chore: sync upstream v1.14.0-beta.3 - #10

Draft

github-actions[bot] wants to merge 236 commits into

automation/upstream-v1.14.0-beta.3

Commits on Jul 27, 2026

Update sing
nekohasekai
committed
abdaa55
Update sing-tun
nekohasekai
committed
0df408d
Update sing-shadowtls to v0.2.1
nekohasekai
committed
95f2d63
Fix ACME HTTP-01 challenge for IPv6 literal addresses
nekohasekai
committed
b6e554e
Fix naive slow open
nekohasekai
committed
cb74ad7
Fix stderr deprecated manager
nekohasekai
committed
61ede42
Fix tailscale start dependencies
nekohasekai
committed
dc4ca85
dns: Fix DHCP reset
nekohasekai
committed
dcfdd8a
route: Refetch rule-set when cache restore fails
nekohasekai
committed
7b9439f
process: Fix panic when package manager is unavailable on Android
nekohasekai
committed
ee808c4
Fix tailscale dns
nekohasekai
committed
4056231
dialer: Fix auto_detect_interface for UDP connections
nekohasekai
committed
c8c41c2
Fix missing tun logger
nekohasekai
committed
79bc79e
Fix tailscale version
nekohasekai
committed
d72f0ec
Fix naive HTTP/2 connections

H-TTTTT
authored and
nekohasekai
committed
3c4a5a6
Fix Tailscale 4via6 subnet routing
nekohasekai
committed
9d7e9b9
Fix derp stun options
nekohasekai
committed
67a600d
dns: Fix search domain expansion
nekohasekai
committed
397fb4d
Fix inconsistent URLTest results
nekohasekai
committed
cb0051d
Fix string type
nekohasekai
committed
1f1d6d9
Fix DNS route suffix matching
nekohasekai
committed
5139104
Strip EDNS padding from upstream DNS responses
nekohasekai
committed
5153118
Fix rule-set file descriptor leak
nekohasekai
committed
890544e
Fix UDP message ownership
nekohasekai
committed
1533244
Update Go to 1.25.12
nekohasekai
committed
62cc395
release: Backport workflow refactor
nekohasekai
committed
9791fa5
Update sing
nekohasekai
committed
c9e8185
Update sing-tun
nekohasekai
committed
c8f7676

