4.26.11-2

• chore(release): bump Desktop to 4.26.11-2 (19aa304)
• build(macos): update ProxyBridge pin and extension build number (533bde0)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

Rolling

• fix(ci): retry Sparkle download timeouts (f8f36e8)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.11-1

• chore(release): bump Desktop to 4.26.11-1 (082b221)
• chore(deps): bump Mihomo to v1.19.34 (163b643)
• chore(deps): bump ws (#78) (353e76b)
• chore(deps): bump the development-minor-and-patch group with 6 updates (#79) (ea340da)
• fix(ci): register profile interval dependency in config tests (5204a5b)
• fix: guard editor saves and subscription update intervals (c155a4d)
• chore(deps): bump the development-minor-and-patch group with 7 updates (#77) (845baa0)
• chore(deps): bump the production-minor-and-patch group across 1 directory with 2 updates (#76) (a4b16ec)
• chore(deps): bump electron-vite from 6.0.0-beta.7 to 6.0.0 (#72) (359f1d7)
• chore(deps): bump the development-minor-and-patch group across 1 directory with 14 updates (#75) (2073157)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-8

• chore(release): bump Desktop to 4.26.10-8 (5ee7ca1)
• fix(ci): handle macOS notarization ticket network failures (29aaeab)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-6

• chore(release): bump Desktop to 4.26.10-6 (f3916df)
• test: align React Aria version assertion with current dependency (0381cf9)
• feat: unify runtime status and recovery guidance (3fa5b3e)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-5

• chore(release): bump Desktop to 4.26.10-5 (5a86ee0)
• build(macos): set routing extension version to 4.26.10 (509bfac)
• fix(macos): ship ProxyBridge UDP lifecycle backport (19e26dc)
• test(ci): mark the unused stapler mock environment parameter (eb9e723)
• fix(ci): retry transient Apple ticket stapling failures (997505c)
• build: pin Service v0.6.14 and refresh the macOS routing extension (e88931c)
• Merge remote-tracking branch 'origin/master' (bb06fe2)
• build(macos): pin ProxyBridge routing lifecycle backports (74b5a24)
• Merge pull request #70 from amamiyakokoro/dependabot/npm_and_yarn/electron-vite-6.0.0-beta.7 (fa9335e)
• Merge remote-tracking branch 'origin/master' into dependabot/npm_and_yarn/electron-vite-6.0.0-beta.7 (851bf34)
• Merge pull request #68 from amamiyakokoro/dependabot/npm_and_yarn/production-minor-and-patch-a5e2140279 (101bc59)
• Merge pull request #69 from amamiyakokoro/dependabot/npm_and_yarn/development-minor-and-patch-7fa2775994 (1bfbb08)
• chore(deps): bump electron-vite from 6.0.0-beta.5 to 6.0.0-beta.7 (243de89)
• chore(deps): bump the development-minor-and-patch group with 8 updates (8747194)
• chore(deps): bump tldts (057ab20)
• fix(connections): show originating processes for Linux app routing (7a26c87)
• fix(service): mount config file during sandboxed profile validation (7ce94ec)
• fix(terminal-proxy): clear stale session variables after managed file removal (79487c3)
• fix(linux): assign root ownership before enabling core setuid (4ef84e7)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-4

• chore(release): bump Desktop to 4.26.10-4 (98ef515)
• test: align regression contracts and clear diagnostics lint (d7b1f7e)
• fix(override): guard refresh commits against concurrent mutations (e1caf80)
• fix(network): restart the watcher after rapid resubscription (0e19188)
• fix(profile): retry failed scheduled refreshes with bounded backoff (ad15f0c)
• fix(updater): confirm installer spawn before quitting Desktop (e1a214e)
• fix(import): serialize confirmations and bind replies to requests (6dce95c)
• fix(ipc): preserve nullable invocation results (744d825)
• fix(core): propagate stop failures and recover failed profile switches (522d428)
• fix(profile): journal age key and ciphertext updates for crash recovery (2594f20)
• fix(config): validate managed IDs at import and filesystem boundaries (4d09d8a)
• fix(config): reject prototype pollution in configuration merges (a0fe4c0)
• fix(kokoro): guard subscription refreshes against concurrent edits (649f66b)
• fix(kokoro): report core apply failures after subscription refresh (9ecfb3a)
• fix(app-routing): restart core when routing DNS changes (9eae3cc)
• fix(macos): preserve Proxy intent for native routing health checks (b3fcfcf)
• chore(deps): pin native 0.16.9 for direct network extension settings (667a296)
• fix(macos): wait for approval checks and show routing results (29de8a2)
• feat(macos): offer extension reapproval when routing is safely blocked (cfe36ad)
• fix(macos): pin native 0.16.8 to prevent Settings navigation crash (3da5310)
• feat(kokoro): refresh subscriptions automatically after saving custom rules (bd756ab)
• chore(deps): pin native 0.16.7 for macOS routing logs (a6fcdd1)
• feat(logs): highlight service request summaries and structured diagnostics (b5f8499)
• feat(macos): connect application routing logs to Desktop (afddb7c)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-3

