* chore(server): display VLESS encryption in plain text * feat(http3): implement HTTP/3 support and optimize data reading * feat(naive): add UDP over TCP (UoT) support * fix(dns): resolve local FQDN query issue * fix(group): prevent crash from accessing deallocated weak references * fix(http2): resolve NaiveProxy padding length parsing issue * fix(log): resolve domain rejection with pre-matching issue * fix(mux): improve idle session cleanup logic * fix(mux): resolve session asynchronous handshake issue * fix(naive): resolve compatibility issues with older NaiveProxy HTTPS proxies * fix(scene): resolve default item issue in Scene * fix(server): resolve Hysteria URL parsing issue * fix(UI): resolve server obfuscation settings saving issue * fix(vless): resolve VLESS encryption issue when using Mux * fix(websocket): resolve implicit truncation issue in WebSocket * fix(widget): resolve server widget display issue * fix(wireguard): resolve WireGuard obfuscation editing issue

* chore(grpc): Resolve issues with custom gRPC headers. * chore(quic): Adjust QUIC max-idle and keep-alive timeouts. * chore(server): Include proxy pass failures in the server lookup log. * chore(server): Add show/hide function for subscription servers. * chore(shadowsocks): Optimize read packet handling for Shadowsocks UDP over TCP. * feat(AmneziaWG): Implement Junk Manager and refactor obfuscator. * feat(anytls): Implement session pool with idle cleanup. * feat(grpc): Support chunked gRPC data transmission to prevent stream pauses. * feat(intents): Enable VPN toggle/start/stop intents to run quietly. * feat(kcp): Add AES-128-GCM support for kcptun. * feat(script): Add WebView script engine support. * feat(server): Add duplicate handling strategies when adding servers. * feat(server): Support specifying HTTPS DNS for resolving subscription link domains. * feat(shortcuts): Add shortcuts for toggling TUN mode. * feat(vless): Add support for VLESS Post-Quantum encryption. * fix(anytls): Fix protocol handling bugs in AnyTLS sessions. * fix(backend): Remove recursive lock calls in TLS settings caching. * fix(backend): Resolve Naïve HTTPS handshake issues. * fix(config): Resolve configuration rule file synchronization issues. * fix(config): Fix crash during file synchronization and optimize checksum calculation. * fix(geoip): Resolve task interval issues. * fix(group): Resolve proxy group policy case-sensitivity issues. * fix(http2): Fix connection teardown when HTTP/2 sessions are idle. * fix(intents): Resolve issues with App Intents extension execution. * fix(intents): Resolve subscription updates over DoH. * fix(kcp): Fix null pointer dereference in the write loop. * fix(module): Resolve module installation issues. * fix(rule): Fix potential crashes caused by dangling pointers in rule results. * fix(script): Fix crash when script code is empty. * fix(script): Resolve script engine saving issues. * fix(script): Fix use-after-free (wild pointer) crash in script request tasks. * fix(script): Resolve potential wild pointer crash in script timer tasks. * fix(server): Resolve Easy Mode server update issues. * fix(server): Fix server chain lookup issues. * fix(server): Resolve ECH parsing issues in server URLs. * fix(server): Fix ShadowsocksR URL parsing issues. * fix(server): Resolve subscription server import issues. * fix(server): Fix saving issues for VMess xHTTP mode. * fix(server): Resolve YAML and configuration import issues. * fix(server): Fix expiration date issues for subscription servers. * fix(task): Fix background task completion and scheduling issues. * fix(task): Resolve background task execution timing issues. * fix(tcp): Prevent `os_unfair_lock` corruption crashes during deallocation. * fix(test): Resolve test result score calculation issues. * fix(TUIC): Fix TUIC crash due to retransmission of released stack data. * fix(UDP): Resolve heap buffer overflow in UDP socket packet generation. * fix(UI): Prevent crash in Code View when the title is nil. * fix(UI): Resolve permissions request logic issues. * fix(vless): Resolve issues with XTLS and Mux. * fix(vmess): Fix heap corruption in VMess backend decryption. * fix(websocket): Resolve VLESS WebSocket response parsing issues. * fix(widget): Resolve widget intent user activity handling issues. * fix(xhttp): Improve stability and connection reuse for HTTP/2. * fix(xhttp): Resolve HTTP/3 stream-up issues. * fix(xhttp): Fix HTTP/2 default mode issues in xHTTP. * fix(xudp): Resolve XUDP over XTLS-Vision issues. * perf(backend): Cache backend TLS settings using associated objects. * perf(kcp): Optimize update logic and timer management to reduce CPU overhead. * perf(mux): Optimize Mux socket performance and flow control. * perf(test): Adjust test result score calculator.

