xray-mitm v0.4.6

Fixed

• Show unknown MITM service status as Unknown rather than Stopped in LuCI
  summaries and routing guidance, while still requiring a confirmed running
  service for MITM-dependent routing previews.

Compatibility limitations

• The release target remains OpenWrt 25.12/APK-only: no IPK release assets or
  default public signed OpenWrt 24.10 feed. IPK builds and the opkg installer
  remain groundwork, not native 24.10 runtime or hardware qualification.

xray-mitm v0.4.5

Added

• Add an OpenWrt 24.10 IPK build lane for xray-mitm and
  luci-app-xray-mitm, using the official 24.10.8 SDK for
  aarch64_cortex-a53 with package and dependency checks.
• Add a dual-backend installer that detects matching OpenWrt 25.12/APK and
  24.10/opkg release/package-manager pairs and rejects mismatched pairs.
• Add a fail-closed opkg installation path requiring an explicit HTTPS feed,
  a SHA-256-pinned usign public key, and enabled signature checking. Limit
  installation and upgrades to the two project packages, preserve unrelated
  feed entries, and restore the previous key/feed/keep-file state on failure.

Changed

• Improve PassWall2 capability detection and make inspection of incomplete,
  unsupported, and legacy routing rules more accurate.
• Improve setup and dashboard readiness reporting across service, certificate,
  and routing prerequisites.
• Improve installer package-manager and OpenWrt release checks while keeping
  the documented public feed target at OpenWrt 25.12/APK.

Compatibility limitations

• The public v0.4.5 release remains OpenWrt 25.12/APK-only. It does not include
  IPK release assets or a default public signed OpenWrt 24.10 feed.
• The 24.10 IPK build and opkg installer work is compatibility groundwork,
  not a public support declaration. Native 24.10 runtime, hardware, and
  package rollback qualification remain unproven; installer feed-state
  restoration is not proof of installed-package rollback. See the
  compatibility contract for the evidence
  boundaries.

xray-mitm v0.4.4

Changed

• Lock the dashboard and show elapsed progress while PassWall2 routing changes
  are applied and verified, so users do not start a second transaction while
  the router is restarting.
• Detect the router's OpenWrt release and APK package manager before applying
  installer support policy; accept official 25.12.x releases while keeping
  unvalidated release families out of scope.
• Keep only the three newest project installer backups and point post-install
  guidance to the Basic setup and routing flow.
• Retain only the three newest completed PassWall2 routing activation results
  while preserving live activation state for safe browser polling.
• Remove unused upstream metadata and inherited ad-blocking and Khan Academy
  rules from the packaged Xray sample, and document the retained DNS and
  service routing policy.

xray-mitm v0.4.3

Added

• Add a separate Google Meet web and signaling route under MITM-Compatible
  Services for meet.google.com, meetings.googleapis.com,
  hangouts.googleapis.com, meetings.clients6.google.com, and
  stream.meet.google.com. Meet media may use UDP or separate media IPs, so a
  real call should be tested before relying on MITM for media traffic.

Fixed

• Keep routing recovery tests within a bounded time margin when PassWall2 takes
  longer than usual to restart during an apply operation.

Changed

• Rewrite the English and Persian README files as concise beginner-first guides,
  and add separate advanced-usage and security references.
• Replace the long Basic and Advanced dashboards with PassWall2-style tabs.
  Switching tabs is immediate and shows only the selected section without
  reloading the LuCI page.
• Add a shared PassWall2-style status strip to both Basic and Advanced Overview,
  showing MITM, PassWall2 routing, and certificate readiness at a glance.
• Show the application version beside the dashboard title for easier support and
  update checks.

