• [#3696] Add API 35 (Vanilla Ice Cream) support.
• [#3728] Add API 36 (Baklava) Developer Preview 1 support.
• [#3706] Add support for API 35 feature flags. (Thanks IgorEisberg)
• [#3708] Add support for re-compacting compactly packed applications. (Thanks IgorEisberg)
• [#3724] Add support for modifying existing network security config for -n. (Thanks swngarg-lt)
• [#3699] Refactor ApkBuilder|ApkDecoder (Thanks IgorEisberg)
• [#3709] Refactor xml handling w/ introduction of brut.j.xml. (Thanks IgorEisberg)
• [#3746] Refactor configs/tests and misc items. (Thanks IgorEisberg)
• [#3687] Refactor out deprecated CountingInputStream. (Thanks IgorEisberg)
• [#3705] Fix support for compact apks with over ~32k resources. (Thanks IgorEisberg)
• [#3747] Upgrade smali to 3.0.9.
• [#3733, #3750] Upgrade gradle to 4.2.2.
• [#3701, #3732] Upgrade commons-io to 2.18.0.
• [#3745] Upgrade commons-text to 1.13.0.
• [#3703, #3751] Upgrade guava to 33.4.0.

This post was released with commentary at: https://connortumbleson.com/2025/01/15/apktool-v2-11-0-released/

• [#3476] Add parallelization to decode|build command. (Thanks Cregrant)
• [#3559] Add reproducible builds (drop Proguard for R8).
• [#3683] Add automatic selection of latest apktool to helper scripts. (Thanks codebymikey
• [#3681] Add support for final API 34 (Upside Down Cake)
• [#3602] Fix stripping of META-INF files for xmlpull.
• [#3512] Fix disassembly of Facebook.
• [#3536] Fix treating stamp-cert-sha256 as unknown file.
• [#3578] Fix treating non-main class dex files as compressed.
• [#3583] Fix misalignment on namespace restriction from serializer.
• [#3618] Fix resource leak on unclosed ZipFile on framework install.
• [#3634] Fix resource leak on unclosed streams on manifest disassemble. (Thanks azotzot)
• [#3657] Fix sort order of files on tmpfs filesystems. (Thanks luk1337)
• [#3676] Fix tabs/spaces in linux helper script. (Thanks alexpopov)
• [#3519, #3601, #3690] Upgrade baksmali/smali to 3.0.8.
• [#3459, #3595] Upgrade Gradle to 8.7. (Thanks ArjunaKumarMohanta)
• [#3509] Upgrade proguard-gradle to 7.4.2.
• [#3671] Upgrade r8 to 8.5.35.
• [#3577, #3607, #3672] Upgrade commons-cli to 1.9.0.
• [#3560, #3570] Upgrade commons-io to 2.16.1.
• [#3670] Upgrade guava to 33.3.0.
• [#3576] Upgrade commons-text to 1.12.0.
• [#3646, #3663, #3680] Upgrade commons-lang3 to 3.17.0.
• [#3585] Upgrade xmlunit-legacy to 2.10.0.
• [#3510, #3515, #3550, #3572] Upgrade wrapper-validation-action to 3.3.0.
• [#3470, #3479, #3500, #3511, #3522, #3566, #3571, #3575, #3586, #3624, #3628, #3648, #3662, #3679, #3692] Upgrade gradle/actions to 4.1.0.
• [#3471] Upgrade github/codeql-action to 3.
• [#3528] Upgrade actions/upload-artifact to 4.

This post was released with commentary at: https://connortumbleson.com/2024/09/17/apktool-v2-10-0-released/

This post was released with commentary at: https://connortumbleson.com/2024/01/20/apktool-v2-9-3-released/

This post was released with commentary at: https://connortumbleson.com/2024/01/05/apktool-v2-9-2-released/

This post was released with commentary at: https://connortumbleson.com/2023/12/06/apktool-v2-9-1-released/

