chore(release): bump version to 1.7.37

Syncs versionCode 65 across the Gradle config, CHANGELOG, README
highlights and pipeline heading, in-app changelog, fastlane changelog,
F-Droid current-source line, and the release-drift fixture. Also
disables the MissingTranslation lint error: partial community
translations are supported by design (per-string English fallback,
gated by check_translations.py), and lint otherwise fails the build
for every string a contributor has not translated yet.

Author: SysAdminDoc

CHANGELOG.md

@@ -4,7 +4,29 @@ All notable changes to CallShield will be documented in this file.
 
 ## Unreleased
 
-## v1.7.36 — 2026-08-12
+## v1.7.37 — 2026-08-24
+
+### Interface
+
+- Added the Simplified Chinese (zh-CN) translation contributed by wj-on-git,
+  covering 1,068 of 1,373 strings and 28 of 31 plurals with zero format-specifier
+  drift. Strings added since the fork fall back to English individually. The
+  locale is registered in locales_config.xml so it appears in Android's per-app
+  language picker.
+
+### Distribution
+
+- Release APKs are signed again. The v1.7.26 through v1.7.29 release downloads
+  were built without any signature, so Android rejected them as invalid packages
+  (issue #19). The original release key's credentials were lost in a machine
+  rebuild, so releases now use a new signing key and the pinned signer
+  certificate moved with it. Anyone still on an old signed install has to
+  uninstall it before installing v1.7.37.
+
+### Data
+
+- Blocked +8651667456713, an audiobook-course robocall reported through the
+  in-app flow and the issue tracker (issue #20). Database version 38.
 
 ### Interface
 

README.md

@@ -41,6 +41,16 @@ legacy snapshot when the shard service is unavailable.
   <img src="fastlane/metadata/android/en-US/images/phoneScreenshots/06-more.png" width="30%" alt="Protection tools and release information">
 </p>
 
+## v1.7.37 Highlights
+
+- **Simplified Chinese:** a community zh-CN translation from wj-on-git covers
+  most of the app, is selectable from Android's per-app language picker, and
+  falls back to English per string for anything still untranslated.
+- **Installable releases:** release APKs are signed again after several
+  releases shipped unsigned and would not install; the signer certificate pin
+  moved to the new release key.
+- **Community database:** one new reported robocall number, database version 38.
+
 ## v1.7.36 Highlights
 
 - **Bounded local data surfaces** — database and activity views page Room rows,
@@ -356,7 +366,7 @@ legacy snapshot when the shard service is unavailable.
 5. **Callback-aware** — won't block callbacks from numbers you recently called, answered repeatedly, after a local emergency call, or urgent repeated callers
 6. **Community-driven** — one-tap anonymous contribution via Cloudflare Worker, merged into the database by the maintainer
 
-## Detection Pipeline (v1.7.36)
+## Detection Pipeline (v1.7.37)
 
 All detection layers implement a shared `IChecker` interface and run in priority order via `CheckerPipeline.run` — first non-null result wins, every layer is testable in isolation. Priorities are stable numbers; the ladder below is the live order.
 

app/build.gradle.kts

@@ -48,8 +48,8 @@ android {
         applicationId = "com.sysadmindoc.callshield"
         minSdk = 29
         targetSdk = 36
-        versionCode = 64
-        versionName = "1.7.36"
+        versionCode = 65
+        versionName = "1.7.37"
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
         manifestPlaceholders["appLabel"] = "@string/app_name"
     }
@@ -118,6 +118,16 @@ android {
         }
     }
 
+    lint {
+        // Partial community translations are supported by design
+        // (docs/TRANSLATING.md): Android falls back to English per string,
+        // and scripts/check_translations.py gates specifier drift, plural
+        // coverage, and locale registration. Left enabled, MissingTranslation
+        // hard-fails the build for every string a contributor has not
+        // translated yet, which would block any partial translation landing.
+        disable += "MissingTranslation"
+    }
+
     testOptions {
         unitTests {
             // Robolectric needs merged Android resources/manifest to run the

app/src/main/java/com/sysadmindoc/callshield/ui/screens/more/ChangelogScreen.kt

@@ -24,10 +24,20 @@ fun ChangelogScreen() {
         modifier = Modifier.fillMaxSize().verticalScroll(rememberScrollState()).padding(16.dp),
         verticalArrangement = Arrangement.spacedBy(0.dp),
     ) {
+        VersionEntry(
+            "1.7.37",
+            "Simplified Chinese translation and installable signed releases",
+            isLatest = true,
+            changes =
+                listOf(
+                    "Simplified Chinese (zh-CN) translation contributed by wj-on-git, selectable per app",
+                    "Release APKs are signed again; earlier unsigned release downloads would not install",
+                    "Community spam database updated with a reported robocall number",
+                ),
+        )
         VersionEntry(
             "1.7.36",
             "Bounded exports, deterministic ML contracts, and verifiable releases",
-            isLatest = true,
             changes =
                 listOf(
                     "CSV and portable backup paths stream Room rows without materializing full logs",

docs/fdroid/com.sysadmindoc.callshield.yml

@@ -51,6 +51,6 @@ AllowedAPKSigningKeys: 920e583ae6ce9f3863a6b3b8847e927d53a66c38a245e12e30ce124c9
 AutoUpdateMode: Version
 UpdateCheckMode: Tags ^v[0-9]+\.[0-9]+\.[0-9]+$
 # Last externally prepared build: 1.7.12 (40).
-# Current app source: 1.7.36 (64); no matching F-Droid build has been prepared.
+# Current app source: 1.7.37 (65); no matching F-Droid build has been prepared.
 CurrentVersion: 1.7.12
 CurrentVersionCode: 40

fastlane/metadata/android/en-US/changelogs/65.txt

@@ -0,0 +1 @@
+Simplified Chinese (zh-CN) translation, contributed by wj-on-git and selectable in the per-app language picker. Release APKs are properly signed again, so downloads from the release page install normally. Community spam database update.

scripts/test_release_drift.py

@@ -27,8 +27,8 @@ def test_checkout_is_synchronized(self) -> None:
             now=snapshot_time + timedelta(minutes=1),
         )
         self.assertEqual([], report["issues"], report)
-        self.assertEqual("1.7.36", report["version_name"])
-        self.assertEqual(64, report["version_code"])
+        self.assertEqual("1.7.37", report["version_name"])
+        self.assertEqual(65, report["version_code"])
         self.assertEqual(9, report["sources"]["source_count"])
         self.assertEqual(3, len(report["advisories"]))