GrapheneOS ports to Android 17, stable releases slated for Q4 2026

── What shipped ──

GrapheneOS merged Android 17 (API level 35) into its repository and published nightly builds for Pixel 8 and Pixel 8 Pro. The builds incorporate Android 17’s latest security patches, including the revised runtime permission model and hardware‑backed keystore improvements [GrapheneOS Forum]. The team plans a month‑long beta followed by stable releases in Q4 2026 [GrapheneOS Forum][Hacker News].

── Why it matters ──

Baseline security jumps. Android 17 enforces a stricter SELinux policy and expands verified‑boot key usage. By adopting these changes, GrapheneOS gains a higher‑assurance foundation without backporting each patch.

Hardware relevance. Targeting the Pixel 8 series, which runs the Tensor G3 chip, extends GrapheneOS’s device pool as older Pixels reach end‑of‑life. This keeps the OS attractive to enterprises that require long‑term support.

Upstream alignment. Historically the project lagged a few Android releases behind Google. Shipping on Android 17 narrows that gap, reducing the window for unpatched vulnerabilities and easing maintenance for downstream integrators.

── Editor’s take ──

Feeding Android 17’s patch stream into a hardened OS gives Google a ready‑made consumer for its security updates while letting GrapheneOS leverage upstream work. The result is a faster hardening cycle for the Android ecosystem, not merely a feature addition.

── Reader poll ──

Which secure mobile OS do you ship with?

• GrapheneOS
• LineageOS
• Apple iOS
• Google Pixel Secure