chore: sync upstream v1.14.0-beta.5 - #12

Draft

github-actions[bot] wants to merge 215 commits into

dev-nextfrom

automation/upstream-v1.14.0-beta.5

Commits on Aug 3, 2026

Remove client metadata from AnyTLS requests by default
nekohasekai
committed
cb88d94
Update sing-quic
nekohasekai
committed
256d42a
Fix AnyTLS URLTest results

makt28
authored and
nekohasekai
committed
a29b4ea
Fix tailscale panic with IP control URL
nekohasekai
committed
d763884
Fix tailscale DNS transport missing DNS-only netmap updates
nekohasekai
committed
fd7cd31
tailscale: Fix system interface network category on Windows
nekohasekai
committed
6849e26
Bump version
nekohasekai
committed
17ec3c7
Add MAC and hostname rule items
nekohasekai
committed
ff11b53
Add Android support for MAC and hostname rule items
nekohasekai
committed
eb914f8
Add macOS support for MAC and hostname rule items
nekohasekai
committed
66c243e
documentation: Update descriptions for neighbor rules
nekohasekai
committed
efa18f7
Refactor ACME support to certificate provider
nekohasekai
committed
0a7891f
Add BBR profile and hop interval randomization for Hysteria2
nekohasekai
committed
ddf26b2
platform: Add OOM Report & Crash Report
nekohasekai
committed
f585c5b
Also enable certificate store by default on Apple platforms
nekohasekai
committed
08135c2
Add evaluate DNS rule action and related rule items
nekohasekai
committed
a01c177
platform: Fix set local
nekohasekai
committed
9443ba9
Fix deprecated warning double-formatting on localized clients
nekohasekai
committed
9542773
oom-killer: Free memory on pressure notification and use gradual interval backoff
nekohasekai
committed
c4cf020
tools: Network Quality & STUN
nekohasekai
committed
b7b2347
platform: Fix darwin signal handler
nekohasekai
committed
43169e3
tools: Tailscale status
nekohasekai
committed
c5f585a
Revert "Also enable certificate store by default on Apple platforms"
nekohasekai
committed
2f87587
Fix rules lock
nekohasekai
committed
9aade5a
Fix darwin local DNS transport
nekohasekai
committed
d279587
tools: Tailscale status
nekohasekai
committed
906b43b
Un-deprecate `ip_accept_any` DNS rule item
nekohasekai
committed
901f843
documentation: Fixes
nekohasekai
committed
9fd53f2
Add `package_name_regex` route, DNS and headless rule item
nekohasekai
committed
48ced35
platform: Wrap command RPC error returns with E.Cause
nekohasekai
committed
552f95d
Fix lint errors
nekohasekai
committed
d981ba8
Add cloudflared inbound
nekohasekai
committed
df1990d
documentation: Fix missing update for `ip_version` and `query_type`
nekohasekai
committed
fc7927e
Fix stun test
nekohasekai
committed
3d30209
Fix darwin cgo DNS again
nekohasekai
committed
4d42e13
Fix tailscale error
nekohasekai
committed
3d7ff70
Add optimistic DNS cache
nekohasekai
committed
13594ff
oom-killer: Record report before reset network
nekohasekai
committed
580061c
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
nekohasekai
committed
9d5ccfe
Standardize hosts path
nekohasekai
committed
982a4e4
Add TLS spoof support
nekohasekai
committed
2a8dc4f
Fix legacy rule-set download_detour blocked by empty direct check
nekohasekai
committed
275c827
Reject pure-IP rule-set references without match_response
nekohasekai
committed
9b04b7b
Fix use-after-free of pooled value buffers in bbolt Batch writes
nekohasekai
committed
418d244
Reject IP literal server name with TLS spoof
nekohasekai
committed
d033789
Fix macOS tlsspoof
nekohasekai
committed
3999a4e
Scope HTTP/2 fallback and HTTP/3 broken state per authority
nekohasekai
committed
a830789
Defer implicit default HTTP client fallback to first use
nekohasekai
committed
d8041fc
Strip EDNS padding from upstream DNS responses
nekohasekai
committed
2a0227c
Fix Apple TLS metadata capture
nekohasekai
committed
b1d4b59
Fix tls-spoof
nekohasekai
committed
8926fd6
Add search domain support for Tailscale DNS
nekohasekai
committed
217eb0d
Log DNS optimistic background refresh outcomes
nekohasekai
committed
3eeede6
Fix Tailscale search domain response name mismatch
nekohasekai
committed
cbbefe3
Fix goroutine leak in networkquality tool
nekohasekai
committed
f9ee14f
Add ACME profile support for IP address certificates
nekohasekai
committed
8dafbfc
platform: Improve oom-killer
nekohasekai
committed
0f87741
Fix darwin cgo DNS again
nekohasekai
committed
21f8992
Improve UDP batch support
nekohasekai
committed
c63e134
Add Windows TLS engine
nekohasekai
committed
e06d678
Preserve comments between formatting
nekohasekai
committed
2bd48bd
Improve oom-killer
nekohasekai
committed
34d0056
ssh: Add cipher, MAC, and key exchange configuration
nekohasekai
committed
a76fc2c
dns: Add timeout configuration
nekohasekai
committed
83a6522
Fix tailscale start dependencies
nekohasekai
committed
44664bf
dns: Add neighbor-based hostname resolution to local server
nekohasekai
committed
1cedef7
dns: Add preferred_by rule item
nekohasekai
committed
6d43944
dns: Add mDNS server
nekohasekai
committed
ab3eaaa
Allow customizing TUN DNS mode and hijack interface DNS by default
nekohasekai
committed
e42dd60
Add more spoof method