* fix(config): resolve invalid hyphen hostname parse issue * fix(intents): resolve intents extension execute issue * fix(macos): resolve statusItem button title color issue * fix(server): resolve server add by url scheme issue * fix(test): resolve server test task cancel issue * fix(mux): resolve VLESS/VMess mux frame parse issue * fix(websocket): resolve VLESS websocket response parse issue

* Feature(Config): Implemented automatic background updating for modules, ensuring components stay current without manual intervention. * Feature(UI): Added an App Intents Extension (e.g., for Siri/Shortcuts integration) to enable new voice and automation commands. * Fix(Backend): Resolved a critical issue concerning the handling of VLESS/VMess early data, improving connection reliability. * Fix(DNS): Corrected a bug where DNS over HTTPS (DoH) fallback mechanisms failed to execute properly. * Fix(GeoIP): Resolved an issue with the incorrect metadata database type in the GeoIP component. * Fix(Rule): Resolved an IP-CIDR match crash issue that occurred under specific routing conditions. * Fix(Rule): Corrected the MITM exclude hostname order, ensuring priority rules are applied correctly. * Fix(Rule): Fixed an issue where the rule resource URL update result was not correctly processed or displayed. * Fix(Server): Fixed a bug where the TLS 'Allow Insecure' setting was not correctly applied to server configurations. * Fix(Server): Resolved an issue with URL query parameter values not being encoded correctly during server operations.

What's New: Stability & Permissions This update significantly improves the reliability of the rule engine and introduces user controls for system permissions. * Core Stability Fix: Fixed a critical bug where the rule matching context could be prematurely freed during complex, nested asynchronous operations (involving rules, DNS lookups, and threading), preventing crashes and ensuring accurate routing. * Performance: Optimized the logical rule matching condition for faster execution. * User Control: Added new configuration switches to manage application permissions for Location, Pasteboard, and Notifications, giving you more control over your privacy.

What's New: Major Stability & Crash Fixes This is a critical stability update. We have resolved numerous race conditions and crashes to ensure a more robust and reliable experience across all platforms. * Critical Stability: Fixed multiple concurrency issues causing crashes in proxy groups, server management, MUX sessions, and ping timers. * Prevented Crashes: Resolved crashes caused by stack overflow (by limiting recursion depth), memory corruption (in proxy groups), and SIGABRT (in HTTP parser). * Networking Fixes: Resolved the Shadowsocks UDP relay issue and fixed a WireGuard session release bug. * Performance: Optimized rule matching and policy group interval parsing for faster performance.

What's New: Stability, macOS, and Reliability This update delivers a large number of bug fixes and optimizations, focusing on cross-platform stability and core features. - macOS Experience Enhanced: * Fixed critical UI bugs on Mac, including the broken multiple selection in server tables and issues with the menu bar and Dock icon. * Resolved system symbol display issues for earlier macOS versions. - Core Protocol Stability: * Fixed the Hysteria datagram session closure. * Improved XHTTP reliability by resolving conflicts with TLS fragmentation and fixing a packet issue. - Rules & Configuration: * Fixed various issues with Rule parsing, including backslashes in rewrite rules and handling of SSID/DNS case matching. * Resolved all known issues with GeoIP database importing and reloading. * Optimized module file read/write for better performance and corrected an async save bug. - UI & Other: * Added an alternate classic icon option.

