Lumen Android 1.1.0
What's Changed
- feat: added in-app Android updates from GitHub. Lumen finds only published
android-v…releases, selects the correct ABI, validates the package name, version and signing certificate, requests the unknown-sources permission when required, and hands the verified APK to Android's PackageInstaller. - feat: rebuilt Domain/IP Routing and App Routing in the Lumen style. Domain, IP, geo and rule-set entries can be added, edited or removed with DIRECT, PROXY and BLOCK actions; split tunneling now has safe allow/exclude handling and a curated Auto-select list instead of selecting every installed app.
- feature: bundled Russian geo rule sets and the ads rule set for first-run protection. Only one regional geo source is active at a time, and switching Russia, China or Iran atomically replaces both the downloaded
.srsfiles and the automatic routing rules. - feat: subscriptions can now be renamed and have their URL edited. Plain HTTP links are available behind an explicit opt-in setting, redirects are checked as well, refreshes report added/updated/removed nodes, and stable node identities preserve selection, ping and AUTO country pools across updates.
- feature: ping now uses the method selected in Settings with HTTP GET as the reliable default. Hysteria/Hysteria 2, TUIC, WireGuard/AWG/WARP and OpenVPN can be measured through a temporary
sing-box-extendedoutbound instead of an invalid TCP port check; running checks can be restarted or stopped and dashboard results reset when the server changes. - feature: added SHA-256 certificate public-key pin editing and import support for VLESS, VMess, Trojan, Hysteria, Hysteria 2 and TUIC. Hex, Base64 and
sha256/…values are normalized tocertificate_public_key_sha256accepted by the bundled extended core. - fix: rebuilt VPN startup, shutdown and network-change handling. The service binds to the real underlying network, refreshes physical DNS after Wi-Fi/mobile changes, excludes Lumen from its own TUN, rejects stale generated configs, verifies the native tunnel worker and keeps session/traffic notification state updating even when speed statistics are disabled.
- fix: corrected generated DNS and routing for
sing-box-extended: secure bootstrap and DoH hostname resolution, Android/system DNS mode, custom JSON validation, profile DNS fallback, DNS hijack/fake-IP ordering, user rule precedence, local binary rule sets and endpoint pinning against carrier DNS sinkholes. - fix: hardened protocol and import compatibility across AUTO pools, AWG/WARP, MASQUE, OpenVPN, Clash/Mihomo, VLESS, VMess, Trojan, Hysteria, TUIC and Mieru. Native dependency closures and urltest tags are preserved, invalid TLS/uTLS fields are normalized, OpenVPN credentials/encrypted keys/ciphers are handled, and unsupported profiles now fail with a useful error instead of a broken core config.
- fix: unified dashboard and Servers group panels, added the connected-server Check tile, improved subscription and server editing, corrected AUTO/WARP labels and country handling, refreshed the dark adaptive launcher icon, and completed the affected Persian and Chinese strings.
- feature: added signed
armeabi-v7abuilds alongsidearm64-v8a,x86_64and universal APKs.
Full Changelog: android-v1.0.0...android-v1.1.0