• Add manual YAML implementation to drop SnakeYAML dependency. #3145 (Thanks sv99)
• Add Android 14 framework support. #3202
• Add Resource Modes to allow for more control over resource decoding. #2836
• Add Docker image. #3351 (Thanks Fmstrat)
• Add support for compactly packed resources. #3366
• Add support for 16bit offset entries in resource table. #3367
• Add support for grammatical gender. #3369
• Fix regression with detection of sparse resource table. #3199
• Fix poisoning of sparse detection via sparse framework. #3298
• Fix over-reading the Res Config Flags if size is larger than known. #3205
• Fix improperly decoding attribute and arrays. #2806
• Fix corruption of resource table when aapt2 is used. #3346
• Fix decoding application with larger chunk header size than used. #2989
• Fix decoding application with entries offset that resolved to NO_ENTRY (-1). #1874
• Fix decoding application with larger axml namespace than known. #2587, #2863
• Fix decoding application with misleading number of end namespace chunks. #2070
• Fix decoding application with empty resource table. #2701
• Fix decoding application with duplicate namespaces. #2664
• Fix decoding application with missing namespace on system resources. #2972, #2420
• Fix decoding application with string block with more string entries than strings. #3236
• Fix decoding application with unknown files that exceed file name length limits. #3238
• Fix decoding application with duplicate smaller res entries. #2824
• Fix decoding application with styled string with span outside length of string. #2829
• Fix decoding application from Android Milestone (pre 1.0) builds. #3311
• Fix "disableZip64ExtraFieldValidation" patch by adding to helper scripts. #3198
• Fix changing values of platformBuildVersionCode and platformBuildVersionName in apktool.yml. #3204
• Fix ci build system to properly archive test builds post Kotlin migration. #3282
• Fix Windows helper scripts to properly handle /c. #2973 (Thanks maksz42)
• Change aapt2 to be default build tool. #3368
• Change build system to ignore missing javadoc blocks. #3222 (Thanks sv99)
• Change -c/--copy-original to no longer be deprecated. #2129
• Change frequency of dummy resources to be less often after proper disassembly of resources. #2683, #2104
• Change build system configuration to Kotlin DSL. #3249
• Change build system to leverage Gradle version catalog. #3353
• Change system to no longer generate APKTOOL_DUMMY_* resources. #3258
• Change verbose mode to no longer print out method names. #3310
• Refactor out specific manifest file decoder for empty resource table. #3171 (Thanks sv99)
• Refactor out duo logic with decoders during resource parser. #3211 (Thanks sv99)
• Refactor for specific method operations for loading full resource table. #3217 (Thanks sv99)
• Refactor ApkDecoder for leveraging ApkInfo for file and unknown files. #3242 (Thanks sv99)
• Refactor ResAttrDecoder into AXmlResourceParser. #3243 (Thanks sv99)
• Refactor Gradle validation job to only run if gradle/wrapper/gradle-wrapper.jar is modified. #3228 (Thanks ArjunaKumarMohanta)
• Upgrade Gradle to 8.3.0 #3275 (Thanks ArjunaKumarMohanta)
• Upgrade @actions/checkout to v4. #3327
• Upgrade apache.commons/lang3 to 3.13.0 #3240
• Upgrade apaches.common-io to 2.14.0 #3358
• Upgrade gradle/gradle-build-action to 2.9.0 #3213, #3241, #3285, #3316, #3359
• Upgrade gradle/wrapper-validation-action to 1.1.0 #3214
• Upgrade xmlunit:xmlunit:1.6 to org.xmlunit:xmlunit-legacy:2.9.1 #3235
• Upgrade com.github.johnrengelman.shadow to 8.1.1 #3259

This post was released with commentary at: https://connortumbleson.com/2023/10/08/apktool-v2-9-0-released/

This post was released in pair with https://connortumbleson.com/2023/07/22/apktool-v2-8-1-released and duplicated in part here for historical reasons.