Fixed

• Load the dashboard state helper through LuCI's dependency-injection directive
  instead of the unavailable CommonJS require() function.
• Make the overview smoke test emulate LuCI dependency injection and reject
  runtime require() calls before a package is built or released.

xray-mitm v0.4.2

Fixed

• Fixed the LuCI overview page failing with state is not defined after the
  v0.4.1 state-module constructor fix.
• Added an overview-module smoke test that exercises the LuCI state dependency
  during module loading and setup-guide rendering.

xray-mitm v0.4.1

Fixed

• Fixed the LuCI dashboard startup error caused by the shared frontend state
  module returning an invalid constructor.
• Added regression coverage for loading the shared state module through LuCI's
  baseclass module contract.

xray-mitm v0.4.0

Added

• Added a small frontend state model with Node-based tests for PassWall2
  selection, routing presets, route status, and setup progress.
• Added an idempotent Quick Setup backend that preserves existing configuration
  and certificate state, recovers interrupted certificate work first, starts the
  service, and enables automatic startup.
• Added a product-level setup status contract for certificate, service,
  PassWall2, routing, recovery, and explicitly unchecked health state.
• Added a supported xray-mitmctl passwall2 command namespace for inspection,
  staged plans, apply, rollback, and recovery.

Changed

• LuCI now reaches PassWall2 operations through the supported xray-mitmctl
  boundary, and obsolete routing request arguments were removed.
• The Simple dashboard now presents PassWall2-style grouped routing controls,
  readable destinations, rule status, and a direct view of the managed rules.
• The PassWall2 routing assistant now uses clearer rule headers, destination
  status, and PassWall2-style selectable rows with aligned native checkboxes.
• LuCI now opens in a beginner-focused Simple view for automatic setup,
  public-certificate download, PassWall2 prerequisites, recommended routing,
  and status checks, while retaining every existing control under Advanced.

xray-mitm v0.3.0

Changed

• Documented the local branch, router test, pull request, and signed release workflow.
• GitHub Releases now use the matching changelog section as their release notes.
• Reworked the LuCI page around a four-step beginner setup guide and a simpler
  three-step PassWall2 routing assistant.
• PassWall2 nodes now use readable remarks and protocol details in selectors;
  internal UCI IDs are shown only when a node has no name.
• Added a recommended routing preset, aligned route cards, plain-language rule
  descriptions, an advanced-options disclosure, and clearer review/apply states.
• The four-step panel now identifies first-time setup separately from the
  preserved configuration shown after an update.
• Managed PassWall2 rules now use descriptive names, list their exact domain
  scope in LuCI, and keep checkboxes beside their text across LuCI themes.
• Changing any routing choice now invalidates the old preview immediately so a
  stale transaction cannot be applied accidentally.
• Routing inspection now reports whether the localhost MITM SOCKS node is ready,
  reusable, or will be created when MITM routing is selected.
• Consolidated routing into three ordered rules: VPN Overrides,
  MITM-Compatible Services, and Regional Direct Access. Checkboxes now
  add domain bundles to these rules instead of creating separate rules.
• Added optional Meta website and Fastly-backed website bundles, disabled by
  default until they are tested on the target devices.
• The first three-rule preview removes obsolete package-managed rules while
  preserving recognized user-created legacy rule definitions.

Fixed

• PassWall2 refuses to apply an MITM route while the standalone MITM service is
  stopped, preventing traffic from being sent to an unavailable local SOCKS
  listener.
• PassWall2 child processes no longer inherit the routing transaction lock.
• LuCI explains the stopped-service requirement and disables unsafe previews.
• Saved routing choices are derived from aggregate rule contents and the VPN
  selector prefers the active VPN Overrides assignment.
• Google Account routing can be selected independently of the Gemini bundle.
• Identical repeated previews no longer report a change only because of
  PassWall2's one-shot flush marker.

xray-mitm v0.2.2

Authenticated OpenWrt APK feed release. Install or update with the checksum-pinned public installer at https://duuuude.github.io/xray-mitm-openwrt/install.sh; APK verifies the signed feed and packages.

xray-mitm v0.2.1

Authenticated OpenWrt APK feed release. Install or update with the checksum-pinned public installer at https://duuuude.github.io/xray-mitm-openwrt/install.sh; APK verifies the signed feed and packages.