chore: sync upstream v1.14.0-beta.7 - #13

Draft

github-actions[bot] wants to merge 228 commits into

automation/upstream-v1.14.0-beta.7

Commits on Aug 3, 2026

Remove client metadata from AnyTLS requests by default
nekohasekai
committed
cb88d94
Update sing-quic
nekohasekai
committed
256d42a
Fix AnyTLS URLTest results

makt28
authored and
nekohasekai
committed
a29b4ea
Fix tailscale panic with IP control URL
nekohasekai
committed
d763884
Fix tailscale DNS transport missing DNS-only netmap updates
nekohasekai
committed
fd7cd31
tailscale: Fix system interface network category on Windows
nekohasekai
committed
6849e26
Bump version
nekohasekai
committed
17ec3c7

Commits on Aug 4, 2026

tailscale: Fix handle peer DNS query
nekohasekai
committed
3d85cbd
tailscale: Fix preferred_by matching all addresses with exit node
nekohasekai
committed
cc1c891
tailscale: Match bare hostnames in preferred_by when search domains exist
nekohasekai
committed
3b22615
Update sing
nekohasekai
committed
af40956
Add MAC and hostname rule items
nekohasekai
committed
c976771
Add Android support for MAC and hostname rule items
nekohasekai
committed
d33ecce
Add macOS support for MAC and hostname rule items
nekohasekai
committed
72fdf31
documentation: Update descriptions for neighbor rules
nekohasekai
committed
79bc600
Refactor ACME support to certificate provider
nekohasekai
committed
11f1468
Add BBR profile and hop interval randomization for Hysteria2
nekohasekai
committed
cc9c26f
platform: Add OOM Report & Crash Report
nekohasekai
committed
4bd4ab9
Also enable certificate store by default on Apple platforms
nekohasekai
committed
3493f7b
Add evaluate DNS rule action and related rule items
nekohasekai
committed
54b51f2
platform: Fix set local
nekohasekai
committed
542a28e
Fix deprecated warning double-formatting on localized clients
nekohasekai
committed
a59c7ad
oom-killer: Free memory on pressure notification and use gradual interval backoff
nekohasekai
committed
a3bd093
tools: Network Quality & STUN
nekohasekai
committed
38cf7ae
platform: Fix darwin signal handler
nekohasekai
committed
c8e5884
tools: Tailscale status
nekohasekai
committed
70ebe81
Revert "Also enable certificate store by default on Apple platforms"
nekohasekai
committed
96a7ff3
Fix rules lock
nekohasekai
committed
4c219af
Fix darwin local DNS transport
nekohasekai
committed
c0a3ba4
tools: Tailscale status
nekohasekai
committed
9da3879
Un-deprecate `ip_accept_any` DNS rule item
nekohasekai
committed
9803dc7
documentation: Fixes
nekohasekai
committed
547950d
Add `package_name_regex` route, DNS and headless rule item
nekohasekai
committed
9dfeb2c
platform: Wrap command RPC error returns with E.Cause
nekohasekai
committed
e8d3986
Fix lint errors
nekohasekai
committed
48082a7
Add cloudflared inbound
nekohasekai
committed
f146487
documentation: Fix missing update for `ip_version` and `query_type`
nekohasekai
committed
2d460bb
Fix stun test
nekohasekai
committed
71146b0
Fix darwin cgo DNS again
nekohasekai
committed
ac9560b
Fix tailscale error
nekohasekai
committed
d741539
Add optimistic DNS cache
nekohasekai
committed
a2276d7
oom-killer: Record report before reset network
nekohasekai
committed
ad4db95
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
nekohasekai
committed
044bdfc
Standardize hosts path
nekohasekai
committed
13f570c
Add TLS spoof support
nekohasekai
committed
27af95b
Fix legacy rule-set download_detour blocked by empty direct check
nekohasekai
committed
6814631
Reject pure-IP rule-set references without match_response
nekohasekai
committed
6477e9f
Fix use-after-free of pooled value buffers in bbolt Batch writes
nekohasekai
committed
e2a966b
Reject IP literal server name with TLS spoof
nekohasekai
committed
391bcdb
Fix macOS tlsspoof
nekohasekai
committed
db4d150
Scope HTTP/2 fallback and HTTP/3 broken state per authority
nekohasekai
committed
6d8ed0a
Defer implicit default HTTP client fallback to first use
nekohasekai
committed
9790d06
Strip EDNS padding from upstream DNS responses
nekohasekai
committed
8a3f6f7
Fix Apple TLS metadata capture
nekohasekai
committed
dfaea49
Fix tls-spoof
nekohasekai
committed
aa32e39
Add search domain support for Tailscale DNS
nekohasekai
committed
3d8d991
Log DNS optimistic background refresh outcomes
nekohasekai
committed
7bd4453
Fix Tailscale search domain response name mismatch
nekohasekai
committed
9c42b90
Fix goroutine leak in networkquality tool
nekohasekai
committed
7b6732a
Add ACME profile support for IP address certificates
nekohasekai
committed
918f445
platform: Improve oom-killer
nekohasekai
committed
d558d07
Fix darwin cgo DNS again
nekohasekai
committed
3c637bd
Improve UDP batch support
nekohasekai
committed
d7156a5
Add Windows TLS engine
nekohasekai
committed
67addc4
Preserve comments between formatting
nekohasekai
committed
e82a003
Improve oom-killer
nekohasekai
committed
26a7972
ssh: Add cipher, MAC, and key exchange configuration
nekohasekai
committed
db61a58
dns: Add timeout configuration
nekohasekai
committed
6365685
Fix tailscale start dependencies
nekohasekai
committed
0855dee
dns: Add neighbor-based hostname resolution to local server
nekohasekai
committed
fcdd24b
dns: Add preferred_by rule item
nekohasekai
committed
b5b841c
dns: Add mDNS server
nekohasekai
committed
f339ef3
Allow customizing TUN DNS mode and hijack interface DNS by default
nekohasekai
committed
a1436e3
Add more spoof method

