BigMoeOnEdge

v0.9.1 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 8d LLM Frameworks

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

android c++ edge-ai gemma gguf gpt-oss

+7 more

inference llama-cpp llm mixture-of-experts moe on-device-ai qwen

Affected surfaces

breaking_upgrade

ReleasePort's take

Light signal

editorial:auto 7d

Release APKs are now signed with a stable key to enable in-place updates without wiping downloaded models.

Why it matters: Signing APKs with a stable key prevents update failures, ensuring seamless in-place updates for Android devices.

Summary

AI summary

Release APKs now sign with a stable key enabling in-place updates without wiping downloaded models.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Models pushed to /data/local/tmp/bmoe remain unaffected by uninstall during transition. Models pushed to /data/local/tmp/bmoe remain unaffected by uninstall during transition. Source: granite4.1:30b@2026-07-19-audit Confidence: low	—
Bugfix	Medium	Release APKs now signed with a stable key to prevent update failures. Release APKs now signed with a stable key to prevent update failures. Source: llm_adapter@2026-07-19 Confidence: low	—
Bugfix	Medium	Transition from debug-signed to stable-signed requires one-time uninstall; subsequent updates install cleanly. Transition from debug-signed to stable-signed requires one-time uninstall; subsequent updates install cleanly. Source: granite4.1:30b@2026-07-19-audit Confidence: low	—

Full changelog

Release APKs are now signed with a stable key

Sideload builds were debug-signed, and a debug key is generated per build machine, so every published APK had a different signature. Android then refuses to update in place (INSTALL_FAILED_UPDATE_INCOMPATIBLE) and forces an uninstall — which wipes any models downloaded in-app (they live in the app's internal storage). Release builds now sign with a stable keystore, so an update installs over the previous release and keeps your downloaded models.

One-time transition: moving from the old debug-signed install (≤ v0.9.0) to this stably-signed build still needs a single uninstall. Every update after this one installs cleanly. Models adb-pushed to /data/local/tmp/bmoe are never affected by an uninstall; to keep a model downloaded in-app across this one transition, move it there first.

No app-behavior changes from v0.9.0 — this is signing only.

Install: app-dev-release.apk (dev flavor; all-files access, reads adb-pushed models too).

Breaking Changes

Release builds switched to a stable keystore; previous debug‑signed APKs (≤ v0.9.0) are incompatible and require one uninstall before updating.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track BigMoeOnEdge

Get notified when new releases ship.

About BigMoeOnEdge

All releases →