What's New: Stability & Performance - Fixed Critical VPN Bugs: Resolved a major issue causing the VPN connection to stop unexpectedly. - Networking Reliability: Fixed issues with TLS parsing and Clash TLS fingerprint handling for stronger connections. - Rule & Automation Fixes: Restored Wi-Fi Scene Rules by fixing the SSID fetch issue. Corrected QUIC protocol rule matching. - Performance: Made server speed testing significantly faster. - Compatibility: Fixed Shortcuts failing to run and addressed UI issues on iOS 26.

* Critical Fixes: Resolved major issues with Shadowsocks UDP relay stability and fixed a bug that caused the VPN connection to unexpectedly stop. * Network & Rules: Improved handling for IPv6-only DNS scenarios and fixed a crucial bug in the QUIC protocol rule matching. * UI Refresh: Added a Search button to the navigation bar and refined default font sizes for a cleaner look.

We've focused on improving the app's core stability, security, and performance with a significant number of bug fixes and optimizations. - Key Updates: * Improved Stability & Reliability: We've resolved several critical issues to make your connections more stable and reliable. This includes fixes for stream closure and * retransmission issues in the QUIC protocol, ensuring seamless data transfer. * Enhanced Network Compatibility: The app now works flawlessly on IPv6-only networks. We've also added better support for various network protocols and address formats, * including IP4P, and improved URL handling. * Performance & Efficiency: We've optimized the app's performance by refining logical rule processing, improving the UDP handling for Shadowsocks, and enhancing the * efficiency of our debug logs. * UI & Usability Improvements: Enjoy a better user experience on macOS with corrected text selection. We've also enabled the new system-wide "Find" feature on text views and * refined the overall look and feel. * New Protocol Support: We've added support for modern network protocols, including new congestion control for Hysteria and the latest TLS fingerprints for enhanced security. * Bug Fixes: A wide range of other issues have been fixed, including problems with email composition, server URL handling, and various protocol-specific parsing and configuration bugs.

- What's New * Mocking - Map Local (Enhancement): Further refined the "Map Local" feature to ensure reliable mapping even when dealing with empty local data. * Rule Management: Batch Rules Deletion: Added the ability to delete multiple configuration rules at once, streamlining your workflow. * SSH Tunneling: Added a UDP Gateway feature for SSH, enabling the tunneling of UDP traffic over an SSH connection. - Bug Fixes * Clash Protocol: * Fixed an issue with parsing `obfs-password` in Hyteria2 YAML configurations. * Corrected the parsing of `ss-opts` for Trojan servers. * Configuration Handling: * Resolved parsing issues for "map local" rules defined within modules. * Ensured correct resolution from the hosts file even when global routing is set to proxy. * DNS: Corrected the `NXDOMAIN` flag in DNS answers to accurately reflect non-existent domains. * HTTP & TCP: * Resolved general HTTP message parsing failures. * Fixed an issue with the order of processing pending HTTP request data over TCP, improving reliability. * Corrected HTTP request path building when query strings are present. * Hysteria Protocol: Fixed an issue with parsing Hysteria server URLs that include embedded username and password credentials. * SSL/TLS: * Resolved a memory leak related to SSL context objects. * Fixed a memory release issue concerning TLS contexts in the backend. * Implemented an LRU cache for SSL sessions, improving performance and memory management. * Statistics: Resolved an issue with asynchronous saving of statistics data to the database, ensuring data reliability. * Task & Timer: * Resolved a critical crash that occurred during the submission of background tasks. * Fixed a potential memory leak associated with dispatch timers. * XHTTP Protocol: Corrected issues with setting up and initializing XHTTP server chains. * XTLS Protocol: Fixed an issue with packet number generation in the XTLS Vision writer.

