This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+5 more
ReleasePort's take
Light signalReleasePortβ―Layerβ―1 versionβ―0.29.3 adds several UXβfocused features and fixes a critical Android passkey bug.
Why it matters: Increases autofill suggestions from 3 to 10, adds inline keyboard support on Android, and resolves the Android passkeys failure in PayPal (and similar apps), directly improving user experience and reliability.
Summary
AI summaryUpdates π New Features, π Bug Fixes, and π§© Dependencies Updates across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Hold mobile-login RSA private key as nonβextractable CryptoKey Hold mobile-login RSA private key as nonβextractable CryptoKey Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Feature | Medium |
Increase default shown autofill suggestions from 3 to 10 in all apps Increase default shown autofill suggestions from 3 to 10 in all apps Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add Android inline keyboard autofill suggestions support Add Android inline keyboard autofill suggestions support Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add more auto-lock timeout options to mobile app Add more auto-lock timeout options to mobile app Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add max upload size env setting support to allβinβone docker container Add max upload size env setting support to allβinβone docker container Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Make email attachments open in default viewer app when available instead of prompting download Make email attachments open in default viewer app when available instead of prompting download Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add mobile app authentication grace period to prevent reβprompts Add mobile app authentication grace period to prevent reβprompts Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add arrow based keyboard navigation to browser extension Add arrow based keyboard navigation to browser extension Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Enable browser extension to autofill AliasVault web app login (optβin) Enable browser extension to autofill AliasVault web app login (optβin) Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Medium |
Add email format switcher (HTML/Plain/Source) Add email format switcher (HTML/Plain/Source) Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Feature | Low |
Hide browser extension autofill when detected field is removed Hide browser extension autofill when detected field is removed Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Feature | Low |
Add browser extension context menu "Autofill 2FA" manual option Add browser extension context menu "Autofill 2FA" manual option Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Feature | Low |
Cache email RSA CryptoKeys by public key Cache email RSA CryptoKeys by public key Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Feature | Low |
Remember and autoβprompt last used unlock method in browser extension Remember and autoβprompt last used unlock method in browser extension Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Performance | Low |
Improve web app performance for larger vaults Improve web app performance for larger vaults Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Performance | Low |
Improve web app navigation performance for large vaults (200+ items) Improve web app navigation performance for large vaults (200+ items) Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Medium |
Fix Android passkeys not working in the PayPal app and others Fix Android passkeys not working in the PayPal app and others Source: llm_adapter@2026-05-31 Confidence: high |
β |
| Bugfix | Low |
Use explicit font size for browser extension autofill popup to prevent host page conflicts Use explicit font size for browser extension autofill popup to prevent host page conflicts Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Update importers to skip failed rows instead of failing whole import Update importers to skip failed rows instead of failing whole import Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Fix email attachment download in mobile apps Fix email attachment download in mobile apps Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Make browser extension lock/logout events sync to other open windows Make browser extension lock/logout events sync to other open windows Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Enable scrolling inside browser extension autofill popup Enable scrolling inside browser extension autofill popup Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Fix addβcredential form from showing previously saved item in browser extension Fix addβcredential form from showing previously saved item in browser extension Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Fix custom field label value issue when using enter key in web app Fix custom field label value issue when using enter key in web app Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Update autofill form detection to work with Tailwind CSS forms in browser extension Update autofill form detection to work with Tailwind CSS forms in browser extension Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
| Bugfix | Low |
Autoβtype email instead of value insert in browser extension autofill Autoβtype email instead of value insert in browser extension autofill Source: granite4.1:30b@2026-05-31-audit Confidence: low |
β |
Full changelog
What's Changed
This release includes various community-suggested improvements and bugfixes. Notable changes this release:
- Improved autofill:
- Android: autofill suggestions now show up in the keyboard instead of as a popup (when supported)
- All apps: Show up to 10 autofill matched suggestions instead of 3
- Improved form field detection in browser extension
- Improved web app performance for larger vaults
- Updated app usability in several areas, reducing amount of clicks for common actions
- Improved web app import reliability
- And many other smaller improvements and bugfixes
Join our Discord community to stay up-to-date on the project with the latest releases and to discuss upcoming features with us.
π New Features
- Hide browser extension autofill when detected field is removed by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2043
- Improve web app navigation performance for large vaults (200+ items) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2045
- Add browser extension context menu "Autofill 2FA" manual option by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2048
- Add more auto-lock timeout options to mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2050
- Add max upload size env setting support to all-in-one docker container by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2052
- Make email attachments open in default viewer app (when available) instead of prompting download by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2072
- Add mobile app authentication grace period to prevent re-prompts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2074
- Add arrow based keyboard navigation to browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2076
- fix(extension): hold mobile-login RSA private key as non-extractable CryptoKey by @AmarBego in https://github.com/aliasvault/aliasvault/pull/2078
- Increase default shown autofill suggestions from 3 to 10 in all apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2087
- Add Android inline keyboard autofill suggestions support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2086
- Make dropdown navigation visible on recently deleted page by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2091
- feat: cache email RSA CryptoKeys by public key by @AmarBego in https://github.com/aliasvault/aliasvault/pull/2083
- Remember and auto-prompt last used unlock method in browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2103
- Enable browser extension to autofill AliasVault web app login (opt-in) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2101
- feat: add email format switcher (HTML/Plain/Source) by @Sanjays2402 in https://github.com/aliasvault/aliasvault/pull/1893
- Fix Android passkeys not working in the PayPal app and others by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2112
π Bug Fixes
- Use explicit font size for browser extension autofill popup to prevent host page conflicts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2032
- Update importers to skip failed rows instead of failing whole import by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2041
- Update browser extension autofill form detector logic by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2058
- Update browser extension autofill form detector by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2061
- Make browser extension lock/logout events sync to other open browser extension windows too by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2065
- Fix email attachment download in mobile apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2069
- Enable scrolling inside browser extension autofill popup by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2094
- Fix browser extension add-credential form from showing previously saved item by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2104
- Fix issue with custom field label value when using enter key in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2108
- Update browser extension autofill form detection so it works with Tailwind CSS forms by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2110
- Auto-type email instead of value insert in browser extension autofill by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2114
π§© Dependencies Updates
- Update GitHub action versions by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2031
- Bump faraday from 2.14.1 to 2.14.2 in /docs in the bundler group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2036
- Upgrade mobile app Expo and browser extension WXT frameworks by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2067
- Add external dependencies refresh housekeeping scripts (gpm passkeys privileged apps list) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2085
New Contributors
- @AmarBego made their first contribution in https://github.com/aliasvault/aliasvault/pull/2078
- @Sanjays2402 made their first contribution in https://github.com/aliasvault/aliasvault/pull/1893
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.2...0.29.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About aliasvault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
Related context
Related tools
Beta — feedback welcome: [email protected]