• Add SDK U (API 34) Preview support. (#3041)
• Add SDK V (API ?) Preview support. (#3115)
• Add CI testing for Java versions: 18 and 19. (#2976)
• Add support for parsing applications with config flag size > 8 (from 28). (#2978)
• Add support for running apktool via gradle. (#3070) / (Thanks sv99)
• Add support for 0_resource_name_obfuscated (#2980)
• Add support for Upside Down Cake & Vanilla Ice Cream SDK Shorthand. (#3113)
• Remove CI testing for Java versions: 9, 10, 12, 13, 14, 15 and 17.
• Fix issue parsing empty resources.asrc. (#2998) / (Thanks IgorEisberg)
• Fix issue with larger apktool.yml files. (#3008)
• Fix issue with parsing XML_TYPE_OVERLAY. (#3030)
• Fix issue with aapt/aapt2 in edge cases waiting 15 seconds for output. (#3071) / (Thanks sv99)
• Fix NPE when decoding namespace missing from string pool. (#3104)
• Fix preference order when bogus values fill spring pool instead preferring res table. (#2981)
• Fix assembly with aapt1 when duplicate bag items are detected. (#1927, #2484)
• Fix config flag support for 64 byte header, adding localeNumberingSystem. (#3133)
• Fix issue crashing out when reading entries past chunk end. (#3036)
• Refactor brut.androlib.err to brut.androlib.exceptions for standard naming convention of Exceptions. (#3088) / (Thanks sv99)
• Refactor Build/Decode to work from common Config object. (#3091) / (Thanks sv99)
• Refactor into ApkBuilder and ApkDecoder instead of generic Androlib. (#3103) / (Thanks sv99)
• Refactor new class Framework to lessen responsibility of AndrolibResources. (#3105) / (Thanks sv99)
• Refactor ApkDecoder to split methods for MetaInfo towards ResTable. (#3106) / (Thanks sv99)
• Refactor ApkDecoder to introduce common methods for manifest and resource operations. (#3109) / (Thanks sv99)
• Refactor Gradle workflow into its own to cut down on unrelated CI failures. (#3114)
• Refactor *Decoders to split child classes into own class files. (Issue 3116)
• Refactor classes to support new ApkInvoker class. (#3124) / (Thanks sv99)
• Upgrade gradle/gradle-build-action to 2.5.1. (Issue 3119)
• Upgrade away from deprecated SnakeYAML constructors (#3079) / (Thanks MarcMil)
• Upgrade codebase to use Java7 NIO library for IO. (#3055) / (Thanks sv99)
• Upgrade to smali/baksmali 3.0.3 and move to Google fork of it. (#3050)
• Upgrade to Gradle 8.2 (Thanks ArjunaKumarMohanta)
• Upgrade commons-io to 2.13.0 from 2.11.0
• Upgrade guava to 32.0.1-jre from 31.0.1-jre
• Upgrade proguard_gradle to 7.3.2 from 7.3.0
• Upgrade shadow to 8.0.0 from 7.1.0

This post was released in pair with https://connortumbleson.com/2023/07/17/apktool-v2-8-0-released and duplicated in part here for historical reasons.

• Add SDK T (API 33) support. (#2845)
• Add SDK S v2 (API 32) support. (#2776)
• Updated internal aapt/aapt2 to (91492d8 of frameworks_base)
• Add support for newest ResourcesTypes.h specs (policy, overlay and staged alias). (#2809, #2714)
• Add updated internal aapt2/aapt2 binaries. (#2787)
• Add ability to generate generic network security config (-n / --net-sec-conf). (#1622)
• Add helpful message during built apk message to identify location of apk. (#2843)
• Add bleeding edge smali package via jitpack. (#2918, #2662)
• Add build support for JDK 17. (#2952)
• Fix resource unclosed during unknown file handling. (#2473) / (Thanks auermich93)
• Fix style strings regression between aapt1/aapt2 builds. (#2815) / (Thanks IgorEisberg)
• Fix support for uses-native-library in Manifest. (#2778)
• Fix support for usesPermissionFlags in Manifest. (#2789)
• Fix windows helper script to allow spaces in path name. (#2855)
• Fix decoding application if using multiple style res types. (#1719) / (Thanks tvildo)
• Fix handling with malformed namespaces. (#2615) / (Thanks ljysdfz & MyAnoneNeko)
• Fix handling of sparse flags during resource parsing. (#2887) / (Thanks iamr0s)
• Fix crash when parsing a manifest numeric that resolves as null. (#2878)
• Fix crash when parsing HTML string with empty tag leading to invalid entry. (#2900) / (Thanks MaSven)
• Fix crash when wrongly decoding overlay policies. (#2805) / (Thanks gramound)
• Fix regression when decoding overlay policies. (#2945)
• Fix respecting of $XDG_DATA_HOME on Linux for framework files location. (#2924) / (Thanks Miepee)
• Fix storing of obfuscated resource files for properly applying proper compression on build. (#2925) / (Thanks Kirlif)
• Fix issue parsing an obfuscated resource with a improperly referenced parent resource. (#2908)
• Fix --only-main-classes winning over --no-src. (#2927) / (Thanks Surendrajat)
• Fix disassembly of files mixed between r, R and res folders. (#2933)
• Fix handling of (name removed) resources. (#2940) / (Thanks Danealau)
• Fix disassembly of raw resources for AndResGuard. (#2943)
• Fix attribute referencing to self package while using AndResGuard. (#2911)
• Revert automatic workaround for using private resources. (PR 2785, #2771)
• Upgrade CI Workflow to leverage latest actions. (Thanks Goooler)
• Upgrade org.apache.commons:commons-text to 1.10.0 (from 1.9)
• Upgrade org.yaml:snakeyaml to 1.32 (from 1.29)

This post was originally released at: https://connortumbleson.com/2022/11/24/apktool-v2-7-0-released and duplicated in part here for historical reasons.

