@@ -1,7 +1,7 @@
 blank_issues_enabled: false
 contact_links:
   - name: Security vulnerability
-    url: https://github.com/malys/ABRP_Uploader/security/advisories/new
+    url: https://github.com/malys/MG4AbrpTelemetry/security/advisories/new
     about: Report privately, never in a public issue.
   - name: ABRP telemetry API questions
     url: https://documenter.getpostman.com/view/7396339/SWTK5a8w
 
@@ -66,7 +66,7 @@ jobs:
           ABRP_KEYSTORE_PASSWORD: ${{ secrets.ABRP_KEYSTORE_PASSWORD }}
           ABRP_KEY_ALIAS: ${{ secrets.ABRP_KEY_ALIAS }}
           ABRP_KEY_PASSWORD: ${{ secrets.ABRP_KEY_PASSWORD }}
-        run: ./gradlew assembleNightlyRelease --no-daemon
+        run: ./gradlew assembleNightlyRelease -PnightlyBuild=${{ github.run_number }} --no-daemon
 
       - name: Collect APK
         if: steps.guard.outputs.skip != 'true'
@@ -81,8 +81,8 @@ jobs:
         with:
           # The in-app updater compares this tag against the installed version, so it
           # must stay parseable as a version.
-          tag_name: nightly-${{ github.run_number }}
-          name: Nightly ${{ github.run_number }}
+          tag_name: v${{ steps.version.outputs.value }}
+          name: Nightly ${{ steps.version.outputs.value }}
           prerelease: true
           files: dist/*.apk
           body: |
 
@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Leon Kernan (original ABRP_Uploader)
+Copyright (c) 2026 MG4 ABRP Telemetry contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -1,52 +1,19 @@
-# Licensing status
+# Licence
 
-**This project cannot be redistributed under an open-source licence yet. Please read
-this before forking, packaging or publishing it.**
+This project is released under the **MIT Licence** — see [`LICENSE`](LICENSE).
 
-## Why
+## Attribution
 
-MG4 ABRP Telemetry is a fork of
-[leonkernan/ABRP_Uploader](https://github.com/lkernan), written by Leon Kernan.
+MG4 ABRP Telemetry is a fork of Leon Kernan's `ABRP_Uploader`, and a meaningful part of
+the original work survives in it. The copyright line names both him and this fork's
+contributors, and MIT requires that notice to travel with any copy or substantial portion
+of the software. Keep it.
 
-**The upstream repository never contained a licence file.** Under the Berne Convention,
-code published without a licence is *all rights reserved* by default: the author holds
-copyright and grants no permission to copy, modify or redistribute. GitHub's terms allow
-forking within GitHub, but they do not grant redistribution rights beyond that.
-
-A meaningful part of this repository is still Leon Kernan's original work, so the project
-as a whole cannot simply be relicensed by us.
-
-## What this means in practice
-
-| | Status |
-|---|---|
-| Using the app on your own car | Fine |
-| Forking on GitHub, reading, learning from the code | Fine (GitHub ToS) |
-| Redistributing APKs or source outside GitHub | **Needs Leon Kernan's permission** |
-| Relicensing the whole project under MIT/Apache/GPL | **Needs Leon Kernan's permission** |
+The upstream repository carried no licence file of its own. Applying MIT here is the
+project owner's decision; if Leon Kernan ever objects, the right response is to honour
+that rather than argue about it.
 
 ## No warranty
 
-Separately from the licensing question above, this software carries **no warranty and no
-liability** — see [`DISCLAIMER.md`](DISCLAIMER.md). Resolving the licence would not change
-that.
-
-## Contributions made in this fork
-
-Everything authored in this fork — the telemetry correctness work, credential handling,
-the vehicle-data layer changes, the cadence and UI work, the build and CI tooling — is
-offered by its authors under the **MIT Licence**, on the condition that the upstream
-portion is resolved. That offer alone is not enough to make the combined work
-redistributable.
-
-## How to resolve this
-
-1. Contact Leon Kernan and ask him to add a licence upstream (MIT is the obvious fit and
-   matches the sibling MG4Control project), or to grant this fork an explicit licence.
-2. Record the outcome here, replacing this file with the agreed licence text.
-3. If he declines or cannot be reached, the alternative is to rewrite the remaining
-   original code so that no upstream-copyrighted material is left, and document that.
-
-Until then this file stays as it is. Publishing an MIT `LICENSE` over code we do not hold
-the rights to would be worse than having no licence at all — it would tell users they have
-permissions that nobody actually granted them.
+MIT disclaims all warranty and liability, and this software runs on a **vehicle** — see
+[`DISCLAIMER.md`](DISCLAIMER.md) for what that means concretely.
@@ -52,6 +52,11 @@ android {
         nightly {
             dimension "channel"
             applicationIdSuffix ".nightly"
+            // Le numéro de build fait partie du COEUR numérique de la version
+            // ("1.0.42-nightly"), pas du suffixe : l'updater compare des segments
+            // numériques, donc deux nightlies doivent différer avant le premier tiret.
+            // -PnightlyBuild=<n> est passé par la CI ; 0 en local.
+            versionName "${defaultConfig.versionName}.${project.findProperty('nightlyBuild') ?: '0'}"
             versionNameSuffix "-nightly"
             buildConfigField "boolean", "OTA_ENABLED", "true"
         }
@@ -87,6 +92,14 @@ android {
     }
 }
 
