Moondrop 0.7.3 — Privacy and routing options

Moondrop 0.7.3 adds optional privacy and routing controls while keeping the simple application proxy as the default.

• Added optional full-device tunnel and strict disconnect blocking controls in Settings → Privacy & routing. Linux routing is available; Windows and macOS backends are experimental and need further real-device traffic testing.
• Added privacy choices for server contact prompts, one-server connection attempts, approximate country lookup, manual country preference, and saved profile protection.
• Reduced direct testing of public proxy feeds, validated remote endpoints, and improved cached connection startup for censored networks.
• Added signed release manifests for desktop updater verification, dependency inventories, build provenance, and expanded security checks.
• Improved Android VPN, storage, and updater code. This release does not include an Android APK; APK signing requires the publisher's Android signing key.

Downloads include Linux x64 portable ZIP, Windows x64 installer, macOS Intel and Apple Silicon disk images, and the portable JAR. Java is bundled in the native Windows and macOS installers. The installers are not code-signed or notarized; this prerelease may trigger platform security warnings.

Verify downloaded release files using release-manifest.txt and release-manifest.sig. Build provenance is attached to CI-produced desktop artifacts; verify it with gh attestation verify ARTIFACT --repo Sipper1236/moondrop.

Moondrop 0.7.2 — More servers

Adds V2RayAggregator and Epodonios subscription feeds alongside the existing sources.

A live import check found 1,739 additional unique compatible profiles, for 21,365 total in that snapshot. Counts change as public feeds update. This is a compatible-profile count, not a count of tested working servers.

Existing filtering still excludes plaintext HTTP/SOCKS, unsupported protocols/ciphers/transports, and TLS profiles that disable certificate verification. Duplicates share the existing connection identity and measurement cache. Saved servers appear first; refresh loads the expanded catalog in the background. Quick Connect verifies candidates before connecting.

Install the download for your platform, then refresh locations. Existing settings and cached measurements are retained. Windows and macOS installers include Java; portable downloads require Java 17+.

Source additions: https://github.com/mahdibland/V2RayAggregator and https://github.com/Epodonios/v2ray-configs. No upstream source code or static credentials are bundled.

Moondrop Android 0.1.1 — More servers

Adds V2RayAggregator and Epodonios subscription feeds to Moondrop Android.

A live desktop-parser import check found 1,739 additional unique compatible profiles beyond the existing feeds. The Android parser uses the same protected protocol rules. Counts vary and do not imply every public server is currently online.

Download Moondrop-0.1.1-Android.apk and install it over 0.1.0. It uses the same signing key and preserves your settings, saved catalog, and measurements. Open Moondrop and refresh locations to load the expanded catalog. Android 8.0+; no Java installation required.

Filtering, encrypted connection validation, and cached measurements remain enabled. Unsupported and unencrypted profiles are excluded. This update adds sources; it does not add the desktop-only features discussed previously.

GPL-3.0-or-later. Official sing-box 1.14.3 is built from pinned commit 7054cac5124465ffdb145870d7c01885566711b1 with Moondrop's bridge. Corresponding source and build instructions: https://github.com/Sipper1236/moondrop/tree/android-v0.1.1/android. Upstream core source: https://github.com/SagerNet/sing-box/tree/7054cac5124465ffdb145870d7c01885566711b1. Dependency notices: THIRD_PARTY.md.

Signing certificate SHA-256: 8b9adde046750ac8df0a5f95850459f2cfe29b0c42305ce354ab98a872f5e3cb.

Moondrop Android 0.1.0

Moondrop is now available on Android 8.0 and newer.

Download Moondrop-0.1.0-Android.apk, open it on your phone, allow installation from that source if prompted, then open Moondrop and approve Android's VPN request when connecting. No Java installation is required.

• Dark mint native Java interface with a large Connect button, country flags, search, and protocol labels.
• Cached server profiles and seven-day quality measurements; feeds refresh in the background.
• Quick Connect compares working candidates and verifies encrypted HTTPS before connecting.
• Encrypted Shadowsocks, TLS/REALITY VLESS, Trojan, Hysteria 2, and TUIC; unencrypted proxies excluded.
• Android VPN routing, foreground Disconnect control, optional Advanced mode and protocol filters.

Universal APK: ARM64, ARMv7, and x86_64. Signed with Moondrop's persistent Android key so future signed releases can update this installation.

Validation: Java backend tests and Android lint; Android 15 emulator tests for cached UI/settings, encrypted native round trips and restart, and real TUN traffic from another app UID through a controlled Shadowsocks fixture. Physical phone Wi-Fi/cellular handovers and battery restrictions still need testing. Public server availability varies. On a fresh installation, internet is required to fetch the first catalog. Update Android by installing a newer APK from this repository.

Built from this release's source with official sing-box 1.14.3, pinned to 7054cac5124465ffdb145870d7c01885566711b1, plus Moondrop's GPL bridge. Corresponding source and reproducible build instructions: https://github.com/Sipper1236/moondrop/tree/android-v0.1.0/android. Upstream source: https://github.com/SagerNet/sing-box/tree/7054cac5124465ffdb145870d7c01885566711b1. GPL-3.0-or-later; dependency details in THIRD_PARTY.md.

Android signing certificate SHA-256: 8b9adde046750ac8df0a5f95850459f2cfe29b0c42305ce354ab98a872f5e3cb.