This post was originally released at: https://connortumbleson.com/2022/02/26/apktool-v2-6-1-released and duplicated in part here for historical reasons.

• Android 12 Support (#2580)
• Published to Maven Central (#2529)
• Upgrade internal aapt/aapt2 to (7691c of frameworks_base)
• Upgrade to baksmali/smali 2.5.2
• Upgrade to gradle 7.2 (Thanks Goooler)
• Upgrade to snakeyaml 1.29 (Thanks Goooler)
• Upgrade to guava 30.1.1-jre (Thanks Goooler)
• Upgrade to junit 4.13.2 (Thanks Goooler)
• Upgrade to commons-lang 3.12.0 (Thanks Goooler)
• Upgrade to commons-io 2.11.0 (Thanks Goooler)
• Upgrade to proguard 7.1.1 (Thanks Goooler)
• Upgrade to license.hierynomus 0.16.1 (Thanks Goooler)
• Upgrade to jengelman.shadow 7.0.0 (Thanks Goooler)
• Upgrade to actions/setup-java@v2 (Thanks Goooler)
• Added .gitattributes (Thanks Goooler)
• Added support for SDK in Development (Tiramisu, API 32?)
• Added automatic execution of aapt/aapt2 binaries during CI process to find broken builds.
• Added automatic ldd/otool -L execution during CI process to identify non-static "fat" aapt/aapt2 builds.
• Added test execution on Java 15/16 (Now 8-16) during CI process.
• Upgrade aapt2 with patches for attr-private and remove reserved pkgIds. (Thanks MrIkso)
• Upgrade aapt1 with patches for a static binary on Mac arch.
• Add lazy init for ResTable for optimizations. (#2604) / (Thanks IgorEisberg)
• Add automatic disassemble/assemble JAR files without specifying api level. (#2605) / (Thanks IgorEisberg)
• Changed zipslip exceptions to skip file instead of exit on failure. (#2201)
• Changed dummy resource names to APKTOOL_DUPLICATE_{Type}_{RESID} to prevent starting with numeric (#2229)
• Changed all Apache License links to https. (#2635) / (Thanks Goooler)
• Changed getHTML() processor to leverage BundleTool for handling complex string values. (#2632) / (Thanks itaybia)
• Fix decoding issue requiring specific order of chunks (library/table). (#2099) / (Thanks LoyieKing)
• Fix decoding issues with code points over > 0x10000. (#2299) / (Thanks Comnir)
• Fix decoding issues with surrogate pair emojis. (#2546) / (Thanks Comnir)
• Fix NPE when decoding to a custom non-empty root directory. (#2455)
• Fix Android 11 dex NPE due to hidden api restriction flags. (#2499) / (Thanks JesusFreke)
• Fix dummy resources being built as type resources vs item resources. (#2603)
• Fix numeric string meta-data losing context of data type. (#2611) / (Thanks codylund)
• Reduce code smell failures. (#2554) / (Thanks matteobaccan)
• Reduce code smells & correct improper opcode use for baksmali. (#2604) / (Thanks IgorEisberg)
• Reduce code smells for unused logic, unneeded casting and newer Java language features. (#2636 / (Thanks Goooler)
• Remove unused targetSdkVersion for source disassemble as value was not populated yet. (#2604) / (Thanks IgorEisberg)
• Remove duplicate workflows for 1 unified GitHub Action workflow. (#2633) / (Thanks Goooler)

This post was originally released at: https://connortumbleson.com/2021/09/02/apktool-v2-6-0-released and duplicated in part here for historical reasons.

