release: 2.0.1, sign without re-aligning so F-Droid can reproduce the APK

.github/workflows/release.yml

@@ -102,8 +102,11 @@ jobs:
             apk="$(find "app/build/outputs/apk/$flavor/release" -name '*.apk' | head -n1)"
             [ -n "$apk" ] || { echo "::error::No $flavor release APK"; exit 1; }
             # AGP already aligned it (native libraries on 16 KB pages); signing must not move them.
+            # Keeping AGP's alignment also keeps the zip byte-identical to an unsigned rebuild, which
+            # F-Droid needs to copy our signature onto its own build. minSdk 26 needs no v1 scheme.
             "$tools/zipalign" -c -P 16 4 "$apk"
             "$tools/apksigner" sign \
+              --alignment-preserved true --v1-signing-enabled false \
               --ks "$keystore" --ks-pass env:ENCLY_KEYSTORE_PASSWORD \
               --ks-key-alias "$ENCLY_KEY_ALIAS" --key-pass env:ENCLY_KEY_PASSWORD \
               --out "dist/Encly-$VERSION-$flavor.apk" "$apk"

CHANGELOG.md

@@ -11,6 +11,20 @@ IzzyOnDroid) and used as the GitHub Release notes.
 
 ## [Unreleased]
 
+## [2.0.1] - 2026-09-25
+
+versionCode 20001.
+
+No changes to the app itself. The release APKs are now signed without touching the zip layout
+that Gradle produced, so F-Droid can rebuild Encly from source and ship it with the same
+signature as GitHub Releases.
+
+### Changed
+
+- Release signing keeps AGP's alignment (`--alignment-preserved`) and drops the v1 scheme,
+  which minSdk 26 never uses.
+- Store listings: the PIN wording now matches the app.
+
 ## [2.0.0] - 2026-09-25
 
 versionCode 20000.
@@ -129,5 +143,6 @@ The last release of the old storage format (versionCode 30): the SQLCipher key w
 Keystore-sealed seed hash, with an optional 4-digit PIN. It had no public users; superseded by
 2.0.0.
 
-[Unreleased]: https://github.com/pasichDev/Encly/compare/v2.0.0...HEAD
+[Unreleased]: https://github.com/pasichDev/Encly/compare/v2.0.1...HEAD
+[2.0.1]: https://github.com/pasichDev/Encly/releases/tag/v2.0.1
 [2.0.0]: https://github.com/pasichDev/Encly/releases/tag/v2.0.0

README.md

@@ -81,7 +81,7 @@ Every release ships a `SHA256SUMS` file (and `SHA256SUMS.asc` when it is GPG-sig
 
 ```bash
 sha256sum -c --ignore-missing SHA256SUMS          # APK matches the published checksum
-apksigner verify --print-certs Encly-2.0.0-fdroid.apk
+apksigner verify --print-certs Encly-2.0.1-fdroid.apk
 ```
 
 `apksigner` (Android SDK build-tools) must print this release signing certificate SHA-256

fastlane/metadata/android/de-DE/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: keine Änderungen an der App. Die Veröffentlichung ist jetzt so signiert, dass F-Droid Encly aus dem Quellcode bauen und mit derselben Signatur wie auf GitHub verteilen kann.

fastlane/metadata/android/en-US/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: no changes to the app. The release is now signed so that F-Droid can build Encly from source and ship it with the same signature as GitHub.

fastlane/metadata/android/es-ES/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: sin cambios en la app. La versión ahora se firma para que F-Droid pueda compilar Encly desde el código fuente y distribuirla con la misma firma que en GitHub.

fastlane/metadata/android/fr-FR/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1 : aucune modification de l’application. La version est désormais signée pour que F-Droid puisse compiler Encly depuis les sources et la distribuer avec la même signature que sur GitHub.

fastlane/metadata/android/it-IT/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: nessuna modifica all’app. La versione ora è firmata in modo che F-Droid possa compilare Encly dal codice sorgente e distribuirla con la stessa firma di GitHub.

fastlane/metadata/android/nl-NL/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: geen wijzigingen in de app. De release is nu zo ondertekend dat F-Droid Encly vanuit de broncode kan bouwen en met dezelfde handtekening als op GitHub kan verspreiden.

fastlane/metadata/android/pl-PL/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: bez zmian w aplikacji. Wydanie jest teraz podpisane tak, aby F-Droid mógł zbudować Encly ze źródeł i udostępniać je z tym samym podpisem co na GitHubie.

fastlane/metadata/android/pt-PT/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: sem alterações na aplicação. A versão passa a ser assinada de forma que o F-Droid possa compilar o Encly a partir do código-fonte e distribuí-lo com a mesma assinatura do GitHub.

fastlane/metadata/android/uk/changelogs/20001.txt

@@ -0,0 +1 @@
+Encly 2.0.1: застосунок не змінився. Реліз тепер підписано так, щоб F-Droid міг зібрати Encly з коду й поширювати його з тим самим підписом, що й на GitHub.

version.properties

@@ -8,4 +8,4 @@
 # refuses a tag that does not match this file. See CONTRIBUTING.md > Releasing.
 VERSION_MAJOR=2
 VERSION_MINOR=0
-VERSION_PATCH=0
+VERSION_PATCH=1