in #3750
• build(deps): bump com.google.guava:guava from 33.3.1-jre to 33.4.0-jre by @dependabot in #3751
• build: version bump (2.11.0) by @iBotPeaches in #3764

New Contributors

• @emmanuel-ferdman made their first contribution in #3721
• @swngarg-lt made their first contribution in #3724

Full Changelog: v2.10.0...v2.11.0
Doc Site: https://apktool.org/blog/apktool-2.11.0
Release Blog: https://connortumbleson.com/2025/01/14/apktool-v2-11-0-released/

v2.10.0

What's Changed

• feat: Upgrade gradle to v8.5 by @Lohita9 in #3459
• test: assert miui aapt1 patch exists by @iBotPeaches in #3462
• build(deps): bump gradle/gradle-build-action from 2.10.0 to 2.11.0 by @dependabot in #3470
• build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #3471
• Feature: Parallel Building by @Cregrant in #3476
• Support for configuring job count. by @iBotPeaches in #3480
• fix: deprecated is lowercase by @iBotPeaches in #3481
• build(deps): bump gradle/gradle-build-action from 2.11.0 to 2.11.1 by @dependabot in #3479
• refactor: inline runnable on smali disassemble by @iBotPeaches in #3490
• chore: correct warnings from Qodana scan by @iBotPeaches in #3491
• build(deps): bump gradle/gradle-build-action from 2.11.1 to 2.12.0 by @dependabot in #3500
• chore: minor clarity improvement in README.md by @DrankRock in #3501
• build(deps): bump com.guardsquare:proguard-gradle from 7.4.1 to 7.4.2 by @dependabot in #3509
• build(deps): bump gradle/wrapper-validation-action from 1.1.0 to 2.0.0 by @dependabot in #3510
• build(deps): bump gradle/gradle-build-action from 2.12.0 to 3.0.0 by @dependabot in #3511
• build(deps): bump gradle/wrapper-validation-action from 2.0.0 to 2.1.1 by @dependabot in #3515
• Correct Facebook Disassembly (Jan 2024) by @iBotPeaches in #3513
• build(deps): bump gradle/actions from 3.0.0 to 3.1.0 by @dependabot in #3522
• build: jump to smali/baksmali 3.0.5 by @iBotPeaches in #3519
• build(deps): bump actions/upload-artifact from 3 to 4 by @topminipie in #3528
• fix: properly handle stamp-cert-sha256 by @iBotPeaches in #3538
• build(deps): bump gradle/wrapper-validation-action from 2.1.1 to 2.1.2 by @dependabot in #3550
• build(deps): bump commons-io:commons-io from 2.15.1 to 2.16.0 by @dependabot in #3560
• feat: update internal framework to API 34 (Vanilla Ice Cream Preview) by @iBotPeaches in #3537
• Reproducible Builds by @iBotPeaches in #3559
• build(deps): bump gradle/actions from 3.1.0 to 3.2.0 by @dependabot in #3566
• build(deps): bump commons-io:commons-io from 2.16.0 to 2.16.1 by @dependabot in #3570
• build(deps): bump gradle/actions from 3.2.0 to 3.3.0 by @dependabot in #3571
• build(deps): bump gradle/wrapper-validation-action from 2.1.2 to 3.3.0 by @dependabot in #3572
• build(deps): bump gradle/actions from 3.3.0 to 3.3.1 by @dependabot in #3575
• build(deps): bump org.apache.commons:commons-text from 1.11.0 to 1.12.0 by @dependabot in #3576
• build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 by @dependabot in #3577
• Correct wording in CLI usage messages by @ProgerXP in #3579
• fix: properly record compression of non-main classes.dex files by @iBotPeaches in #3584
• build(deps): bump org.xmlunit:xmlunit-legacy from 2.9.1 to 2.10.0 by @dependabot in #3585
• build(deps): bump gradle/actions from 3.3.1 to 3.3.2 by @dependabot in #3586
• fix: remove enforcement on aligned namespaces by @iBotPeaches in #3587
• feat: Upgrade gradle to v8.7 by @Lohita9 in #3595
• build: jump to smali/baksmali 3.0.7 by @iBotPeaches in #3601
• Migrate to modern Gradle Github Actions by @iBotPeaches in #3594
• Workaround invalid org.xmlpull loader with R8 by @iBotPeaches in #3604
• build(deps): bump commons-cli:commons-cli from 1.7.0 to 1.8.0 by @dependabot in #3607
• Readme: Improve title and wording for docs link by @tutacat in #3611
• Resolve a resource leak where the ZipFile is not closed by @alsutton in #3618
• build(deps): bump gradle/actions from 3.3.2 to 3.4.1 by @dependabot in #3624
• build(deps): bump gradle/actions from 3.4.1 to 3.4.2 by @dependabot in #3628
• Add missing stream closing by @azotzot in #3634
• build(deps): bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 by @dependabot in #3647
• build(deps): bump gradle/actions from 3.4.2 to 3.5.0 by @dependabot in #3648
• Refresh aapt2 binaries. by @iBotPeaches in #3651
• Sort files list in FileDirectory::loadAll() by @luk1337 in #3657
• build(deps): bump gradle/actions from 3.5.0 to 4.0.0 by @dependabot in #3662
• build(deps): bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 by @dependabot in #3663
• build(deps): bump com.android.tools:r8 from 8.3.37 to 8.5.35 by @dependabot in #3671
• build(deps): bump commons-cli:commons-cli from 1.8.0 to 1.9.0 by @dependabot in #3672
• test(aapt2) - add foregroundServiceType test by @iBotPeaches in #3674
• Remove tabs in linux script by @alexpopov in #3676
• build(deps): bump gradle/actions from 4.0.0 to 4.0.1 by @dependabot in #3679
• build(deps): bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 by @dependabot in #3680
• feat: update internal framework to API 34 (Vanilla Ice Cream) by @iBotPeaches in #3681
• Add ability to automatically pick up the latest apktool.jar version by @codebymikey in #3683
• build(deps): bump com.google.guava:guava from 32.0.1-jre to 33.3.0-jre by @dependabot in #3670
• build: upgrade to smali/baksmali 3.0.8 by @iBotPeaches in #3690
• build(deps): bump gradle/actions from 4.0.1 to 4.1.0 by @dependabot in #3692
• fix: allow maven to publish without implicit task ordering by @iBotPeaches in #3693