macronut
authored and
nekohasekai
committed
2df7a6c
Fix reset network
nekohasekai
committed
b738edb
Add hysteria2 realm service and support
nekohasekai
committed
54a8668
Update hysteria2 realm
nekohasekai
committed
5cacaba
Fix TLS server close
nekohasekai
committed
b75616f
Fix hysteria2 realm server
nekohasekai
committed
3ad842d
Fix lint errors
nekohasekai
committed
e1b9423
oom-killer: Remove log "OOM draft discarded"
nekohasekai
committed
0ad68c1
tailscale: Revert dialer deprecation and remove control_http_client
nekohasekai
committed
66d0f8f
tailscale: Fix handle peer DNS query
nekohasekai
committed
a66c47b
tailscale: Add runtime exit node API
nekohasekai
committed
6e54914
tailscale: Expose more peer info fields
nekohasekai
committed
33f6340
Fix tailscale dns
nekohasekai
committed
08d6955
daemon: Add Tailssh
nekohasekai
committed
a58133e
hysteria2: Add gecko obfs
nekohasekai
committed
48c3f0a
tools: Fix mising cleanup
nekohasekai
committed
9b1ea13
tailscale: Add tailssh server
nekohasekai
committed
f05d6cd
tailssh: fix platform SFTP session teardown
nekohasekai
committed
50c664b
platform: Add tailscale device name and logout
nekohasekai
committed
e8b13dc
platform: Add shell support for iOS
nekohasekai
committed
73fde12
daemon: Split host operations into ManagedService
nekohasekai
committed
ffa438c
Add sing-box API service
nekohasekai
committed
3559a2b
tailscale: Fix auth URL not refreshed after logout
nekohasekai
committed
f03e2df
Fix group status updates broken by API service
nekohasekai
committed
663000b
release: Fix apple release
nekohasekai
committed
125963d
dns: Remove unused files
nekohasekai
committed
e8eaea2
Improve remote rule-set update
nekohasekai
committed
45382cb
Add dashboard support for API service
nekohasekai
committed
6fc3e9f
Fix remote control when Clash server is unavailable
nekohasekai
committed
e869b03
Add USB/IP service
nekohasekai
committed
8975a38
Add USB/IP support for macOS
nekohasekai
committed
aad0a3d
documentation: Add USB/IP server and client
nekohasekai
committed
4691faa
Fix Cloudflared edge discovery ignoring configured resolver
nekohasekai
committed
6cf28bb
Add iOS jailbreak release
nekohasekai
committed
c23d84e
certificate: Replace platform bridge with CGO JNI
nekohasekai
committed
e1ce6b0
platform: Fix missing api version check for usb/ip
nekohasekai
committed
08ee6e0
Fix oom draft flood
nekohasekai
committed
9276c9f
release: Fix upload ios deb
nekohasekai
committed
2946263
Refactor darwin local DNS to raw mDNSResponder call
nekohasekai
committed
11a379e
Write logs to oom report
nekohasekai
committed
a47a5b5
Add age support for report export
nekohasekai
committed
6b0042a
Improve DHCP DNS server initialize
nekohasekai
committed
d300773
Fix linux ping
nekohasekai
committed
e95cc8c
tls: Fix read wait buffer sizing
nekohasekai
committed
dd676d7
dialer: Dial directly when only one interface is available
nekohasekai
committed
c95f742
Add snell protocol
nekohasekai
committed
38c3dc7
Add L3 forwarding support
nekohasekai
committed
4cfe046
Fix local DNS transport on darwin
nekohasekai
committed
cfecd52
Imrpove flow tracking & sniff action
nekohasekai
committed
51312b0
daemon: Release memory to OS on service reload
nekohasekai
committed
be42d62
Add bridge outbound
nekohasekai
committed
c1936a0
Improve bridge
nekohasekai
committed
6bde7ac
Add windows bridge
nekohasekai
committed
01624aa
Improve darwin bridge
nekohasekai
committed
27b8069
Fix bridge MTU
nekohasekai
committed
e46505b
Improve windivert syscall
nekohasekai
committed
d979a38
Fix windows bridge forwarding to connected subnets
nekohasekai
committed
575c3ba
Fix macOS bridge with includeAllNetworks
