Release 5.2.22
Shadowsocks Reborn 5.2.22
Shadowsocks Reborn 5.2.22 is a stability, security, and DNS privacy focused release with major improvements to DNSCrypt integration, self-updating, WinUI reliability, and the release pipeline.
Highlights:
-
Added and hardened DNSCrypt Proxy integration
- DNSCrypt and DoH resolver support
- ODoH disabled by default
- Resolver search and filtering
- Improved generated
dnscrypt-proxy.toml - More reliable dual TCP/UDP loopback-port allocation on Windows
- Updated DNSCrypt management localization
-
Improved automatic updates
-
SHA-256 verification of downloaded release packages
-
Additional SHA-256 verification of the staged updater
-
Protection against updater replacement between validation and execution
-
Safer UAC/elevated update handoff
-
Rollback and cleanup support
-
Strict canonical release assets:
Shadowsocks-win-x64.zipShadowsocks-win-x64.zip.sha256
-
-
Fixed
ss://protocol handling- Correct quoting of executable paths
- Correct URL argument handling
- Works when Shadowsocks is installed in directories containing spaces
-
Improved WinUI application shell
- Tray-first application lifecycle
- Lazy main-window activation
- Improved Logs viewer using selectable
RichTextBlock - Severity-aware log formatting
- Better Windows 11 integration while retaining Windows 10 compatibility
-
Strengthened release security
- .NET 10 servicing baseline updated
- NuGet vulnerability audit is mandatory for release builds
- Vulnerability-feed failures now block releases
- Published executable version is verified against the release version
- PowerShell scripts are syntax-validated by CI before execution
- Additional repository and release-contract validation
-
Numerous fixes and regression tests around:
- SelfUpdater
- NetworkService version negotiation
- DNSCrypt runtime management
- localization
- release packaging
- CI/CD validation
Compatibility
- Windows 10 version 2004 / build 19041+
- Windows 11
- x64
Release version
5.2.22