New Contributors

• @Cregrant made their first contribution in #3476
• @DrankRock made their first contribution in #3501
• @topminipie made their first contribution in #3528
• @ProgerXP made their first contribution in #3579
• @azotzot made their first contribution in #3634
• @luk1337 made their first contribution in #3657
• @alexpopov made their first contribution in #3676
• @codebymikey made their first contribution in #3683

Full Changelog: v2.9.3...v2.10.0
Doc Site: https://apktool.org/blog/apktool-2.10.0
Release Blog: https://connortumbleson.com/2024/09/17/apktool-v2-10-0-released/

v2.9.3

• [#3492] Fix #GHSA-vgwr-4w3p-xmjv (Arbitrary file writes on Windows). (Thanks Cl0udG0d)

Full Changelog: v2.9.3...v2.9.3
Doc Site: https://apktool.org/blog/apktool-2.9.3
Release Blog: https://connortumbleson.com/2024/01/20/apktool-v2-9-3-released/

v2.9.2

• [#3484] Fix #GHSA-2hqv-2xv4-5h5w (Arbitrary file writes). (Thanks 0x33c0unt)

Full Changelog: v2.9.1...v2.9.2
Doc Site: https://apktool.org/blog/apktool-2.9.2
Release Blog: https://connortumbleson.com/2024/01/05/apktool-v2-9-2-released/

v2.9.1

What's Changed

• feat: Upgrade gradle to v8.4 by @ArjunaKumarMohanta in #3376
• build(deps): bump docker/build-push-action from 4 to 5 by @dependabot in #3384
• build(deps): bump docker/login-action from 2 to 3 by @dependabot in #3385
• build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot in #3386
• refactor: support current position during chunk verbose output by @iBotPeaches in #3395
• use apiLevel instead of forceApi when building the apk by @JoshMiers-FS in #3399
• build: test on lts versions (including 21) by @iBotPeaches in #3381
• build: docker fixes by @iBotPeaches in #3378
• feat: de-dupe attribute names during styles writing by @iBotPeaches in #3404
• Update Docker build instructions after #3363 by @jabagawee in #3407
• build(deps): bump commons-io:commons-io from 2.14.0 to 2.15.0 by @dependabot in #3412
• build(deps): bump commons-cli:commons-cli from 1.5.0 to 1.6.0 by @dependabot in #3413
• build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 by @dependabot in #3414
• Adapt null resource to be treated as reference instead of empty string. by @iBotPeaches in #3417
• build: patch aapt2 to ignore private resources (unix/win) by @iBotPeaches in #3396
• build: remove docker by @iBotPeaches in #3423
• test: add test case for android:isAccessibilityTool by @iBotPeaches in #3426
• #3427 - Treat manifest warnings as warnings by @iBotPeaches in #3429
• build(deps): bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 by @dependabot in #3443
• build(deps): bump com.guardsquare:proguard-gradle from 7.4.0 to 7.4.1 by @dependabot in #3444
• build(deps): bump gradle/gradle-build-action from 2.9.0 to 2.10.0 by @dependabot in #3445
• fix: support alignment towards resTable_entry start by @iBotPeaches in #3452
• build(deps): bump commons-io:commons-io from 2.15.0 to 2.15.1 by @dependabot in #3453
• build(deps): bump actions/setup-java from 3 to 4 by @dependabot in #3454