nekohasekai
committed
b2c0fa5
Fix macOS bridge kernel panic
nekohasekai
committed
7fd87bc
Fix process and neighbor rules not matched in pre-match
nekohasekai
committed
a89e27b
Add hysteria2 realm ip_version and port_mapping options
nekohasekai
committed
1361a39
Add connections to OOM report
nekohasekai
committed
d637b9f
Fix tailscale version
nekohasekai
committed
4ea895b
Add netns and unshare support
nekohasekai
committed
3a8a0b6
Fix netns manager
nekohasekai
committed
b098455
windivert: Verify cached driver against embedded asset before load
nekohasekai
committed
2ffce94
platform: Export tester and reporter
nekohasekai
committed
fecca51
Fix windivert open
nekohasekai
committed
84a0c36
bridge: Raise accept_ra to 2 when enabling IPv6 forwarding
nekohasekai
committed
4a62530
Fix daemon groups
nekohasekai
committed
336019f
platform: Add boxdd
nekohasekai
committed
f07e353
platform: Fix daemon data
nekohasekai
committed
893b5e7
platform: Add http proxy support for Windows
nekohasekai
committed
8a6f063
documentation: Update icon svg
nekohasekai
committed
47b83a7
Fix nfqueue options
nekohasekai
committed
2b8885e
windivert: stabilize Windows driver lifecycle
nekohasekai
committed
5286d16
Fix SetGroupExpand race
nekohasekai
committed
37e0757
Fix tun gso check
nekohasekai
committed
fb04aab
Fix nftables flush
nekohasekai
committed
23e9576
Fix windows bridge
nekohasekai
committed
40cbca2
Add windows build
nekohasekai
committed
f6089e4
boxdd: Fix log format
nekohasekai
committed
128ccc4
boxxx: Add update API
nekohasekai
committed
707396f
boxdd: Add custom working directory support
nekohasekai
committed
9c1f729
tailscale: support Windows SSH user sessions
nekohasekai
committed
3510b37
Update windows build
nekohasekai
committed
f450945
boxdd: Add insecure mode
nekohasekai
committed
04d8e89
Fix start lifecycle
nekohasekai
committed
50926c7
platform: Fix version compare
nekohasekai
committed
e60d25e
Fix oomkiller
nekohasekai
committed
811418d
Fix iOS brdige
nekohasekai
committed
3c0e5c2
Add multiple tags support to rule-sets
nekohasekai
committed
e85d368
boxx: Fix unsafe installation
nekohasekai
committed
f27f10f
refactor: New tun udpnat
nekohasekai
committed
6735a67
Refactor endpoint listen
nekohasekai
committed
8f42e2a
Update Go to 1.25.12
nekohasekai
committed
d8c62fb
Add openvpn and openconnect
nekohasekai
committed
08864d3
Fix bind control for auto redirect
nekohasekai
committed
3612c81
Refactor endpoint in started interface
nekohasekai
committed
49dd7de
Refactor OpenVPN and OpenConnect endpoints
nekohasekai
committed
7c17ad3
Fix SSO support for anyconnect
nekohasekai
committed
196e1a8
Refactor UDP DNS hijack
nekohasekai
committed
4153184
refactor: Async DNS
nekohasekai
committed
6e6240c
Fix DNS route suffix matching
nekohasekai
committed
8194dce
boxdd: Fix linux permission
nekohasekai
committed
94c0c28
Improve network reset
nekohasekai
committed
06215ee
boxdd: Implement linux http proxy
nekohasekai
committed
722f8ee
desktop: Pin dependencies
nekohasekai
committed
22f0a82
Add linux desktop build
nekohasekai
committed
6bc3280
openconnect: Fix Fortinet SSO
nekohasekai
committed
1bfd003
Fix wg detour
nekohasekai
committed
378fa59
boxdd: Fix unsafe permission check
nekohasekai
committed
d753ddd
openvpn: Fix certificate verification compatibility
nekohasekai
committed
34916a4
Fix security check message
nekohasekai
committed
d10d24b
Improve OpenVPN & OpenConnect interoperability
nekohasekai
committed
ede4fe4
build: Refactor workflow
nekohasekai
committed
baa864f
boxdd: Fix windows update
nekohasekai
committed
9610310
Fix TCP DNS retry
nekohasekai
committed
1d28113
Update uTLS to v1.8.7

