Shadowrocket

* feat(protocol): add Sudoku proxy protocol support and optimize data-path forwarding to reduce memory allocations and buffer copying * feat(dns): support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules * feat(tailscale): migrate login to TS2021, support subnet routing and exit nodes, and introduce low-power tunnel suspension on demand * feat(protocol): support Clash SSH/packetaddr subscription imports * feat(macos): add menu bar routing controls and quick server configurations for macOS * feat(group): add an independent ping-based auto-sort option for policy groups * perf(transport): handle KCP backpressure, harden WireGuard/Hysteria packet security, and restore full upload throughput on QUIC transports * fix(vpn): prevent tunnel startup hangs, preserve local device connectivity, and prevent stale speedtests from resetting VPN states * fix(dns): route host resolutions and QUIC endpoints through tunnel resolver, and reuse H2 addresses for H3 upgrades * fix(tailscale): advertise disco keys for direct paths, respect custom DERP TLS verification, and fix battery drain when VPN is disconnected * fix(rule): fix remote rule set refreshes, preserve quoted rewrite tokens during parsing/export, and guard compiled policy group updates * fix(system): support WebKit scoped globals and fetch polyfills in scripts, and apply tombstone-based iCloud manifest to prevent configuration rollbacks * fix(system): prevent WKWebView/JavaScriptCore teardown crashes and limit proxy stream memory growth to prevent OOM Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* feat(tailscale): add global Tailscale tunnel, local MagicDNS resolution, and UI support for peer device, RTT, and config management * perf(tailscale): optimize Tailscale power efficiency and stability, scheduling WireGuard ticks on demand and improving UDP socket recreation * feat(masque): add MASQUE outbound proxy (H3 & H2 transport) with custom SNI/URI support, keepalive configuration, and logger gating * feat(tls): add TLS ClientHello fingerprinting support and profile selection UI * perf(network): optimize connection management for Mux, XHTTP, and Chain Sockets, supporting HTTP/2 graceful stream shutdown and resolving SOCKS5 UDP relay failures in chained proxy setups * fix(dns): restore Bonjour and DNS-SD service discovery over VPN, centralize query retry scheduling, and optimize IPv6 PTR local resolution * fix(ssh): avoid blocking multiplexed queues during handshake and correct UDPGW length calculations * fix(protocol): enhance Mieru user hints and Clash parsing, correct Hysteria 2 stream closure, fix AmneziaWG magic header processing, and guard OpenConnect config updates * perf(system): rewrite IPC message channel and encrypt status replies, fix WebKit runtime battery drain on iOS, unify HUD toasts, and add macOS/Catalyst certificate instructions * chore(i18n): clean up and merge localized strings in Localizable.strings Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* feat(mieru): add support for Mieru traffic pattern obfuscation and fragmented timing * perf(tester): optimize concurrent url-test scheduling and interim updates for large groups * perf(tunnel): centralize DNS retry scheduling and add backoff retry for proxy binding * perf(udp): correct UDP rule rematch priority after DNS and centralize relay socket cleanup * perf(ssh): tune channel window adjustment * fix(udp): correct UDP rule rematch after DNS resolution * fix(rule): skip IP matching when IP is empty * fix(tuic): retry authenticate when QUIC cannot write immediately * fix(UI): fix table footer view layouts in macOS and QR scanner preview transitions Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* feat(vless): enable compact stream buffers on iOS/tvOS to reduce concurrent memory usage * perf(tester): optimize group tester switch logic to compare current round results * perf(hysteria): stabilize upload pacing and congestion control for HYBBR * fix(dns): handle transient socket backpressure gracefully in DNS over QUIC/HTTP3 * fix(http3): fix egress write stalls and prevent assertions on HTTP/3 connections * fix(fallback): prevent application crash when falling back to string policy group placeholders * fix(xhttp): allow NSNumber values in options parsing to preserve numeric parameters Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.