Skip to content

v26.9.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Sep 04:44
· 26 commits to main since this release
v26.9.2
4bc3913
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

DNS control and faster everyday actions

OneXray 26.9.2 builds on the redesigned 26.9.1 interface with configurable DNS, optional subscription HWID, richer system menus, and more reliable startup and connection handling.

New options

  • Local DNS: Smart Routing and each Custom Routing configuration can save their own direct DNS address. Proxy DNS stays at 8.8.8.8. All via VPN still creates no direct DNS server.
  • Tunnel DNS: Edit the IPv4/IPv6 DNS addresses and the server name used for Apple DNS over TLS. These settings are separate from routing DNS and do not replace a Raw JSON configuration's own DNS addresses.
  • Apple excluded networks: With Capture all traffic off, selected IPv4/IPv6 networks can bypass the system VPN. The list is empty by default; enabling full capture preserves but disables it. Network exclusions do not automatically configure split DNS.
  • Optional subscription HWID: A default-off switch sends a stable random identifier unique to the subscription when required by its provider. No hardware or advertising identifier is read. The identifier survives edits and upgrades and is omitted from sharing; cross-origin redirects do not receive it. Provider device-limit and verification errors are shown explicitly.
  • Mobile quick actions: Long-press the app icon for Start VPN, Stop VPN, Switch configuration, or Update subscriptions on iOS and Android. These are app-icon actions, not system Shortcuts automation.
  • Desktop tray menus: Reconnect, choose servers or Raw JSON, switch traffic methods, and update subscriptions or routing data. Each data list shows up to 10 entries, with full lists still available in the app. An open menu is no longer replaced by background updates on macOS and Windows.

Reliability and usability

  • Setup now has privacy confirmation and one configuration page, combining the optional direct region with the required Windows/Linux outbound-interface choice. Authorization is handled on entry to the main interface; server import happens afterward.
  • Errors retain concrete configuration, network, permission, storage, and native causes. Connect actions show immediate progress while waiting for permissions or queued work. A tray start with no usable servers reports the reason without unnecessarily opening the window.
  • VPN status follows native events on Apple/Android and process exits on Windows EXE/Linux. Only Windows MSIX polls system VPN status. Stale desktop queries cannot replace newer process watches or publish obsolete status.
  • Current-connection traffic continues updating when a desktop window is visible but unfocused. Hidden windows and non-visible connection pages stop sampling.
  • GeoData automatic updates run only while VPN is connected. Failure retains old files without stopping or reconnecting VPN. Manual updates and configuration-import dependency downloads remain independent.
  • Node and configuration editing use stronger core construction checks. Actual VPN startup reports its own errors instead of running a second preflight instance. Desktop Core diagnostics are retained, including in MSIX.
  • System sharing uses the originating control on supported platforms; Linux offers explicit copying. Dismissing the system share UI does not close the app's share page or claim delivery.
  • Windows packages include the architecture-matched VC++ runtime. Desktop Core discovery, stop confirmation, Linux rendering, and Linux ARM64 language fallback have also been improved.

Updating from 26.9.1

  • The in-place database upgrade preserves servers, subscriptions, cached measurements, routing, Raw JSON, and preferences. Existing subscriptions have HWID off until explicitly enabled.
  • Existing routing and tunnel DNS values retain their previous defaults unless changed. Custom Routing shares store the local DNS address using the standard dns.servers entry tagged app-dns-direct.
  • The three-configuration creation limits are unchanged; legacy Raw JSON entries above the limit remain usable.
  • Windows EXE/ZIP and MSIX remain separate channels with separate data locations. Stop VPN and quit before updating a standalone installation. Do not treat changing channels as data migration.
  • Linux Core exit monitoring requires kernel 5.3 or newer. Linux ARM64 uses English for Chinese/Japanese/Korean language requests while preserving the saved language preference.

Source changes: v26.9.1 → v26.9.2

Assets 13
Loading