flyzstu
authored and
nekohasekai
committed
6b6ea71
Update issue template for new clients
nekohasekai
committed
4c0231e
Add Fortinet hostcheck support
nekohasekai
committed
143303c
release: Improve release workflow
nekohasekai
committed
9c96478
Fix Tailscale 4via6 subnet routing
nekohasekai
committed
161dec0
dns: Cache responses with client subnet
nekohasekai
committed
500f837
dns: Probe connection reuse support for TCP transports
nekohasekai
committed
9974c05
Fix Fortinet SSO again
nekohasekai
committed
f1a0dc5
platform: Fix WIFI state on reload
nekohasekai
committed
428976c
route: simplify rule_set matching semantics
nekohasekai
committed
399359b
dns: Add namespace and parallel support for evaluate
nekohasekai
committed
c486852
Add JSON schema support
nekohasekai
committed
f6bc8b0
release: Fix linux sign
nekohasekai
committed
6a48c97
Add initial_path option to remote rule-sets
nekohasekai
committed
940186c
daemon: Improve URLTest
nekohasekai
committed
90bc53e
Fix inconsistent URLTest results
nekohasekai
committed
eaa738d
Fix string type
nekohasekai
committed
1745497
Fix TUN dispatcher deadlock
nekohasekai
committed
04d2efd
Fix openvpn
nekohasekai
committed
889603c
release: Fix rpm package format for desktop client
nekohasekai
committed
66c6c86
dns: Fix completed race rule blocked by earlier armed rule
nekohasekai
committed
b517859
wireguard: Fix system device configures DNS for interface
nekohasekai
committed
213b6be
Fix TLS fragment ACK wait on Windows without TCP estats
nekohasekai
committed
79a9b77
Update naiveproxy to v150.0.7871.63-1
nekohasekai
committed
9cf183c
Remove client metadata from AnyTLS requests by default
nekohasekai
committed
24d212d
Bump version
nekohasekai
committed
c2e44e5
Update tailscale to v1.102.1
nekohasekai
committed
406cd91
tailscale: Fix preferred_by matching all addresses with exit node
nekohasekai
committed
c0edb79
tailscale: Match bare hostnames in DNS server preferred_by
nekohasekai
committed
62095fa
Update quic-go to v0.61.0
nekohasekai
committed
53c73f2
Add hysteria2 chrome parrot support
nekohasekai
committed
2fdd538
Update tailscale usages
nekohasekai
committed
7edf0a0

Commits on Aug 5, 2026

Update gvisor to 20260727.0
nekohasekai
committed
d620bbb
Bump version
nekohasekai
committed
b9dd081
wg: Fix InputPackets exceeding device batch size
nekohasekai
committed
1016e7e
Bump version
nekohasekai
committed
3001f03
merge: sync upstream v1.14.0-beta.7
github-actions[bot]
committed
bad1d12