v0.5.0

0.5.0 (2026-05-28)

Features

• byte_swap_16 and byte_swap_32 transforms (266f66b)
• byte_swap_16 and byte_swap_32 transforms (afeeb24), closes #81
• drop_larger_than transform (852d187)
• drop_larger_than transform (a0f682b), closes #80
• per-destination transform pipeline with drop_smaller_than (1b6c56a)
• per-destination transform pipeline with drop_smaller_than (c7e8ea1), closes #79
• prepend_timestamp transform (046ad81)
• prepend_timestamp transform (3174a4b), closes #82
• regex_filter transform (9152b93)
• regex_filter transform (17e6766), closes #83

Bug Fixes

• accept IPv6 multicast addresses in the GUI validator (0c0084a)
• accept IPv6 multicast addresses in the GUI validator (c13d34e), closes #85
• keep gui feature enabled through tauri dev / build (7bc683d)
• keep gui feature enabled through tauri dev / build (f83f143)
• pre-populate broadcast addresses for broadcast destinations (bd255f7)
• pre-populate broadcast addresses for broadcast destinations (5298ebd), closes #74
• red-border non-host-shaped strings in unicast host inputs (79f2b7c)
• red-border non-host-shaped strings in unicast host inputs (2639956), closes #86
• relabel multicast Mode dropdown and default source to subscriber (3a73bb8)
• relabel multicast Mode dropdown and default source to subscriber (c240fa3), closes #75 #76
• reset address to a sensible default when cast_mode changes (3cbb9b5)
• reset address to a sensible default when cast_mode changes (81c8667), closes #84

v0.4.0

0.4.0 (2026-05-28)

Features

• adopt Conventional Commits and release-please (3060daf)
• adopt Conventional Commits and release-please (c7a76db)

v0.3.0

Binaries built by the Release workflow. See CHANGELOG.md for the release notes.

v0.2.2 — bump script + attribution

Patch release. Backwards-compatible — no config schema, CLI, or /stats shape changes. Developer-tooling fix plus a documentation update; no runtime changes.

Changed

• Replaced the nexthop@krypte.me placeholder with Patrick S Connallon in every // Copyright (C) and // Architect: header across the Rust crate, and in the JSX footer in src/components/ConfigTab.tsx. 19 files touched; comment-only. (#15)

Fixed

• scripts/bump-version.ps1 no longer pulls in semver-patch transitive dependency updates as a side effect of the bump. Switched from cargo update -p nexthop (which re-resolves transitives) to cargo metadata --format-version 1 --quiet. Verified on this cut: Cargo.lock diff was exactly the workspace member version line. (#14)

---

Full diff: v0.2.1...v0.2.2

v0.2.1 — security + tooling

First patch release. Backwards-compatible — no config schema, CLI, or /stats shape changes.

Security

Resolves three of four open Dependabot alerts:

• GHSA-4w7w-66w2-5vf9 — vite path traversal in optimized-deps .map handling. Bumped vite 5.x → 6.x (no v5 patch exists).
• GHSA-67mh-4wv8-2f99 — esbuild dev-server CORS. Pinned esbuild ≥ 0.25.0 via npm overrides.
• GHSA-58qx-3vcg-4xpx — ws uninitialized memory disclosure. Pinned ws ≥ 8.20.1 via npm overrides.

GHSA-wrw7-89jp-8q8g (glib < 0.20.0) remains intentionally open — Linux-only transitive via tauri → wry → gtk-rs 0.18; no tauri 2.x release on gtk-rs 0.20 yet.

Added

• SECURITY.md — coordinated-disclosure policy pointing at GitHub private vulnerability reporting.
• Gitleaks secret scanning — .pre-commit-config.yaml hook + .github/workflows/gitleaks.yml CI (sha256-verified tarball install).
• CHANGELOG.md — Keep a Changelog format going forward.
• scripts/bump-version.ps1 — one-command version sync across package.json, src-tauri/Cargo.toml, src-tauri/tauri.conf.json, Cargo.lock, and package-lock.json.

Changed

• Cargo.lock refreshed: incidental semver-patch updates of filetime, hashbrown, kqueue-sys, libredox, plus new transitive bs58. No direct-dep or feature changes.

---

Full diff: v0.2.0...v0.2.1

v0.2.0 — initial release

Initial public release of nexthop — a raw TCP/UDP relay with cross-protocol forwarding, multicast/broadcast support, per-destination back-pressure, token-bucket rate limiting, live config reload, and a native Tauri v2 desktop GUI with an optional headless mode.

Features

• Core relay engine — TCP/UDP cross-protocol forwarding with fan-out (#1)
• Multicast and broadcast — IPv4 + IPv6 group membership (#2)
• Per-destination back-pressure — drop_newest and block overflow policies (#3)
• Token-bucket rate limiting with live config hot-reload (#4)
• HTTP health/stats endpoint — JSON counter snapshots (#5)
• Tauri v2 desktop GUI — config / monitor / preferences tabs (#6)
• Headless mode + structured JSON logs for service deployments (#7)
• Unit test suite — 84 tests across 9 modules (#8)

Documentation

• README — quick-start
• MANUAL — full configuration reference

License: GPL-3.0-or-later