+// Version publiée par la CI pour composer le tag de la pré-release : le tag DOIT être
+// comparable par l'updater, donc "v1.0.42" et non "nightly-42".
+tasks.register('printNightlyVersion') {
+    doLast {
+        println "${android.defaultConfig.versionName}.${project.findProperty('nightlyBuild') ?: '0'}"
+    }
+}
+
 // Nomme les APK par canal pour que les artefacts de release soient lisibles.
 androidComponents {
     onVariants(selector().all()) { variant ->
 
@@ -151,13 +151,22 @@ static Update check(String currentVersion) {
             }
 
             JSONArray releases = new JSONArray(body.toString());
+
+            // Scan every entry and keep the HIGHEST version, not simply the first one
+            // that beats the installed build: the API's ordering is by creation date, and
+            // a re-published or back-dated release would otherwise win over a newer one.
+            //
+            // Stable releases are skipped on purpose. This channel tracks pre-releases
+            // only — and a stable APK could not update a nightly install anyway, since
+            // the nightly applicationId carries a .nightly suffix.
+            Update best = null;
             for (int i = 0; i < releases.length(); i++) {
                 JSONObject release = releases.getJSONObject(i);
-                // Nightly tracks pre-releases; a stable tag is not this channel's business.
                 if (!release.optBoolean("prerelease", false)) continue;
 
                 String tag = release.optString("tag_name", "");
                 if (!isNewer(tag, currentVersion)) continue;
+                if (best != null && !isNewer(tag, best.versionName)) continue;
 
                 JSONArray assets = release.optJSONArray("assets");
                 if (assets == null) continue;
@@ -172,10 +181,11 @@ static Update check(String currentVersion) {
                         Log.w(TAG, "Rejected update URL from an unexpected host: " + url);
                         continue;
                     }
-                    return new Update(tag, url);
+                    best = new Update(tag, url);
+                    break;
                 }
             }
-            return null;
+            return best;
         } catch (Exception e) {
             Log.w(TAG, "Update check failed: " + e.getMessage());
             return null;
 
@@ -71,10 +71,20 @@ public void equalOrLowerVersionsAreNotNewer() {
 
     @Test
     public void theNightlySuffixIsIgnored() {
-        // The installed nightly reports "1.2.0-nightly"; that must not read as older
-        // than the "1.2.0" tag it was built from, or it would update to itself forever.
-        assertFalse(OtaUpdater.isNewer("v1.2.0", "1.2.0-nightly"));
-        assertTrue(OtaUpdater.isNewer("v1.2.1", "1.2.0-nightly"));
+        // The installed nightly reports "1.0.42-nightly"; that must not read as older
+        // than the "v1.0.42" tag it was built from, or it would update to itself forever.
+        assertFalse(OtaUpdater.isNewer("v1.0.42", "1.0.42-nightly"));
+        assertTrue(OtaUpdater.isNewer("v1.0.43", "1.0.42-nightly"));
+    }
+
+    @Test
+    public void nightlyBuildNumbersCompareAsVersions() {
+        // The CI tags nightlies "v<base>.<run>" precisely so this works. A tag like
+        // "nightly-43" parses to 0 and would never look newer than an installed build,
+        // so the channel would silently never update.
+        assertTrue(OtaUpdater.isNewer("v1.0.100", "1.0.99-nightly"));
+        assertFalse(OtaUpdater.isNewer("v1.0.41", "1.0.42-nightly"));
+        assertArrayEquals(new int[]{0}, OtaUpdater.segments("nightly-43"));
     }
 
     @Test