macronut
authored and
nekohasekai
committed
704102d
Fix reset network
nekohasekai
committed
8b3bba5
Add hysteria2 realm service and support
nekohasekai
committed
581eeea
Update hysteria2 realm
nekohasekai
committed
9d439d5
Fix TLS server close
nekohasekai
committed
bd80416
Fix hysteria2 realm server
nekohasekai
committed
290a3f7
Fix lint errors
nekohasekai
committed
0742076
Rebase wireguard-go to official
nekohasekai
committed
89512ca
oom-killer: Remove log "OOM draft discarded"
nekohasekai
committed
d3dbab5
tailscale: Revert dialer deprecation and remove control_http_client
nekohasekai
committed
8f190ae
tailscale: Fix handle peer DNS query
nekohasekai
committed
c5dbab3
tailscale: Add runtime exit node API
nekohasekai
committed
d662ae6
tailscale: Expose more peer info fields
nekohasekai
committed
b3a7f40
Fix tailscale dns
nekohasekai
committed
6514ad6
daemon: Add Tailssh
nekohasekai
committed
e902480
hysteria2: Add gecko obfs
nekohasekai
committed
958f130
tools: Fix mising cleanup
nekohasekai
committed
7b32bb7
tailscale: Add tailssh server
nekohasekai
committed
b9ed440
tailssh: fix platform SFTP session teardown
nekohasekai
committed
49be84a
platform: Add tailscale device name and logout
nekohasekai
committed
e961639
platform: Add shell support for iOS
nekohasekai
committed
fb7fff2
daemon: Split host operations into ManagedService
nekohasekai
committed
d7e7b52
Add sing-box API service
nekohasekai
committed
42e9a6f
tailscale: Fix auth URL not refreshed after logout
nekohasekai
committed
f15579a
Fix group status updates broken by API service
nekohasekai
committed
74308ec
release: Fix apple release
nekohasekai
committed
c191c66
dns: Remove unused files
nekohasekai
committed
3a1602e
Improve remote rule-set update
nekohasekai
committed
68d8863
Add dashboard support for API service
nekohasekai
committed
b1ce685
Fix remote control when Clash server is unavailable
nekohasekai
committed
7be0e1b
Add USB/IP service
nekohasekai
committed
0dd0096
Add USB/IP support for macOS
nekohasekai
committed
c57c81a
documentation: Add USB/IP server and client
nekohasekai
committed
41f6ccc
Fix Cloudflared edge discovery ignoring configured resolver
nekohasekai
committed
2cefda4
Add iOS jailbreak release
nekohasekai
committed
577edf6
certificate: Replace platform bridge with CGO JNI
nekohasekai
committed
f4a7d20
platform: Fix missing api version check for usb/ip
nekohasekai
committed
19bcc01
Fix oom draft flood
nekohasekai
committed
f47b760
release: Fix upload ios deb
nekohasekai
committed
f88a6f2
Refactor darwin local DNS to raw mDNSResponder call
nekohasekai
committed
7b9be31
Write logs to oom report
nekohasekai
committed
e375105
Add age support for report export
nekohasekai
committed
27ad5fd
Improve DHCP DNS server initialize
nekohasekai
committed
592f8c1
Fix linux ping
nekohasekai
committed
1602160
tls: Fix read wait buffer sizing
nekohasekai
committed
f2155ee
dialer: Dial directly when only one interface is available
nekohasekai
committed
089cbca
Add snell protocol
nekohasekai
committed
9d8fc9c
Add L3 forwarding support
nekohasekai
committed
d49fc87
Fix local DNS transport on darwin
nekohasekai
committed
297f2ab
Imrpove flow tracking & sniff action
nekohasekai
committed
906d3bf
daemon: Release memory to OS on service reload
nekohasekai
committed
e55b3ca
Add bridge outbound
nekohasekai
committed
48a0791
Improve bridge
nekohasekai
committed
265dd77
Add windows bridge
nekohasekai
committed
7200a77
Improve darwin bridge
nekohasekai
committed
cade101
Fix bridge MTU
nekohasekai
committed
fea0ea7
Improve windivert syscall
nekohasekai
committed
06c5d15
Fix windows bridge forwarding to connected subnets
nekohasekai
committed
ef16009