Commits on Jul 29, 2026

Fix local DNS transport blocking on canceled queries
nekohasekai
committed
dba80e6
Bump version
nekohasekai
committed
3708fa1
Add MAC and hostname rule items
nekohasekai
committed
2b73711
Add Android support for MAC and hostname rule items
nekohasekai
committed
d672188
Add macOS support for MAC and hostname rule items
nekohasekai
committed
0b7162a
documentation: Update descriptions for neighbor rules
nekohasekai
committed
c533012
Refactor ACME support to certificate provider
nekohasekai
committed
49635c7
Add BBR profile and hop interval randomization for Hysteria2
nekohasekai
committed
e8e0397
platform: Add OOM Report & Crash Report
nekohasekai
committed
9d1bb8d
Also enable certificate store by default on Apple platforms
nekohasekai
committed
f3fc4f6
Add evaluate DNS rule action and related rule items
nekohasekai
committed
1f3ea24
platform: Fix set local
nekohasekai
committed
7567043
Fix deprecated warning double-formatting on localized clients
nekohasekai
committed
74bad88
oom-killer: Free memory on pressure notification and use gradual interval backoff
nekohasekai
committed
e1c391c
tools: Network Quality & STUN
nekohasekai
committed
2a04275
platform: Fix darwin signal handler
nekohasekai
committed
e7d85aa
tools: Tailscale status
nekohasekai
committed
a64e192
Revert "Also enable certificate store by default on Apple platforms"
nekohasekai
committed
655bc5c
Fix rules lock
nekohasekai
committed
22e035f
Fix darwin local DNS transport
nekohasekai
committed
65490e3
tools: Tailscale status
nekohasekai
committed
3a50793
Un-deprecate `ip_accept_any` DNS rule item
nekohasekai
committed
dfb15d1
documentation: Fixes
nekohasekai
committed
5d7f458
Add `package_name_regex` route, DNS and headless rule item
nekohasekai
committed
0dadc0a
platform: Wrap command RPC error returns with E.Cause
nekohasekai
committed
c243929
Fix lint errors
nekohasekai
committed
d5dd5f3
Add cloudflared inbound
nekohasekai
committed
79a151e
documentation: Fix missing update for `ip_version` and `query_type`
nekohasekai
committed
66c7065
Fix stun test
nekohasekai
committed
b1172be
Fix darwin cgo DNS again
nekohasekai
committed
2d9956c
Fix tailscale error
nekohasekai
committed
ded20e5
Add optimistic DNS cache
nekohasekai
committed
71e822d
oom-killer: Record report before reset network
nekohasekai
committed
5dc2f07
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
nekohasekai
committed
925ce1d
Standardize hosts path
nekohasekai
committed
6fd60b1
Add TLS spoof support
nekohasekai
committed
b9b4ade
Fix legacy rule-set download_detour blocked by empty direct check
nekohasekai
committed
cf5c22a
Reject pure-IP rule-set references without match_response
nekohasekai
committed
450ed0e
Fix use-after-free of pooled value buffers in bbolt Batch writes
nekohasekai
committed
cb0cc8d
Reject IP literal server name with TLS spoof
nekohasekai
committed
b2a8022
Fix macOS tlsspoof
nekohasekai
committed
23df373
Scope HTTP/2 fallback and HTTP/3 broken state per authority
nekohasekai
committed
6c698d1
Defer implicit default HTTP client fallback to first use
nekohasekai
committed
5c843c3
Strip EDNS padding from upstream DNS responses
nekohasekai
committed
1f81feb
Fix Apple TLS metadata capture
nekohasekai
committed
12fc393
Fix tls-spoof
nekohasekai
committed
4043e40
Add search domain support for Tailscale DNS
nekohasekai
committed
261c9b9
Log DNS optimistic background refresh outcomes
nekohasekai
committed
82476cb
Fix Tailscale search domain response name mismatch
nekohasekai
committed
6eb9615
Fix goroutine leak in networkquality tool
nekohasekai
committed
59a77d9
Add ACME profile support for IP address certificates
nekohasekai
committed
7a058db
platform: Improve oom-killer
nekohasekai
committed
380b7af
Fix darwin cgo DNS again
nekohasekai
committed
bf46d14
Improve UDP batch support
nekohasekai
committed
011ba60
Add Windows TLS engine
nekohasekai
committed
bbcdc61
Preserve comments between formatting
nekohasekai
committed
d824908
Improve oom-killer
nekohasekai
committed
1c7047e
ssh: Add cipher, MAC, and key exchange configuration
nekohasekai
committed
6f65430
dns: Add timeout configuration
nekohasekai
committed
262f27e
Fix tailscale start dependencies
nekohasekai
committed
82f829e
dns: Add neighbor-based hostname resolution to local server
nekohasekai
committed
3574514
dns: Add preferred_by rule item
nekohasekai
committed
14733ea
dns: Add mDNS server
nekohasekai
committed
b5ff4ba
Allow customizing TUN DNS mode and hijack interface DNS by default
nekohasekai
committed
65ac78b
Add more spoof method

