Conduit v1.3.0

[1.3.0] - 2026-06-15

Added

• Full i18n support: 33 languages (RU, EN, DE, FR, ES, TR, FA, UK, BE, KK, UZ, HY, AZ, KA, RO, KY, TG, TK, TT, BA, CE, CV, SAH, BUA, OS, AV, MHR, UDM, KV, MYV, KBD, TYV, XAL)
• SOCKS5 proxy with configurable port
• MASQUE (HTTP/3) proxy
• AI-powered DPI strategy selector
• ECH (Encrypted Client Hello) support
• Split tunneling (bypass proxy on alternate port)
• Proxy chaining (upstream HTTP/SOCKS5)
• PAC file URL generation
• Speed test tool
• Auto-DNS selection based on latency
• DNS ad blocking with custom blocklists
• SponsorBlock and Return YouTube Dislike integration
• Picture-in-Picture (PiP) for YouTube
• Background audio mode for YouTube
• TUN mode (full system routing via proxy)
• Auto-connect on startup
• Multi-port proxy configuration
• Traffic statistics window
• Per-domain DPI strategy configuration
• Export/import settings
• Windows toast notifications for connection events
• -buildid= linker flag for reproducible builds
• .golangci.yml linter configuration

Changed

• CI: matrix testing for Go 1.25; golangci-lint, govulncheck, gosec, and CodeQL security scanning
• Release build: max compiler optimization flags (-trimpath, -s -w -H=windowsgui, -buildid=, -tags production)
• Onboarding rewritten with dynamic i18n placeholders
• Error handling: comprehensive slog.Warn/slog.Error across all packages
• Security: OWASP 2025 Top 10 compliance (A01-A10 fixes applied)
• Build optimization: sync.Pool for buffers, rate limiting, HTTP timeouts, menu debouncing
• Memory leak fixes: goroutine leak cleanup, race detector fixes
• Windows resource metadata (FileDescription, CompanyName, Copyright, etc.)

Fixed

• YouTube playback: added .google.com to allowlist, updated User-Agent
• Statistics display: byte counting in tunnel relay
• Language switching: all 33 language tables properly translated
• Open Log/Open Settings: directory creation and error handling
• DNS-over-HTTPS: TLS 1.2 minimum version enforced
• Auto-update: GitHub requests bypass system proxy; retry failed checks at 1 and 5 minutes; prompt to install when download completes; tray tooltip reflects update state
• Auto-update: throttle tray menu refresh during download progress (every 10%)
• Various race conditions in tray menu and health checks

Conduit v1.2.3

[1.2.3] - 2026-06-09

Fixed

• Auto-update: GitHub requests bypass system proxy; retry failed checks at 1 and 5 minutes; prompt to install when download completes; tray tooltip reflects update state.
• Auto-update: throttle tray menu refresh during download progress (every 10%).

Conduit v1.2.2

[1.2.2] - 2026-06-09

Added

• YouTube preload: instant placeholder while m.youtube.com loads in a hidden window.
• Frontend debug mode: -debug, -debug-inspector, tray DevTools/Reload, docs/DEBUGGING.md.
• Thread-safe settingsStore for proxy/runtime settings.
• YouTube allowlist entries: .googleapis.com, .gstatic.com, .ggpht.com.

Changed

• DNS-over-HTTPS: query AAAA when A returns no addresses (fixes googlevideo.com resolution).
• TCP segmentation delay reduced from 2ms to 1ms for faster TLS handshakes through DPI.

Fixed

• Race between proxy server and settings updates on strategy/DoH changes.
• Slow or failed YouTube startup when IPv6-only CDN hostnames were returned.

Conduit v1.2.1

[1.2.1] - 2026-06-09

Security

• Reject broad custom allowlist suffixes (e.g. com, google.com); default preset is now YouTube only.
• Auto-update: GitHub download URL allowlist, mandatory SHA256 verification, sanitized version paths.
• Hardened conduit-updater path checks; release links validated before opening in browser.
• System proxy toggle shows a warning about local open-proxy scope.

Added

• Debug flags: -pprof, -memprofile, -debug; docs/DEBUGGING.md.
• go.uber.org/goleak tests; go test -race in CI.
• docs/SECURITY.md threat model and OWASP mapping.

Fixed

• Tray/update scheduler and status loop stop on quit; hotkey loop exits on shutdown.
• Proxy IdleTimeout and per-read idle deadlines on CONNECT tunnels.
• DNS cache bounded (512 hosts) with eviction.
• File log handle closed on exit.

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog.

[1.2.0] - 2026-06-08

Added

• Persistent preferences.json (strategy, DoH, allowlist, language, window size, autostart, system proxy, minimize-to-tray, auto-update settings) with portable mode (-portable).
• Russian/English UI (system tray, splash, onboarding) with language submenu.
• DoH provider selection: Cloudflare, Google, Quad9.
• Allowlist presets: YouTube only, Google media, custom domains via JSON.
• Six DPI strategies including none, TCP 1/2/8-byte segmentation, and TLS record fragmentation variants.
• Connection health check through the local proxy.
• Rotating file logs under %AppData%\Conduit\logs or ./Conduit/logs in portable mode.
• Windows autostart, system proxy with snapshot restore, minimize-to-tray on close, Ctrl+Shift+Y hotkey toggle.
• GitHub auto-update: check, download, SHA256 verify, conduit-updater.exe replace + relaunch.
• Inno Setup installer (Conduit-Setup-1.2.0.exe).
• Integration tests for CONNECT allowlist behavior.
• Issue/PR templates and docs/CODE_SIGNING.md.

Changed

• System tray expanded with status line, DNS/domains/options/updates submenus.
• Release CI builds conduit.exe, conduit-updater.exe, SHA256 checksum, and installer.

[1.1.0] - 2026-06-07

Added

• Splash screen and first-run onboarding.

[1.0.0] - 2026-06-07

Added

• Initial release: local CONNECT proxy, TLS fragmentation, Wails YouTube viewer, system tray.

v1.1.0

Full Changelog: v1.0.0...v1.1.0

v1.0.0

Full Changelog: https://github.com/foursecondfivefour/conduit/commits/v1.0.0