New Contributors

• @JoshMiers-FS made their first contribution in #3399
• @jabagawee made their first contribution in #3407

Full Changelog: v2.9.0...v2.9.1
Doc Site: https://apktool.org/blog/apktool-2.9.1
Release Blog: https://connortumbleson.com/2023/12/06/apktool-v2-9-1-released/

v2.9.0

What's Changed

• test: add failing/passing sparse/not-sparse test by @iBotPeaches in #3201
• Fix LocaleNumberSystem + ConfigFlag reading by @iBotPeaches in #3205
• Streamline decoding AndroidManifest.xml by @sv99 in #3171
• fix: support skipping unread header sizes of ResChunk by @iBotPeaches in #3180
• fix: support skipping entries with NO_ENTRY (-1) flag by @iBotPeaches in #3209
• fix: handle larger axml namespace headers than known by @iBotPeaches in #3210
• Explicit ResFileDecoder initialization in the decodeResources by @sv99 in #3211
• build(deps): bump gradle/gradle-build-action from 2.6.0 to 2.6.1 by @dependabot in #3213
• build(deps): bump gradle/wrapper-validation-action from 1.0.6 to 1.1.0 by @dependabot in #3214
• Support explicit operation for when to load full resource table by @sv99 in #3217
• fix: adjust helper files to include system property sets by @iBotPeaches in #3215
• feat: Introduce --no-compile-sdk-metadata by @iBotPeaches in #3208
• "--no-compile-sdk-metadata" tests. by @iBotPeaches in #3220
• fix: end parsing if EOF is hit by @iBotPeaches in #3223
• suppress javadoc lint warning by @sv99 in #3222
• Remove SnakeYAML for manual YAML Parser by @sv99 in #3191
• fix: Gradle wrapper validation trigger issue by @ArjunaKumarMohanta in #3228
• Manual YAML Cleanup by @iBotPeaches in #3229
• Support empty resource table. by @iBotPeaches in #3230
• refactor: clean up style and redundancy by @IgorEisberg in #3232
• fix: support duplicated namespaces by @iBotPeaches in #3233
• fix: resolve missing namespace on system resources by @iBotPeaches in #3234
• Move to XMLUnit Legacy by @iBotPeaches in #3235
• fix: skip unknown chunks in AXML by @iBotPeaches in #3237
• fix: skip files that attempt to break filesystem by @iBotPeaches in #3238
• build(deps): bump gradle/gradle-build-action from 2.6.1 to 2.7.0 by @dependabot in #3241
• Hardened String Block Parser by @iBotPeaches in #3239
• build(deps): bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 by @dependabot in #3240
• in the ApkDecoder use apkFile and unknownFiles from ApkInfo by @sv99 in #3242
• merge ResAttrDecoder into the AXmlResourceParser by @sv99 in #3243
• Migrate to Gradle Kotlin DSL by @iBotPeaches in #3249
• fix: support decoding application with duplicate res entries by @iBotPeaches in #3252
• fix: support encode styled string if length larger than offset by @iBotPeaches in #3254
• refactor: change naming pattern of class variables in StringBlock by @iBotPeaches in #3256
• Remove Apktool Dummys. by @iBotPeaches in #3258
• build: upgrade to shadow build 8.1.1 by @iBotPeaches in #3259
• Refactor logging for chunks and sparse flags. by @iBotPeaches in #3260
• refactor: split out string block vs res table string by @iBotPeaches in #3267
• refactor: remove unused decodeManifest function by @iBotPeaches in #3268
• refactor: remove deprecations from test suite by @iBotPeaches in #3269
• refactor: remove unneeded blocks/semicolons by @iBotPeaches in #3273
• fix: bump heap size to 1g max by @iBotPeaches in #3286
• feat: Upgrade gradle to v8.3 by @ArjunaKumarMohanta in #3275
• build(deps): bump gradle/gradle-build-action from 2.7.0 to 2.7.1 by @dependabot in #3285
• fix: correct path to archive during ci by @iBotPeaches in #3287
• feat: shorten archive name to apktool-{version}.jar by @iBotPeaches in #3289
• fix: obtain git history for proper "git describe" by @iBotPeaches in #3291
• refactor: use proper enum (0 on both) for setMethod() by @iBotPeaches in #3297
• Prevent poisioning mResTable if Framework is sparse. by @iBotPeaches in #3299
• Sponsors by @iBotPeaches in #3301
• refactor: verbose doesn't adapt handler by @iBotPeaches in #3310
• build(deps): bump gradle/gradle-build-action from 2.7.1 to 2.8.0 by @dependabot in #3316
• Feat: Introduce "res-mode" options. by @iBotPeaches in #3318
• refactor: make _options lowercase by @iBotPeaches in #3324
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #3327
• Support Disassembly of mega old Android (M5) by @iBotPeaches in #3325
• Reworks Attr/Array Handler by @iBotPeaches in #3326
• fix: enforce java 1.8 compatibility with built artifacts by @iBotPeaches in #3330
• refactor: adjust line to fit 120 length line endings in /value by @iBotPeaches in #3338
• fix: handle duplicate res entries during a complex resource by @iBotPeaches in #3347
• refactor: use static inner classes for AbstractDirectory by @iBotPeaches in #3348
• refactor: suppress last unused method return by @iBotPeaches in #3349
• build: migrate towards "libs.versions.toml" by @iBotPeaches in #3353
• fix: support more resource-modes params by @iBotPeaches in #3354
• build: add dependency graph support by @iBotPeaches in #3355
• refactor: remake android-framework jar file by @iBotPeaches in #3356
• build(deps): bump gradle/gradle-build-action from 2.8.0 to 2.9.0 by @dependabot in #3359
• build(deps): bump commons-io:commons-io from 2.13.0 to 2.14.0 by @dependabot in #3358
• Add Docker support by @Fmstrat in #3351
• Added auto-build of docker image by @Fmstrat in #3361
• build: update aapt/aapt2 with win/linux binaries by @iBotPeaches in #3360
• Android 14 Support (Partial) by @iBotPeaches in #3206
• Added support for PR builds on master by @Fmstrat in #3363
• Move aapt2 to default (from aapt1) by @iBotPeaches in #3370
• refactor: hard-code IMAGE_NAME, add some spaces by @iBotPeaches in #3371
• fix: support COMPACT/OFFSET16 packed resources. by @iBotPeaches in #3372
• Update Windows helper script to handle /c properly. by @maksz42 in #2973
• Android 14 - Support for Grammatical Inflection by @iBotPeaches in #3374
• build: restore aapt1 miui qualifiers + static by @iBotPeaches in #3379