Fix macOS bridge with includeAllNetworks
nekohasekai
committed
1def249
Fix macOS bridge kernel panic
nekohasekai
committed
bbaf599
Fix process and neighbor rules not matched in pre-match
nekohasekai
committed
eef9bb4
Add hysteria2 realm ip_version and port_mapping options
nekohasekai
committed
845425b
Add connections to OOM report
nekohasekai
committed
f500f2a
Fix tailscale version
nekohasekai
committed
74b3b76
Add netns and unshare support
nekohasekai
committed
2c77aff
Fix netns manager
nekohasekai
committed
9f63c8f
windivert: Verify cached driver against embedded asset before load
nekohasekai
committed
857b673
platform: Export tester and reporter
nekohasekai
committed
802b299
Fix windivert open
nekohasekai
committed
a88f052
bridge: Raise accept_ra to 2 when enabling IPv6 forwarding
nekohasekai
committed
e43c8d1
Fix daemon groups
nekohasekai
committed
1b7cc09
platform: Add boxdd
nekohasekai
committed
c852960
platform: Fix daemon data
nekohasekai
committed
76f3d24
platform: Add http proxy support for Windows
nekohasekai
committed
9e164fc
documentation: Update icon svg
nekohasekai
committed
4a65f8d
Fix nfqueue options
nekohasekai
committed
026c1f1
windivert: stabilize Windows driver lifecycle
nekohasekai
committed
54ab3cc
Fix SetGroupExpand race
nekohasekai
committed
517bd42
Fix tun gso check
nekohasekai
committed
0c3d61d
Fix nftables flush
nekohasekai
committed
fbf619f
Fix windows bridge
nekohasekai
committed
fb486ac
Add windows build
nekohasekai
committed
daea8e3
boxdd: Fix log format
nekohasekai
committed
4a5ec03
boxxx: Add update API
nekohasekai
committed
a978d34
boxdd: Add custom working directory support
nekohasekai
committed
ca390fd
tailscale: support Windows SSH user sessions
nekohasekai
committed
78339a4
Update windows build
nekohasekai
committed
6b62e89
boxdd: Add insecure mode
nekohasekai
committed
249d1c9
Fix start lifecycle
nekohasekai
committed
700ca03
platform: Fix version compare
nekohasekai
committed
d9604a9
Fix oomkiller
nekohasekai
committed
1a4c069
Fix iOS brdige
nekohasekai
committed
40bcc08
Add multiple tags support to rule-sets
nekohasekai
committed
d72c431
boxx: Fix unsafe installation
nekohasekai
committed
98e3d61
refactor: New tun udpnat
nekohasekai
committed
d36ec12
Refactor endpoint listen
nekohasekai
committed
2961779
Update Go to 1.25.12
nekohasekai
committed
85af347
Add openvpn and openconnect
nekohasekai
committed
35ecbd0
Fix bind control for auto redirect
nekohasekai
committed
2785608
Refactor endpoint in started interface
nekohasekai
committed
975d281
Refactor OpenVPN and OpenConnect endpoints
nekohasekai
committed
b167240
Fix SSO support for anyconnect
nekohasekai
committed
366ea6f
Refactor UDP DNS hijack
nekohasekai
committed
83fe887
refactor: Async DNS
nekohasekai
committed
47fb6d9
Fix DNS route suffix matching
nekohasekai
committed
7c70a40
boxdd: Fix linux permission
nekohasekai
committed
1d074c1
Improve network reset
nekohasekai
committed
edeb401
boxdd: Implement linux http proxy
nekohasekai
committed
da6e562
desktop: Pin dependencies
nekohasekai
committed
d77237a
Add linux desktop build
nekohasekai
committed
ec05c41
openconnect: Fix Fortinet SSO
nekohasekai
committed
5012a1a
Fix wg detour
nekohasekai
committed
e770bb1
boxdd: Fix unsafe permission check
nekohasekai
committed
edd34c4
openvpn: Fix certificate verification compatibility
nekohasekai
committed
b6fda57
Fix security check message
nekohasekai
committed
922cb6e
Improve OpenVPN & OpenConnect interoperability
nekohasekai
committed
4b68b65
build: Refactor workflow
nekohasekai
committed
b54fc9f
boxdd: Fix windows update
nekohasekai
committed
bacdfaf
Fix TCP DNS retry
nekohasekai
committed
bd211e4
Update uTLS to v1.8.7

