#testing v12.5.1 f5caf040d5 r1122

Test fix for some(conditions unconfirmed) uploaded video being not playable on Telegram Android clients

#release v12.5.1 adb88e8006 r1123

- Fixed a minor UI issue
- Switch to MapLibre for map views
- Update Cloudflare token length check to support new token (Thanks MrKristofere@GitHub)

Statements regarding recent incident of certain infamous Android Telegram fork(s):

- First thing first, Momogram is an independently maintained Telegram client fork and is not affiliated with the forks that steals your phone number.
- We're fully open source, there's no hidden modules or closed components
- We don't do obfuscation, release APKs are not additionally obfuscated
- APK filenames include the commit hash, you can checkout and build the exact version, the resulting binary should match the release
- There's no collection of user personal data, no additional tracking, telemetry or analytics bullshit

Some ppl may say:

Using any third-party client inherently carry risks, and users should evaluate and understand them before use.

but obviously it's not possible to make everyone do their own audits. Therefore, beyond simply stating risks, the more practical goal is to build a verifiable and trustable community — where users can rely on real open source code, reproducible builds, and community review to decide who and what to trust.

PS. An active sessions checker to raise awareness is in WIP, will show a one-time warning if logged in with known potentially malicious unofficial client.

關於近日熱門非官方客戶端未經允許私自蒐集使用者電話號碼

- Momogram 為獨立維護的 Telegram 第三方客戶端分支，與該竊取隱私資訊的開發團隊無任何關聯
- Momogram 為完全開源的客戶端，無任何閉源元件
- 發布的 APK 均無加入額外混淆
- APK 檔名附帶 commit hash，可 checkout 對應版本自行編譯
- 絕不蒐集使用者個人資訊也不建立額外追蹤或分析機制

也許有些人會說:

要用第三方客戶端就應該自負風險. 應該要在確認和理解後使用.

但不是所有人都有能力審查程式，因此比起單純強調風險，我認為更重要的是建立一個可被信任的社群環境，讓使用者能夠透過真正完全公開的原始碼和社群來判斷誰值得信任

ref:

(English)
- https://t.me/techleakszone/9418
- https://t.me/monogram_android/73 (code removed from public repo after "exposed", usages seem to exist in certain version(s) though)

(Chinese)
- https://t.me/xhqcankao/28390
- https://t.me/zaihuapd/40665
- https://t.me/MlgmXyysd_bibilailai/3097
- https://t.me/MlgmXyysd_bibilailai/3104

Extras:
- https://t.me/fangliye_archive/2 (old stories)

#testing v12.5.1 b043950be7 r1124

Added:
- Active session checker to check if there's active session of potentially malicious clients (Please consider share API ID from experimental settings if you get the warning message)

Fixed:
- Passkey login for Bitwarden (Thx Nagram)
- Edit/Promote admin in groups