* New Features & Improvements - Mocking - Map Local: Introduced a new "Map Local" feature, allowing you to serve responses directly from local files or custom data for specific requests. This greatly enhances development and testing workflows. - Module Management: Added support for batch deletion of modules, making it easier to manage and clean up multiple modules simultaneously. * Bug Fixes - Background Tasks: Resolved a critical crash that occurred during the submission of background tasks via BGTaskScheduler, improving app stability. - SSL/TLS: Fixed a memory management issue related to SSL/TLS session reference counts, preventing potential leaks and crashes.

Bug Fixes: * WireGuard Connection Optimization: Fixed an issue where WireGuard connections might fail to bind to the correct network interface. * QUIC Traffic Rule Matching Improvement: Resolved an issue where domain-based (SNI) rules might not correctly apply to QUIC (UDP) traffic, ensuring relevant network policies are accurately enforced.

New Features & Enhancements: * Added HTTP body rewriting support. * Added HTTP header rewriting support. * Added XHTTP transport support. Bug Fixes: 1: Core / Networking: * Resolved AnyTLS session read maximum length issue. * Fixed Brook WebSocket parsing issue. * Addressed Clash ECH configuration parsing issue. * Corrected DoH H3 fallback issue. * Fixed DoH over proxy write issue. * Resolved interface-only IPv6 change issue. * Fixed network usage reporting issue. * Corrected server chain case-insensitive issue. * Fixed server URL ECH issue. * Resolved TCP stream delay match issue. * Fixed WireGuard includeAllNetworks issue. 2: Configuration & Proxy Management: * Fixed config file editing issue. * Corrected config proxy server parsing issue. * Fixed module add and reload issue. * Resolved proxy policy parsing issue. * Fixed rule add and update issue. * Fixed server group update issue. * Resolved subscribe server proxy pass issue. 3: Scripting & Scene: * Fixed same script URL fetch issue. * Resolved scene SIM card issue. * Fixed script request early response issue.

* Added DOMAIN-WILDCARD rule type * Fixed AnyTLS padding update issue * Fixed Clash YAML AnyTLS parse issue * Fixed fake IPv4 Maped parse issue * Fixed IPv6 route address issue * Fixed Server HTTP URL parse issue * Fixed Shadowsocks URL parse issue * Fixed Socks URL parse issue * Fixed TLS cert pin SHA256 verfy issue * Fixed STUN IPv6 address parse issue * Fixed TLS reality set issue * Fixed UDP IPv4 Maped issue

* Added AnyTLS protocol supports * Fixed Clash YAML parse issue * Fixed DNS over proxy issue * Fixed DNS over QUIC TLS cert verify issue * Fixed DNS over TLS close issue * Fixed proxy stream close issue * Fixed proxy-dns-server parse issue * Fixed server remark parse issue * Fixed server URL parse issue * Fixed UDP tunnel DNS resolve issue

* Fixed subscribe URL parse issue

* Fixed $network.wifi.ipv6 issue * Fixed Clash YAML bool parse issue * Fixed config file comment parse issue * Fixed config remote resource update issue * Fixed current server reload issue * Fixed DEST-PORT parse issue * Fixed DNS over chain proxy issue * Fixed domain trie wildcard search issue * Fixed geoip task update issue * Fixed group server emoji flag issue * Fixed host DNS rule match sort issue * Fixed HTTP proxy response fail issue * Fixed HTTP2 grpc parse issue * Fixed hysteria datagram write issue * Fixed hysteria handshake timeout issue * Fixed hysteria HTTP3 setup issue * Fixed hysteria URL parse issue * Fixed IPv6 transition count issue * Fixed kcptun session write issue * Fixed logical rule IP-ASN parse issue * Fixed logical rule space parse issue * Fixed MiTM parse debug issue * Fixed module arguments parse issue * Fixed mux session read ack issue * Fixed proxy group test time issue * Fixed rule config check issue * Fixed script argument edit issue * Fixed script cron duration limit issue * Fixed separated list value edit issue * Fixed server dialer-proxy parse issue * Fixed server URL parse issue * Fixed shadowsocks URL parse issue * Fixed shortcut toggle VPN issue * Fixed subscribe server folde issue * Fixed subscribe server icon animate issue * Fixed subscribe server update issue * Fixed table view focus issue * Fixed TLS allow insecure with hpkp issue * Fixed Trojan URL parse issue * Fixed URL request user agent issue * Fixed VPN on demand rule parse issue * Fixed widget server select issue

