v5.0.0-rc.8

What's Changed

• anixcore: serve Panabit iWAN nodes by @kalijerry in #55
• chore(release): prepare v5.0.0-rc.8 by @kalijerry in #56

Full Changelog: v5.0.0-rc.7...v5.0.0-rc.8

v5.0.0-rc.7

What's Changed

• fix(xray): look up a limiter only for panel users in rule checks by @kalijerry in #50
• feat(diagnostic): probe Reality targets from the node (reality.probe) by @kalijerry in #51
• feat(realityprobe): try a real REALITY handshake through the target by @kalijerry in #52
• feat(anixcore): run the panel's egress routes on the anixcore core by @kalijerry in #53
• chore(release): prepare v5.0.0-rc.7 by @kalijerry in #54

Full Changelog: v5.0.0-rc.6...v5.0.0-rc.7

v5.0.0-rc.6

What's Changed

• feat(egress): run Control's egress routes on the Xray core by @kalijerry in #47
• feat(diagnostic): run the generic diagnostics on every proxy node by @kalijerry in #48
• chore(release): prepare v5.0.0-rc.6 by @kalijerry in #49

Full Changelog: v5.0.0-rc.5...v5.0.0-rc.6

v5.0.0-rc.5

What's Changed

• Add the anixcore core driver by @kalijerry in #44
• fix(stats): Xray destination statistics count the link's bytes by @kalijerry in #45
• chore(release): prepare v5.0.0-rc.5 by @kalijerry in #46

Full Changelog: v5.0.0-rc.4...v5.0.0-rc.5

v5.0.0-rc.4

What's Changed

• Rename the default branch from dev_new to main by @kalijerry in #41
• feat(stats): report each user's traffic by destination (destinations.v1) by @kalijerry in #42
• chore(release): prepare v5.0.0-rc.4 by @kalijerry in #43

Full Changelog: v5.0.0-rc.2...v5.0.0-rc.4

v5.0.0-rc.2

What's Changed

• feat(node): run every protocol of a node, also two of one type by @kalijerry in #39
• chore(release): prepare v5.0.0-rc.2 by @kalijerry in #40

Full Changelog: v5.0.0-rc.1...v5.0.0-rc.2

v5.0.0-rc.1

What's Changed

• feat(cmd): anix-agent join for node group join tokens by @kalijerry in #36
• chore: rename the Go module to github.com/AnixOps/anix-agent/v5 by @kalijerry in #37
• chore(release): prepare v5.0.0-rc.1 by @kalijerry in #38

Full Changelog: v4.2.0...v5.0.0-rc.1

v4.2.0

What's Changed

• refactor: consume shared agent SDK by @kalijerry in #2
• chore: merge maintenance branches into dev_new by @kalijerry in #3
• feat(sdk): take the Agent contract from Control's SDK module by @kalijerry in #4
• feat(machine-telemetry): accept systemd_services config and collect systemd unit usage (systemd panel 3/7) by @kalijerry in #5
• feat(agent): A2 capability negotiation on the Control SDK (AG-1) by @kalijerry in #6
• feat(agent): mTLS identity — enroll, store, renew, no API key once enrolled (AG-2) by @kalijerry in #7
• feat(agent): configuration from the control stream (AG-3) by @kalijerry in #8
• feat(agent): users from the control stream (AG-4) by @kalijerry in #9
• feat(agent): reports and package reports on the control stream, with spool (AG-5) by @kalijerry in #10
• feat(agent): maintenance, alive list, mTLS artifacts and ack codes on the control stream (AG-5b) by @kalijerry in #11
• feat(forward): Agent forward component — drivers, persisted state, health loop, reports (F3b) by @kalijerry in #12
• feat(agent): O1 installer layout — credential-only config, anixops paths, non-root, gost and signatures in releases by @kalijerry in #13
• feat(agent): agent.diagnostic executor and forward diagnostic checks (F3c) by @kalijerry in #14
• feat(agent): staged upgrades — verify, hand off to the updater, apply with rollback (O4) by @kalijerry in #15
• fix(node): restore the previous node on a failed reload; skip reloads for unchanged configuration by @kalijerry in #16
• chore(release): prepare v4.2.0-rc.1 by @kalijerry in #17
• fix: alive-list race in the node controller; uninstall matches the O1 layout by @kalijerry in #18
• chore(release): fold the Unreleased fixes into v4.2.0-rc.1 by @kalijerry in #19
• test(node): fix the flaky TestCredentialOnlyProxyNodeWaitsForItsCredential by @kalijerry in #20
• test(node): wait for the controller to see maintenance.v1 before the single monitor run by @kalijerry in #21
• release: replace the official signing key (public root) by @kalijerry in #22
• ci: Signing Key Check, a manual workflow that proves the key pair works by @kalijerry in #23
• fix(scripts): the root manager's uninstall keeps data/ and removes gost by @kalijerry in #24
• fix(cmd): uninstall keeps the root install's data/ without --purge by @kalijerry in #25
• chore(release): prepare v4.2.0-rc.2 by @kalijerry in #26
• feat(forward): the experimental anixops relay and its wiring (A3, off by default) by @kalijerry in #27
• chore(release): prepare v4.2.0-rc.3 by @kalijerry in #28
• build: move Agent to Go 1.26.9 and bump x/net to v0.60.0 by @kalijerry in #29
• chore(release): prepare v4.2.0-rc.4 by @kalijerry in #30
• fix(deps): bump circl and utls to clear GO-2026-4550 and GO-2026-4512 by @kalijerry in #31
• ci: pin runners to ubuntu-24.04 by @kalijerry in #32
• chore(release): prepare v4.2.0 by @kalijerry in #33
• test(agent): wait for the issued certificate before asserting it by @kalijerry in #35

New Contributors

• @kalijerry made their first contribution in #2

Full Changelog: v2.5.0...v4.2.0

v4.2.0-rc.4

Security

• The Agent and anixops-relay build with Go 1.26.9 and golang.org/x/net v0.60.0.
  rc.3 was built with Go 1.25 and x/net v0.58.0, and govulncheck reported 73 advisories
  in its Agent binary and 61 in its relay binary (binary mode). Go 1.25 no longer
  receives security fixes. This release also moves github.com/cloudflare/circl to
  v1.6.3 and github.com/refraction-networking/utls to v1.8.2, which fix GO-2026-4550
  and GO-2026-4512. govulncheck in source mode, which counts only the advisories the code
  can reach, reports 4 for the Agent: GO-2026-5809 and GO-2026-5288 in
  github.com/apernet/hysteria/core/v2 v2.6.4, and GO-2026-5676 and GO-2025-4233 in
  github.com/quic-go/quic-go v0.56.0. These four are not fixed in this release. The
  Agent pins quic-go to 0.56.0 and qpack to 0.5.1, because the xray, hysteria2 and
  sing-box builds compile only against those versions. The relay reports none in source mode.

What's Changed

• build: move Agent to Go 1.26.9 and bump x/net to v0.60.0 by @kalijerry in #29
• chore(release): prepare v4.2.0-rc.4 by @kalijerry in #30
• fix(deps): bump circl and utls to clear GO-2026-4550 and GO-2026-4512 by @kalijerry in #31

Full Changelog: v4.2.0-rc.3...v4.2.0-rc.4

v4.2.0-rc.3

What's Changed

• feat(forward): the experimental anixops relay and its wiring (A3, off by default) by @kalijerry in #27
• chore(release): prepare v4.2.0-rc.3 by @kalijerry in #28

Full Changelog: v4.2.0-rc.2...v4.2.0-rc.3