Pixel 4a (5G) and Pixel 5 are end-of-life and shouldn't be used anymore due to lack of security patches for firmware and drivers. We provide extended support for harm reduction.
Keyboard: add new implementation of multi-locale spell checking support to fix crashes and other issues
Sandboxed Google Play compatibility layer: add Android Auto support with the compatibility layer eliminating the need for most of the permissions and a permission menu with 4 toggles for granting the minimal special access required for wired Android Auto, wireless Android Auto, audio routing and phone calls
Settings: remove confusing mention of Android Auto from Connected devices screen
exempt non-app system processes from Sensors permission enforcement (fixes some issues including gpsd crashes)
fix Bluetooth auto-turn-off race condition to avoid crashes
work around upstream race condition bug in biometric service
disable support for pre-approving PackageInstaller sessions due to incompatibility with Network permission toggle
fix several upstream bugs in handling crash reports mainly to improve our user-facing crash reporting system
use GrapheneOS Widevine provisioning proxy by default
add settings for changing Widevine provisioning server
add configuration for setupdesign and setupcompat libraries to improve system UI theme
kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.142
kernel (Generic 6.1): initial port of GrapheneOS changes for use with emulator builds
force disable network ADB in early boot to improve verified boot security (no user-facing change since it's currently disabled by default later in the boot process, but not robustly)