macronut
authored and
nekohasekai
committed
0ce46cd
Fix reset network
nekohasekai
committed
cd94ac7
Add hysteria2 realm service and support
nekohasekai
committed
eaa3332
Update hysteria2 realm
nekohasekai
committed
2d9ffda
Fix TLS server close
nekohasekai
committed
5f256c9
Fix hysteria2 realm server
nekohasekai
committed
a88399b
Fix lint errors
nekohasekai
committed
6390b6d
Rebase wireguard-go to official
nekohasekai
committed
dd0f53b
oom-killer: Remove log "OOM draft discarded"
nekohasekai
committed
d892e7f
tailscale: Revert dialer deprecation and remove control_http_client
nekohasekai
committed
4d0a13b
tailscale: Fix handle peer DNS query
nekohasekai
committed
6b2d889
gvisor: Fix dialing to self addresses
nekohasekai
committed
a6f15d1
Fix tailscale
nekohasekai
committed
8a7cac4
tailscale: Add runtime exit node API
nekohasekai
committed
a0c3a02
tailscale: Expose more peer info fields
nekohasekai
committed
87ba251
Fix tailscale dns
nekohasekai
committed
1db44c5
daemon: Add Tailssh
nekohasekai
committed
1080ee6
hysteria2: Add gecko obfs
nekohasekai
committed
7a51512
tools: Fix mising cleanup
nekohasekai
committed
5129139
tailscale: Add tailssh server
nekohasekai
committed
5d4075f
tailssh: fix platform SFTP session teardown
nekohasekai
committed
e5b0ed6
platform: Add tailscale device name and logout
nekohasekai
committed
ceed8db
platform: Add shell support for iOS
nekohasekai
committed
b10d0a1
daemon: Split host operations into ManagedService
nekohasekai
committed
069069f
Add sing-box API service
nekohasekai
committed
33b35b3
tailscale: Fix auth URL not refreshed after logout
nekohasekai
committed
da8b8d0
Fix group status updates broken by API service
nekohasekai
committed
63de472
release: Fix apple release
nekohasekai
committed
8464c56
dns: Remove unused files
nekohasekai
committed
e148eee
Improve remote rule-set update
nekohasekai
committed
ff50e2e
Add dashboard support for API service
nekohasekai
committed
77feaef
Fix remote control when Clash server is unavailable
nekohasekai
committed
1ca7d8f
Add USB/IP service
nekohasekai
committed
22ffce8
Add USB/IP support for macOS
nekohasekai
committed
4a06897
documentation: Add USB/IP server and client
nekohasekai
committed
61960a6
Fix Cloudflared edge discovery ignoring configured resolver
nekohasekai
committed
9c9b312
Add iOS jailbreak release
nekohasekai
committed
e36cc22
certificate: Replace platform bridge with CGO JNI
nekohasekai
committed
8c17d47
platform: Fix missing api version check for usb/ip
nekohasekai
committed
07355ed
Fix oom draft flood
nekohasekai
committed
2a8691c
release: Fix upload ios deb
nekohasekai
committed
2f31320
Refactor darwin local DNS to raw mDNSResponder call
nekohasekai
committed
3862883
Write logs to oom report
nekohasekai
committed
45a0fe1
Add age support for report export
nekohasekai
committed
35c92be
Improve DHCP DNS server initialize
nekohasekai
committed
ab7315a
Fix linux ping
nekohasekai
committed
d95b63b
tls: Fix read wait buffer sizing
nekohasekai
committed
4e6bf7e
dialer: Dial directly when only one interface is available
nekohasekai
committed
b33b13a
Add snell protocol
nekohasekai
committed
5ad147c
Add L3 forwarding support
nekohasekai
committed
58c1e4e
Fix local DNS transport on darwin
nekohasekai
committed
24bc90d
Imrpove flow tracking & sniff action
nekohasekai
committed
fee8873
daemon: Release memory to OS on service reload
nekohasekai
committed
529aa66
Add bridge outbound
nekohasekai
committed
7691a3c
Improve bridge
nekohasekai
committed
c1f09ab
Add windows bridge
nekohasekai
committed
4c70140
Improve darwin bridge
nekohasekai
committed
bfe4c33
Fix bridge MTU
nekohasekai
committed
61ba94a
Improve windivert syscall
nekohasekai
committed
362725f
Fix windows bridge forwarding to connected subnets
nekohasekai
committed
5a03592
Fix macOS bridge with includeAllNetworks
nekohasekai
committed
d0eba35
Fix macOS bridge kernel panic
nekohasekai
committed
ae97748
Fix process and neighbor rules not matched in pre-match
nekohasekai
committed
35e591b
Add hysteria2 realm ip_version and port_mapping options
nekohasekai
committed
9d81f89
Add connections to OOM report
nekohasekai
committed
e7cb63e
Fix tailscale version
nekohasekai
committed
0e1a08f
Fix tailscale route
nekohasekai
committed
b72773e
Add netns and unshare support
nekohasekai
committed
3a820c5
Fix netns manager
nekohasekai
committed
29826dd
windivert: Verify cached driver against embedded asset before load
nekohasekai
committed
7dd9c6e
platform: Export tester and reporter
nekohasekai
committed
b784fb7
Fix windivert open
nekohasekai
committed
cf2bb0d
bridge: Raise accept_ra to 2 when enabling IPv6 forwarding
nekohasekai
committed
d7800a5
Fix daemon groups
nekohasekai
committed
76f633d
platform: Add boxdd
nekohasekai
committed
4652943
platform: Fix daemon data
nekohasekai
committed
4f1f3cf
platform: Add http proxy support for Windows
nekohasekai
committed
27ae59e
documentation: Update icon svg
nekohasekai
committed
0ddb14a
Fix nfqueue options
nekohasekai
committed
3b1f525
windivert: stabilize Windows driver lifecycle
nekohasekai
committed
badcce6
Fix SetGroupExpand race
nekohasekai
committed
bdae031
Fix tun gso check
nekohasekai
committed
7fc76ae
Fix nftables flush
nekohasekai
committed
00472ac
Fix windows bridge
nekohasekai
committed
6e7b187
Add windows build
nekohasekai
committed
4a1a712
boxdd: Fix log format
nekohasekai
committed
5869f74
boxxx: Add update API
nekohasekai
committed
69eef5d
boxdd: Add custom working directory support
nekohasekai
committed
f5520c9
tailscale: support Windows SSH user sessions
nekohasekai
committed
e883567
Update windows build
nekohasekai
committed
4f9e460
boxdd: Add insecure mode
nekohasekai
committed
6b0143f
Fix start lifecycle
nekohasekai
committed
ec9e3b0
platform: Fix version compare
nekohasekai
committed
2cd66e4
Fix oomkiller
nekohasekai
committed
65f2dd9
Fix iOS brdige
nekohasekai
committed
5cfc5b3
Add multiple tags support to rule-sets
nekohasekai
committed
0e3242f
boxx: Fix unsafe installation
nekohasekai
committed
09e0d1e
refactor: New tun udpnat
nekohasekai
committed
05d65f2
Refactor endpoint listen
nekohasekai
committed
24cdb81
Update Go to 1.25.12
nekohasekai
committed
9d69125
Add openvpn and openconnect
nekohasekai
committed
d776901
Fix bind control for auto redirect
nekohasekai
committed
64269b6
Fix tailscale detour
nekohasekai
committed
74f7853
Refactor endpoint in started interface
nekohasekai
committed
731ae71
Refactor OpenVPN and OpenConnect endpoints
nekohasekai
committed
b802ccd
Fix SSO support for anyconnect
nekohasekai
committed
6db7ae2
Refactor UDP DNS hijack
nekohasekai
committed
46a643b
refactor: Async DNS
nekohasekai
committed
47ea515
Fix DNS route suffix matching
nekohasekai
committed
1e25762
boxdd: Fix linux permission
nekohasekai
committed
27bc05b
Improve network reset
nekohasekai
committed
ce37c2e
boxdd: Implement linux http proxy
nekohasekai
committed
e1f18d0
desktop: Pin dependencies
nekohasekai
committed
49322ef
Add linux desktop build
nekohasekai
committed
057d8d9
openconnect: Fix Fortinet SSO
nekohasekai
committed
9798ec8
Fix wg detour
nekohasekai
committed
b74095d
boxdd: Fix unsafe permission check
nekohasekai
committed
58ba8de
openvpn: Fix certificate verification compatibility
nekohasekai
committed
98bdf5a
Fix security check message
nekohasekai
committed
e9dd68f
Improve OpenVPN & OpenConnect interoperability
nekohasekai
committed
3fe83d7
build: Refactor workflow
nekohasekai
committed
45d0574
boxdd: Fix windows update
nekohasekai
committed
8974704
Fix TCP DNS retry
nekohasekai
committed
04570f8
Update uTLS to v1.8.7

