Mob 0.9.25 and otp-d199a49a released!

Mob 0.9.25 and otp-d199a49a have been released.

Pre-built OTP for Android (aarch64, arm32, x86_64), iOS simulator (aarch64-apple-iossimulator), and iOS device (aarch64-apple-ios). OTP source commit: d199a49a.

Security

• CI runs osv-scanner over mix.lock (MOB-496). The security-scan job ran
  only mix_audit, whose advisory feed lagged OSV.dev: on 2026-10-22 it
  reported nothing while decimal 3.1.1 had EEF-CVE-2026-97853 (unbounded
  allocation in Decimal.round/3). The job keeps mix_audit and adds
  osv-scanner. decimal is test-only here (via ecto_sqlite3) and is now 3.2.0.
  Apps get decimal on the device through ecto_sqlite3; an existing app’s
  lock still holds the old one until mix deps.update decimal.

Fixed

• The Android and iOS-simulator BEAM find their ERTS directory at runtime
  instead of assuming erts-17.0 (MOB-493). android/jni/mob_beam.zig
  hard-coded erts-17.0 for BINDIR and the ERTS helper symlinks, and
  ios/mob_beam.m fell back to it when the build didn’t pass -DERTS_VSN
  (the simulator build doesn’t). The ERTS version follows the OTP runtime
  mob_dev ships, and the OTP 29.1.2 runtime is erts-17.1.1, so these apps
  would not have booted on it. Both now take the highest erts-* that has a
  bin/ under the OTP root (an upgrade leaves the old one in place on
  Android). With none, the app doesn’t start: iOS shows a startup error, and
  Android logs it to logcat (tag MobBeam), since the generated MobBridge
  has no setStartupError. Physical-iOS and release builds already passed
  the version from the tarball and are unchanged. The rule lives in
  android/jni/mob_erts_dir.zig and ios/mob_erts_dir.h, tested by zig test
  and test/native/erts_dir_test.c.

Changed

• .tool-versions pins erlang 29.1.2, matching the rebuilt device runtime
  (MOB-493).

Mob Info

Classification: Hybrid Mobile Framework
Description: BEAM-on-device mobile framework for Elixir. OTP runs inside your iOS and Android apps — embedded directly in the app bundle, no server required. Screens are GenServers; the UI is rendered by Compose and SwiftUI via a thin NIF.
Forum/tag: mob

Click here to view Mob’s main announcement thread.