Passbolt Android 3.4.0: Passkey MFA, Metadata key verification & Performance Improvements

Passbolt Android 3.4.0 adds passkeys as a new MFA provider, giving users another authentication factor. It also strengthens security with local verification of metadata key fingerprints.

Under the hood, the release improves performance by eliminating redundant metadata key fetches, moving search directly to the database, and removing forced Go garbage collection following benchmarking.

It also fixes a padding issue in the metadata key trust dialog and restores a missing toast notification when creating a TOTP.

Note; NotStarting with this release, Android 11 is no longer supported.

Changelog

Added

MOB-5182: Add MFA with passkey provider
MOB-5195: New translations strings.xml

Improved

MOB-4914: Remove Searchable in favor of database usage
MOB-5104: Remove redundant metadata keys fetch (credits for reporting to @torvalstrom)
MOB-5133: Stop forcing a full Go GC (credits for reporting to @torvalstrom)

Fixed

MOB-5172: Close metadata key trust dialog on trust and fix padding
MOB-5177: Fix no toast on totp creation

Security

MOB-5191: Verify metadata keys fingerprints locally

Maintenance

MOB-5256: Dependencies update
MOB-5137: Drop support for Android 11
MOB-5108: Update image Android SDK; disable auto-install
MOB-5006: Migrate to Room 3
MOB-5198: Add installation source in bug_report.md
MOB-5205: Add search idling resource to stabilize automation test; Run developer instrumented tests