SBM 1.1.9

What's new

• Shows latency and timeout as native right-aligned macOS menu badges.
• Keeps the selection column aligned across every subscription section.
• Runs latency checks automatically while the VPN is connected.
• Adds a manually editable latency interval from 1 to 9999 minutes.
• Sorts measured servers by latency inside each subscription source.
• Removes the unreliable manual Test Latency menu action.

Apple Silicon only. Requires macOS 26 or newer.

SBM 1.1.3

What's new

• Groups servers by subscription source in the menu.
• Sorts measured servers by latency within each source.
• Adds an optional per-source Exclude regex filter.
• Removes matching nodes before building Auto and the sing-box configuration.
• Adds regression tests and updates English and Russian documentation.

Example filter: (?i)lte|russia

Apple Silicon only. Requires macOS 26 or newer.

SBM 1.1.2

What changed

• Hardened the privileged helper and local control API against stalled requests and port conflicts.
• Rotated the API credential for every core launch.
• Added IPv6 routing to the managed TUN configuration.
• Improved native profile validation, remote rule-set checks, and managed Direct routing.
• Made helper replacement retry transient startup timeouts.
• Refreshed runtime state when the menu opens, the app becomes active, or the Mac wakes.
• Bounded latency-test concurrency and updater download size.
• Quarantined corrupted runtime state instead of silently overwriting it.
• Improved multi-node compatibility subscriptions and skip unsupported transports with a clear warning.

The release includes 53 passing tests and the bundled sing-box 1.13.14 core.

SBM 1.1.0

What's new

• Combine multiple HTTPS subscriptions and VLESS/Hysteria2 links in one profile.
• Configure User-Agent, X-Device-OS, and X-HWID independently for every HTTPS source.
• Use Shadowrocket-compatible defaults for providers that negotiate subscription formats by request headers.
• Remove sensitive provider headers on cross-origin redirects.
• Aggregate and deduplicate up to 63 proxy connections with dynamic server selection and Auto latency testing.

Full sing-box JSON remains a separate profile and continues to support protocols not represented by compact connection links.

Verification

• Swift test suite
• swift-format lint
• release build and ad-hoc signature verification
• bundled sing-box SHA-256 verification
• DMG verification and published SHA-256 checksum

This project is primarily AI-generated under human direction and has not received an independent professional security audit.

SBM 1.0.2

What changed

• Fixed the macOS background-helper replacement race that could make the first update attempt fail with Operation not permitted.
• Serialized helper requests and prevented status refreshes from interfering with helper installation or replacement.
• Added visible progress for verified in-app update downloads.
• Increased the helper readiness window and added regression tests for transient replacement failures.
• Added Russian documentation, a security policy, and improved project metadata.

Validation

• 38 automated tests passed.
• Swift formatting checks passed.
• The release build and its nested components passed strict code-signature verification.
• The DMG is accompanied by a SHA-256 checksum.

Requires Apple silicon and macOS 26 or newer. The application is ad-hoc signed and not notarized; see the README for the first-launch instructions.

SBM 1.0.0

First public release of SBM, a native Apple Silicon menu bar client for sing-box.

Highlights:

• TUN-only Rule, Global, and Direct modes
• HTTPS subscriptions, individual VLESS/Hysteria2 links, and native sing-box JSON profiles
• Automatic/manual server selection and latency tests
• On-demand privileged helper with transactional config validation and rollback
• Verified GitHub update downloads

Requirements: Apple Silicon and macOS 26 or newer.