• Android 11 Support (#2399, #2397, #2369, #2167)
• Updated baksmali/smali to version 2.4.0 (#2006, #1718)
• Upgrade to gradle 6.4.1
• Replaced TravisCI with GitHub Actions
• Deprecate 32bit (#2110, #2053)
• Added support for SDK Codename "S" (Android 12?)
• Added support for JAVA_HOME environmental on Windows if defined. (Thanks vldmrrr)
• Update license headers to reflect start copyright date & remove javadoc style. (Thanks friederbluemle)
• Fixed issue with binary name clash in multi-threaded environments. (#2251) Thanks chris-sharl
• Fixed issue with resources.arsc file being compressed in framework files. (#2323)
• Fixed issue with empty files being compressed breaking applications. (#2333) / (Thanks peret)
• Fixed handling with debug mode while using aapt2. (#2328, #2364) / Thanks Comnir)
• Fixed issue with handling of XML files using $ in resource name. (#2386, #2217, #2119)
• Fixed issue with NPE disassembling manifest with attributes with no resourceId. (#2300)
• Fixed issue with aapt2 and strict dummy properties, changing bool(false) to ref(null). (#2438, #1903)
• Fixed issue with non-standard namespaces in obfuscated application. (#2317, #2188, #1859)
• Fixed NPE when trying to find a referent of a missing resource. (#1945, #2146)
• Properly return non-zero error if invalid parameters. (Thanks Giszmo)
• Added helpful error message when framework directory cannot be written. (#2343)
• Added testcases for classes#.dex disassembling on aapt1/aapt2. (#2411)
• Added apktool list-frameworks. (#1913)
• Support for new compileSdkVersion property for SdkInfo. (#2368)

This post was originally released at: https://connortumbleson.com/2020/12/02/apktool-v2-5-0-released and duplicated in part here for historical reasons.

• Updated baksmali/smali to version 2.3.4
• Upgrade to gradle 5.6.2
• Added support for Android Q (10) Final. (#2131)
• Fixed build issue with JDK9+ because of jmod change. (#2086)
• Fixed security issue with unpacking assets to unintended locations via directory traversal. (#2058)
• Fixed issue with api-level command not showing in advanced documentation. (#2027)
• Fixed issue with directory creation warning when framework directory not made. (#2048)
• Fixed issue with missing mapping for Q shorthand property. (#2045)
• Fixed issue with raw qmg files not decoding correctly. (#2046)
• Fixed issue with copying assets where output directory doesn't match initial structure. (#2046)
• Fixed issue with NPE with empty attribute content during deserialization. (#2063)
• Fixed removal of META-INF/services. (#2084, #2018) Thanks adibfara
• Fixed support for "attr" bag type. (#2117) Thanks visigoth
• Fixed wiping license headers of AOSP/Android4Me files. (#2093)
• Added enhanced wrapper file for Windows. (#2120) Thanks Varstahl
• Added advance command for skipping disassemble of non-root dex packages. (#2051)
• Fixed issue with MIUI package names being renamed. (#2028) Thanks IgorEisberg
• Work-around with issue with large 9patch path spamming in uncompressed file list. (#1272) Thanks IgorEisberg
• Fixed issue with NPE on annotations (#2071)
• Fixed issue with garbled attributes (#1576) Thanks brianairb
• Fixed regression with --only-main-classes (#2226) Thanks realityJie
• Fixed 32bit binary issue with Window aapt/aapt2 builds. (#2141) Thanks Furniel
• Fixed issue with JVM not knowing bitness on Windows in some situations. (#2105)
• Fixed issue with long path commands due to recording compression. (#1272) Thanks peret

This post was originally released at: https://connortumbleson.com/2019/11/29/apktool-v2-4-1-released and duplicated in part here for historical reasons.

• Java 8 (1.8) is now required.
• Updated baksmali/smali to version 2.2.6 (#1893)
• Fixed issue with new restriction with non-empty ids.xml values. (#1918) / Thanks gino247
• Fixed issue with PlatformBuildVersion properties changing to unexpected values. (#1909) / Thanks gino247
• Fixed issue with pending v5 Gradle upgrade, by upgrading to gradle v4.10.2. (#1943) / Thanks friederbluemle
• Added no-crunch support (optional) via new parameter of nc | --no-crunch. (#1849) / Thanks Novex
• Fixed issue with xsd files decoding/building improperly between aapt1/aapt2. (#1952)
• Fixed issue with malformed chunk header when decoding "special" apks. (#1976) / Thanks sebras
• Fixed issue with Apktool stealing focus on Mac environments. (#1996)
• Fixed issue with array resources having wrong types. (#1994), (#1922) / Thanks vbarthel-fr
• Fixed issue with 9patch images missing vertical or horizontal divs, by automatically creating them. (#1522) / Thanks IgorEisberg
• Fixed issue with resolving references to non-standard framework files. / Thanks IgorEisberg
• Fixed issue with resolving SDK version codes were not explicit values. / Thanks IgorEisberg
• Added 32bit binaries for unix & windows for aapt and aapt2.
• Added automated tests on Windows. (#1975)
• Added ability for api-level to be passed to baksmali & smali. / Thanks IgorEisberg

This post was originally released at: https://connortumbleson.com/2019/03/03/apktool-v2-4-0-released and duplicated in part here for historical reasons.