Desktop downloads remain under v0.7.1.

Moondrop 0.7.1

Moondrop 0.7.1 shows saved servers immediately instead of waiting for the feeds.

• Restores the local server list together with its cached latency and download measurements on startup.
• Refreshes feeds on a separate background worker, keeping Connect available for saved servers.
• Keeps the saved list and speed measurements if refresh fails, with a visible saved-server status.
• Saves complete protected server profiles locally so they can reconnect when the feed sites are unavailable. On macOS/Linux the cache is owner-only; Windows uses user-profile permissions. Private cache files are never bundled in downloads.
• Speed checks retain their existing seven-day cache lifetime; fresh measurements do not need to be repeated.

Upgrade note: versions before 0.7.1 cached measurements but not the server list. One successful refresh populates the new list cache; subsequent launches can display it immediately.

Validation: 141 local tests passed with no skips, including real encrypted connections and cached-startup/controller checks under delayed and failed feeds.

Windows EXE and macOS DMGs include Java. Portable ZIP/JAR require Java 17+. Installers remain unsigned; macOS packages are not notarized.

Builds and native encrypted-connection checks passed on Linux, Windows x64, macOS Apple Silicon, and macOS Intel. Windows and Mac bundled-runtime updater checks also passed.

Moondrop 0.7.0

Moondrop 0.7.0 makes connecting clearer and adds an optional Advanced mode.

• One large Connect button becomes Cancel while connecting and Disconnect when connected.
• First-run testing shows working servers and progress. Connect can use a fresh working result before download testing finishes.
• Clearer connection stages, automatic fallback after failed verification, and actionable retry/retest errors.
• Simple server rows show country flags, protocol, latency and test age. Expand server details for protection and measurements.
• Settings → Advanced mode reveals protocol switches, local proxy controls, detailed metrics and engine activity. The setting persists; switching it off preserves preferences and current connections.
• Copy diagnostics includes versions, counts and a broad error category, excluding credentials, server addresses, paths and raw logs.
• System proxy remains enabled by default on macOS and Windows. Linux uses the local HTTP/SOCKS5 proxy at 127.0.0.1:17890.

Windows EXE and both macOS DMGs include Java. The portable ZIP and JAR require Java 17 or newer. macOS and Windows installers remain unsigned; macOS builds are not notarized.

Validation: 134 local tests covered, including six GUI scenarios and the native encrypted-connection cases. Builds and native encrypted-connection checks passed on Linux x64, Windows x64, macOS Apple Silicon, and macOS Intel. Bundled-runtime updater checks passed for the Windows and Mac packages. The Windows encrypted test needed one rerun after an initial startup timeout. Browser-specific proxy behavior and macOS permission prompts still require testing on users' systems.

Moondrop 0.6.6 — Fullscreen filters and updater verification

Fixes stretched fullscreen filters: search and dropdowns now stay bounded, location and sorting share a row with matching heights, and opened menus use Moondrop's dark colours with consistent spacing.

Unknown-country servers (“Other locations”) now have a question-mark flag in the list, location menu and selected server card.

Fixes the Windows updater helper launch in folders containing non-ASCII characters. The helper uses relative launch paths and preserves its data directory through the child environment.

Adds release checks for the updater using the actual Java runtimes bundled in Windows and both Mac packages. Tests cover verified replacement, restart, rollback, and paths containing spaces and Unicode. Native launcher configuration is checked to ensure it offers full-installer updates; portable editions retain automatic JAR updates after restart.

Windows EXE and macOS DMGs include Java. Choose arm64 for Apple Silicon or x64 for Intel Mac. Installers are unsigned and macOS packages are not notarized. The portable ZIP/JAR requires Java 17 or newer.

Moondrop 0.6.5

Removes the App files button and the unused footer space.

Windows EXE and macOS DMGs include Java. Choose arm64 for Apple Silicon or x64 for Intel Mac. Installers are unsigned and macOS packages are not notarized. The portable ZIP/JAR requires Java 17 or newer.

Moondrop 0.6.4

Removes the “Community servers” footer text from the app.

Windows EXE and macOS DMGs include Java. Choose arm64 for Apple Silicon or x64 for Intel Mac. Installers are unsigned and macOS packages are not notarized. The portable ZIP/JAR requires Java 17 or newer.

Moondrop 0.6.3 — Protocol badges and preferences

Server rows now show clear protocol badges. Selecting a server shows a short strength label and explanation of its configured transport:

• Shadowsocks: Encrypted proxy.
• VLESS: TLS encryption, or REALITY camouflage when configured.
• Trojan: TLS camouflage.
• Hysteria 2: HTTP/3 camouflage, or Obfuscated QUIC when configured.
• TUIC: TLS over QUIC.

Settings → Enabled protocols lets you toggle Shadowsocks, VLESS (TLS / REALITY), Trojan, Hysteria 2 and TUIC. Disabled protocols are hidden and excluded from Quick Connect and background tests. Existing connections remain active until you disconnect. Re-enabling a protocol restores its servers and saved results without refreshing feeds. All protocols are enabled by default.

Windows EXE and macOS DMGs include Java. Choose arm64 for Apple Silicon or x64 for Intel Mac. Installers are unsigned and macOS packages are not notarized. The portable ZIP/JAR requires Java 17 or newer.