flyzstu
authored and
nekohasekai
committed
621b47e
Update issue template for new clients
nekohasekai
committed
a2248f4
Add Fortinet hostcheck support
nekohasekai
committed
eb5d82d
release: Improve release workflow
nekohasekai
committed
4445685
Fix Tailscale 4via6 subnet routing
nekohasekai
committed
e9342cb
dns: Cache responses with client subnet
nekohasekai
committed
1faabd8
dns: Probe connection reuse support for TCP transports
nekohasekai
committed
7aa4641
Fix Fortinet SSO again
nekohasekai
committed
33d6956
platform: Fix WIFI state on reload
nekohasekai
committed
1705689
route: simplify rule_set matching semantics
nekohasekai
committed
cbe3e75
dns: Add namespace and parallel support for evaluate
nekohasekai
committed
cd75025
Add JSON schema support
nekohasekai
committed
a537935
release: Fix linux sign
nekohasekai
committed
52e8a6f
Add initial_path option to remote rule-sets
nekohasekai
committed
9af975b
daemon: Improve URLTest
nekohasekai
committed
3e921ae
Fix inconsistent URLTest results
nekohasekai
committed
7c728ed
Fix string type
nekohasekai
committed
0018b4d
Fix TUN dispatcher deadlock
nekohasekai
committed
f24ea3a
Fix openvpn
nekohasekai
committed
df9e71e
release: Fix rpm package format for desktop client
nekohasekai
committed
802f8fd
dns: Fix completed race rule blocked by earlier armed rule
nekohasekai
committed
ca16c0d
wireguard: Fix system device configures DNS for interface
nekohasekai
committed
b66d42f
Fix TLS fragment ACK wait on Windows without TCP estats
nekohasekai
committed
73e7130
Update naiveproxy to v150.0.7871.63-1
nekohasekai
committed
62e832e
Remove client metadata from AnyTLS requests by default
nekohasekai
committed
9429935
Bump version
nekohasekai
committed
115dbec
merge: sync upstream v1.14.0-beta.5
github-actions[bot]
committed
4309f8c