flyzstu
authored and
nekohasekai
committed
19a08c2
Update issue template for new clients
nekohasekai
committed
44e2c84
Add Fortinet hostcheck support
nekohasekai
committed
adc63a7
release: Improve release workflow
nekohasekai
committed
2bd154d
Fix Tailscale 4via6 subnet routing
nekohasekai
committed
517b05b
dns: Cache responses with client subnet
nekohasekai
committed
4c30cdf
dns: Probe connection reuse support for TCP transports
nekohasekai
committed
6317c1f
Fix Fortinet SSO again
nekohasekai
committed
5d0333f
platform: Fix WIFI state on reload
nekohasekai
committed
de3a5b0
route: simplify rule_set matching semantics
nekohasekai
committed
cad5ef2
dns: Add namespace and parallel support for evaluate
nekohasekai
committed
784d299
Add JSON schema support
nekohasekai
committed
5020191
release: Fix linux sign
nekohasekai
committed
bf5f5cd
Add initial_path option to remote rule-sets
nekohasekai
committed
70d2ac3
daemon: Improve URLTest
nekohasekai
committed
a5305fb
Fix inconsistent URLTest results
nekohasekai
committed
6ec8b72
Fix string type
nekohasekai
committed
fe06643
Fix TUN dispatcher deadlock
nekohasekai
committed
4a25be3
Fix openvpn
nekohasekai
committed
98910a8
Bump version
nekohasekai
committed
1569c52
merge: sync upstream v1.14.0-beta.3
github-actions[bot]
committed
8fb6e2d