New Contributors

• @Fmstrat made their first contribution in #3351
• @maksz42 made their first contribution in #2973

Full Changelog: v2.8.1...v2.9.0
Blog: https://connortumbleson.com/2023/10/08/apktool-v2-9-0-released/
Doc Site: https://apktool.org/blog/apktool-2.9.0

v2.8.1

What's Changed

• feat: Upgrade gradle to v8.2.1 by @ArjunaKumarMohanta in #3141
• build(deps): bump gradle/gradle-build-action from 2.5.1 to 2.6.0 by @dependabot in #3151
• fix: skip files if cleaned to empty filename by @iBotPeaches in #3166
• fix: opt out of stricter java rules for zip64 and dot entries by @iBotPeaches in #3178
• build: test on java20 by @iBotPeaches in #3177
• Correct regressions towards apktool.yml generation by @iBotPeaches in #3172
• Allows run app from gradle for debugging purposes by @sv99 in #3179
• fix: add missing hasResources check by @IgorEisberg in #3182
• Prevent loading from resource pool if type is not a resolveable resource by @iBotPeaches in #3187
• style: normalize command descs and redundancy by @IgorEisberg in #3188
• fix: crash when decompiling framework-res.apk with a tag (regression) by @IgorEisberg in #3193

Full Changelog: v2.8.0...v2.8.1
Blog of Release: https://connortumbleson.com/2023/07/22/apktool-v2-8-1-released/
Doc Site: https://apktool.org/blog/apktool-2.8.1