• Android Pie Final Support (#1864)
• Fixed issue with rebuilding applications with $ or _ characters (aapt2 only). (#1776)
• Fixed process executor to wait for response (15 seconds) in the case of identifying aapt version. (#1809) / Thanks sunshouxiang
• Fixed issue with 0 size file being marked as doNotCompress. (#1843) / Thanks alexeikh
• Updated aapt2 to latest version to handle various edge cases. (#1817)
• Align the frameworks/base project for both aapt1/aapt2 builds. (#1889)
• Update to Gradle 4.10 and fix warnings with upgrade. (#1884)

This post was originally released at: https://connortumbleson.com/2018/09/05/apktool-v2-3-4-released and duplicated in part here for historical reasons.

This post was originally released at: https://connortumbleson.com/2018/04/29/apktool-v2-3-3-released and duplicated in part here for historical reasons.

• Android P Preview Support (#1742)
• Initial support for rebuilding with aapt2 binary (#1689)
• Fixed issue with application with empty resources.arsc file (#1730)
• Fixed issue with root depth kotlin folder (#1703)
• Fixed building Apktool on Windows. (#1741)
• Added warning if application is non-zero typeIdOffset is discovered.
• Update to baksmali v2.2.2
• Support for treating additional photo extensions as raw (m4a)
• Prevent temporary BRUT files from clogging temp directories.

This post was originally released at: https://connortumbleson.com/2018/04/07/apktool-v2-3-2-released and duplicated in part here for historical reasons.

• Android Oreo Support (8.1) (#1667)
• Feature: Advanced --force-manifest for decoding manifest without resources. (#1680) / Thanks rubenanagua
• Fixed issue with shorthand SDK versions. (#1630)
• Fixed issue with encoding raw font files. (#1662) / Thanks minsko
• Fixed issue with rebuilding an apk that skipped resource decoding. (#1634)
• Fixed issue with large string decoding length incorrectly. (#1587)
• Fixed issue to allow repeated entry offsets to occur. (#1683) / Thanks Bricnic
• Fixed issue where non-system attributes were decoded as system in minified resource applications. (#1157)

This post was originally released at: https://connortumbleson.com/2017/12/26/apktool-v2-3-1-released/ and duplicated in part here for historical reasons.

• Android Oreo Support (#1594)
• Run CI tests on OSX as well as unix. (#1571)
• Prevent apktool doing permission checks on unneeded directories. (#1586)
• Windows Unicode support for helper scripts. (#1595)
• Dropped support for all 32 bit binaries, except Windows (#1598)
• Fixed ClassCastExceptions when producing files. (#1444) / Thanks xpirt
• Fixed unclosed streams when using SmaliMod. Thanks footpatch
• Cleanup deprecations in Apache Commons CLI. Thanks xpirt
• Fixed issue with apks that have 4 non-positional/positional nodes. (#1611)
• Added support for invalid targetSdkValues which are greater than max or less than min. (#1615) / Thanks Jan Vidar Krey
• Added ability to skip assets decode (--no-assets) (#1605)
• Prevented directories being written outside of scope of decode directory. (#1589)

This post was originally released at: https://connortumbleson.com/2017/09/21/apktool-v2-3-0-released and duplicated in part here for historical reasons.

• Android O Final Dev Preview Support (#1520)
• Update SnakeYAML to 1.1.8 (Android). (#591)
• Upgrade to gradle 4.0
• Fixed issue with APKs taking longer than usual to parse resources. (#1489) / Thanks MarcMil
• Fixed issue with internal binaries not accessible in a Spring boot environment. (#1543) / Thanks bingqiao
• Add preliminary support for rebuilding applications built in aapt2 (#1520)
• Add support for resource filenames to contain $ symbols. (#1532)
• Fixed issue with apktool not closing file resources, creating locks. (#1561) / Thanks MarcMil
• Fixed issue with APKs that have INVALID TYPE CONFIG resources. (#1534)
• Fixed decoding issue with APKs with intentionally invalid characters. (#1564)
• Only exit with a 0 status code during version commands.
• Enforce proper Apache licenses on all Java files.
• Prevent malicious directory traversal with unknown files.
• Prevent XML-XXE processing to prevent unintended leaking of information in a malicious setting.

This post was originally released at: https://connortumbleson.com/2017/07/29/apktool-v2-2-4-released and duplicated in part here for historical reasons.