• chore: release Desktop 4.26.10-3 with Native 0.16.6 and Service 0.6.13 (dc12b1d)
• fix: report router status stream disconnections (6806ac5)
• refactor: prefer Native-owned Service status queries (46df4c1)
• feat: centralize profile validation through Native and Service (6db7f24)
• feat: delegate application routing coordination to Native and Service (bd6c70a)
• feat: delegate PAC serving to capable KokoroBox Service (c1b1aa0)
• fix: serialize DNS lease recovery and release (1105b67)
• fix: verify persisted core identity through Native before shutdown (6113b31)
• Merge pull request #67 from amamiyakokoro/dependabot/npm_and_yarn/electron-vite-6.0.0-beta.5 (491c6b2)
• chore(deps): bump electron-vite from 6.0.0-beta.1 to 6.0.0-beta.5 (33a35e2)
• Merge pull request #65 from amamiyakokoro/dependabot/npm_and_yarn/production-minor-and-patch-26f913ec35 (26e7bf9)
• Merge pull request #66 from amamiyakokoro/dependabot/npm_and_yarn/development-minor-and-patch-eec20cd26a (d909558)
• chore(deps): bump the development-minor-and-patch group with 7 updates (c660e8a)
• chore(deps): bump the production-minor-and-patch group with 2 updates (ac84ade)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-2

• chore(release): bump version to 4.26.10-2 (07b2637)
• feat: add overseas DNS preset with Cloudflare and Google resolvers (3daebf4)
• fix: preserve custom DNS when IPv6 setting is omitted (225e1ee)
• fix: preserve default rules while refreshing (ae6dcc3)
• feat: show LAN connection status in runtime overview (2d6d4ce)
• fix: distinguish rule form fields in dark mode (c8b4874)
• chore(deps): update native to 0.16.5 and service to v0.6.12 (c6fa9a6)
• fix: align DNS server fields and delete buttons (70d84f4)
• feat: diagnose DNS and repair bootstrap with system resolvers (aa99dd2)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.

4.26.10-1

• chore(release): bump version to 4.26.10-1 (531800a)
• chore(deps): pin Mihomo v1.19.32 (fd1bad7)
• fix: align Linux window identity and launcher icon (aade9d5)
• chore(deps): pin native v0.16.4 (6223c27)
• fix: explain Linux desktop proxy inspection failures (06e0f92)
• chore: pin KokoroBox Service v0.6.11 (f0f2756)
• chore(deps): pin service v0.6.10 (5063e19)
• fix: distinguish unavailable proxy diagnostics from runtime failures (8420d3e)
• chore(deps): pin native 0.16.3 and service v0.6.9 (49c9595)
• feat: integrate macOS system proxy diagnostics with existing UI (82c7aa7)
• feat: present Linux system proxy diagnostics by backend (0351fd4)
• refactor: coordinate system proxy diagnostics through native and service (f6fd0d3)
• ui: refine contextual settings drawer layouts (df98de4)
• feat: add on-demand system proxy diagnostics (0af0c51)

macOS downloads

Use the DMG for a normal first installation: open it, then drag KokoroBox to Applications. The PKG is retained for recovery, legacy migration, and managed deployment.

Windows privileges

KokoroBox starts with the current user's privileges and requests administrator permission only for operations that require it. Current-user installation does not require UAC; all-users installation requests UAC when writing to Program Files.

Signing status

macOS DMG and PKG installers are Developer ID-signed, notarized by Apple, and include stapled notarization tickets. Linux RPM packages contain an OpenPGP signature; Debian and Arch packages include detached signatures. SHA256SUMS.asc authenticates the checksum manifest with the included KokoroBox Linux signing key. Windows packages are not Authenticode-signed.