* Fixed Clash YAML cipher parse issue * Fixed config file comment parse issue * Fixed default server reset issue * Fixed hijack DNS rule parse issue * Fixed KCP session flush issue * Fixed net stats update issue * Fixed server plugin UDP relay issue * Fixed Shadowsocks plugin UDP relay issue * Fixed Shadowsocks TLS parse issue * Fixed socks5 auth method issue * Fixed test stream WebSocket close issue * Updated Shadowsocks UDP over TCP protocol

* Fixed VPN profile install issue

* Added debug log keyword search * Added widget custom colors supports * Fixed DNS over HTTP2 upgrade HTTP3 issue * Fixed DNS query from server issue * Fixed domain alias lookup issue * Fixed GeoIP database update time issue * Fixed global routing method update issue * Fixed GRPC service name parse issue * Fixed haptic feedback issue * Fixed HTTP2 proxy headers submit issue * Fixed HTTPUpgrade path parse issue * Fixed Hysteria session datagram write issue * Fixed kcptun custom nocongestion issue * Fixed local network access issue * Fixed local server context menu issue * Fixed network IPv6 change issue * Fixed proxy URL host parse issue * Fixed server TLS hpkp set issue * Fixed shadowsocks 2022 identity auth key issue * Fixed socks5 auth method issue * Fixed subscription server update issue * Fixed TUIC session datagram write issue * Fixed tvOS config file select issue * Fixed tvOS table view focus issue * Fixed UDP socket relay close issue * Fixed VPN on demand rule issue

* Fixed HTTP script failure issue

* Fixed background task execute issue * Fixed ce.rt install issue * Fixed dark mode issue * Fixed DNS over HTTPS upgrade HTTP3 issue * Fixed domain trie wild match issue * Fixed easy mode group speed test issue * Fixed GitHub blob URL parse issue * Fixed Hysteria session reconnect issue * Fixed invalid domain resolve issue * Fixed IP-ASN rule order issue * Fixed module comment parse issue * Fixed packet tunnel network settings reload issue * Fixed subscription JSON array parse issue * Fixed TCP stream URL match delay issue * Fixed test server timeout issue * Fixed third app open URL issue * Fixed TLS ALPN edit issue * Fixed tvOS certs and keys sync issue * Fixed VLESS fragment packets issue * Fixed VLESS fragment parse issue * Fixed VPN on demand issue * Fixed WebSocket close issue * Fixed WebSocket request parse issue * Fixed widget control update issue * Fixed widget view server select issue

* Fixed ControlWidgetToggle icon issue * Fixed iOS 17 widget issue * Fixed VMess UDP packet read issue * Fixed websocket close fallback issue

* Fixed $httpAPI v1/policies issue * Fixed cloak websocket host issue * Fixed DNS over HTTP3 write issue * Fixed DNS over QUIC handshake issue * Fixed easy mode group items issue * Fixed gRPC host setup issue * Fixed HTTP proxy URL replace IP issue * Fixed Hysteria invalid IPv6 URL parse issue * Fixed logical rule domain resolved issue * Fixed logical rule user-agent match issue * Fixed proxy stream UDP relay issue * Fixed script rule match issue * Fixed simple host IPv6 resolve issue * Fixed subscribe server update completion issue * Fixed TCP stream request MITM match issue * Fixed VMess UDP packet encoding issue * Fixed websocket backend close wait issue * Fixed WiredeGuard UDP forward checksum issue