release: EVABRPUploader 2.1.3 — drop the unused powertrain permission

CAR_POWERTRAIN was declared and never used. The app makes five vehicle reads —
speed, outside temperature, park state, climate setpoint and the EV battery
properties — and none of them touch a powertrain property: park state resolves
through the vendor gear services (VPM, CarStateClient, VehicleConditionManager, SAIC
AIDL) inside EVHardware, never through the standard AAOS gear or ignition properties
this permission guards.

Removed from the manifest and from the security allowlist, so the gate keeps it out.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: malys

.github/security/permission-allowlist.txt

@@ -15,7 +15,6 @@ android.permission.ACCESS_FINE_LOCATION
 android.permission.ACCESS_COARSE_LOCATION
 # --- vehicle data (read-only: this app never writes to the car) ---
 android.car.permission.CAR_SPEED
-android.car.permission.CAR_POWERTRAIN
 android.car.permission.CAR_ENERGY
 android.car.permission.CAR_ENERGY_PORTS
 android.car.permission.CAR_EXTERIOR_ENVIRONMENT

CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.3] - 2026-08-25
+
+### Removed
+
+- `android.car.permission.CAR_POWERTRAIN` — declared since the first release and never used.
+  The app reads no powertrain property: park state comes from the vendor gear services through
+  EVHardware, and nothing here touches the standard AAOS gear or ignition properties the
+  permission guards. Dropped from the manifest and from the security allowlist.
+
 ## [2.1.2] - 2026-08-25
 
 ### Fixed

app/build.gradle

@@ -34,8 +34,8 @@ android {
         applicationId "com.evsuite.abrp"
         minSdk 27
         targetSdk 36
-        versionCode 10
-        versionName "2.1.2"
+        versionCode 11
+        versionName "2.1.3"
 
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
     }

app/src/main/AndroidManifest.xml

@@ -14,7 +14,6 @@
 
     <!-- Android Automotive / CarPropertyManager permissions -->
     <uses-permission android:name="android.car.permission.CAR_SPEED" />
-    <uses-permission android:name="android.car.permission.CAR_POWERTRAIN" />
     <uses-permission android:name="android.car.permission.CAR_ENERGY" />
     <uses-permission android:name="android.car.permission.CAR_ENERGY_PORTS" />
     <uses-permission android:name="android.car.permission.CAR_EXTERIOR_ENVIRONMENT" />