full 2024-02-01 security patch level

full 2024-02-05 security patch level

rebased onto UQ1A.240205.004 Android Open Source Project release

run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)

kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes

kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209

kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148

kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable

kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI

kernel (Generic 6.1): apply sysrq hardening changes

kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74

Settings: enable SIM deletion confirmation by default

System Updater: clarify notification for already being up to date

Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02

Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336

Vanadium: update to version 121.0.6167.143.1

Camera: update to version 66