This build adds support for connecting to OpenZiti controllers and routers through an HTTP proxy. It also brings in fixes and improvements from the latest OpenZiti SDKs: - correctly handle authentication policies that require totp - fixes authentication failing/hanging when mfa is enabled for an externally authenticated identity - improved error reporting when external authentication fails - OIDC reconnect/refresh improvements - enable keepalive and nodelay on transport connections SDK versions: - ziti-tunnel-sdk-c: v1.18.3 - ziti-sdk-c: 1.18.1 - tlsuv: v0.41.4

This build adds support for enroll-to-token and enroll-to-cert.

This build updates to the latest OpenZiti SDKs for the following fixes: - openssl: fixes picking the wrong cert from the chain - improve session certificates lifecycle Dependency versions: - ziti-tunnel-sdk-c v1.11.2 - ziti-sdk-c 1.11.7 - tlsuv v0.41.1/OpenSSL 3.6.1 27 Jan 2026

This version brings in the latest OpenZiti SDKs for fixes to authentication failures: - identities with controllers that use legacy authentication would frequently be disconnected - refreshing authentication with an external provider was not possible after the token expired

This version includes bug fixes and enhancements from the latest OpenZiti SDKs: * fixes several OIDC issues: refresh failures, memory leaks, and potential crashes * fixes issue where a new terminator is created with every update to hosted service configurations * do not consider case when comparing allowed hostnames * allows (re)start of OIDC authentication at any time * implements just-in-time enrollment with external JWT if allowed by controller * fixes potential high cpu/battery usage * fixes API session refresh failure when connected with edge router versions 1.6-1.8 * fixes potential crash when hosted services become unavailable * respects "sticky" terminator policy Dependency updates: * ziti-sdk-swift v0.41.43 * ziti-tunnel-sdk-c v1.10.10 * ziti-sdk-c v1.10.10 * tlsuv v0.40.10 * vcpkg@2025.12.12 * abseil 20250512.1 --> 20250814.1 * openssl 3.6.0#2 --> 3.6.0#3 * protobuf 5.29#2 --> 5.29#3

This version adds a menu option to enable additional logging for diagnosing controller/router connectivity issues.

This version adds support for externally authenticated identities.

This version updates the OpenZiti SDKs to the latest versions: - ziti-sdk-swift@0.41.11 - ziti-tunnel-sdk-c@v1.6.0 - ziti sdk-c@1.6.5 The following issues have been addressed: - supports automatic identity certificate renewal - reduces battery consumption - fixes crash when more than 1024 files/sockets are open - fixes potential crash when an identity is rapidly disabled/enabled - fixes potential crash when receiving high volume of UDP packets - fixes an issue that prevented identities on HA networks from connecting reliably - fixes an issue that resulted in the "enabled" checkbox becoming grayed out when an identity was disabled

This version fixes a bug that caused Ziti Mobile Edge to become disconnected when waking from sleep when there are disabled identities.

We fixed an issue that could cause Ziti Mobile Edge to become unresponsive.

This version fixes a bug that prevented Ziti Mobile Edge from hosting services when connecting to an OpenZiti controller at version 0.31.0 or older.

This version improves reliability when hosting connections, and fixes a bug that caused high CPU usage in some scenarios.

This version improves reliability when hosting connections, and fixes a bug that caused high CPU usage in some scenarios.

This version fixes an issue that could cause Ziti Mobile Edge to become unresponsive after sleep/wake and/or underlay network changes (e.g. wifi to cellular).

This version includes OpenZiti SDK updates.

DNS fixes, and update to the latest OpenZiti SDKs.

This version of Ziti Desktop Edge fixes an issue that could be seen when edge routers are removed from the network. It also addresses an issue that prevented the upstream DNS server from being used when "Override Fallback DNS" is checked in the configuration window.

This build improves error handling when DNS queries are proxied to the hosting tunneler.

Version 2.37 includes the latest OpenZiti SDKs.

This build addresses connection instability, particularly after edge routers have disconnected.

This build addresses issues that could cause connection instability.

* Improve performance by performing DNS queries in worker threads * Fixed bugs in re-bind logic that could prevent reconnecting to edge routers

- Update to latest OpenZiti SDKs - Save identity CA bundles when controller sends new CAs - Fixed a bug that was introduced with v2.32 that invalidated configurations when the controller sends CA updates

Update to latest OpenZiti SDKs

MFA improvements