v1.6.0

Upgrade Notes

Configs are migrated to the sing-box 1.14 shapes automatically on first start, once. Two cases are not migrated because rewriting them would change how names resolve — they are logged with the upstream migration link so you can handle them yourself:

• DNS rules using legacy address filters (ip_cidr, ip_is_private, ip_accept_any or an IP rule-set) — still working in 1.14, removed in 1.16, migrate them to match_response
• the deprecated strategy DNS rule action option

What's Changed

• Sing-Box v1.14.0
• Go v1.26.7
• New protocols of sing-box 1.14: Snell (in/out), Cloudflared inbound, Bridge outbound, OpenConnect and OpenVPN endpoints, mDNS/Resolved/OpenConnect/OpenVPN DNS transports and API, OOM-Killer and USB/IP services
• New endpoints with mTLS support
• ACME and Tailscale certificate providers registered for the new certificate_provider registry
• Automatic migration of inline tls.acme to certificate_provider with type acme
• Automatic migration of options deprecated in 1.14: dns.independent_cache, cache_file.store_rdrc and rule_set[].download_detour
• Rule-set and external subscription downloads moved to the 1.14 http_client
• Migrate Hysteria/QUIC and HTTP/HTTP2 transport fields to their 1.14 shapes
• Drop options removed in 1.14 from stored configs
• Issue certificates with a Cloudflare API token #1237
• Client remark in subscriptions #1228
• UDP option for Clash subscriptions #1227
• Trim surrounding whitespace from settings before validation #1229 @dactDMA
• Telegram bot in README #1230
• Update packages

Frontend

• Add the sing-box 1.14 protocols, DNS transports and services to the UI #234
• New endpoints and mTLS options
• Certificate provider instead of inline ACME
• HTTP, HTTP/2 and QUIC fields updated to the 1.14 shapes
• Stop emitting options deprecated or removed in sing-box 1.14
• Total sum of stats in traffic chart #1219
• UDP option for Clash subscriptions #1227

Bug Fixes

• Fix undefined in generated names, passwords and short IDs (off-by-one in the random generator), mostly visible on bulk client creation
• Preserve Hysteria2 user identity across hot updates #1231 @LiGaAmG
• Fix IPv6 in links and subscriptions #1220
• Fix IPv6 in panel URI
• Fix service on Alpine #1225
• Catch untar errors on install/update #1225

Reports