Broccoli 0.3.0

What's Changed

• Build the Shadowsocks-2022 key fixtures instead of spelling them (036e5b5)
• Keep the editor off the keys the core no longer takes (1545d5f)
• Let the explorer pick the xdrive local folder (cc5b613)
• Close the gaps a review of the upgrade found (fe0a73e)
• Re-verify the pinned-version claims and let the core own the UDP mask order (d956e43)
• Let a profile dial XDRIVE (56c9dd2)
• Let a profile dial MASQUE (9878fb2)
• Emit the core's leak block and rebuild the xdns mask (fec07f9)
• Catch the config model up with the retargeted core (ff278c0)
• Let the core block DNS and unrouted families outside the TUN (0f84e84)
• Pin the core to v26.9.30 (bb8323f)

Full Changelog: v0.2.3...v0.3.0

1. Xray core v26.9.9 → v26.9.30.
2. Two new transports: MASQUE and XDRIVE (both configurable in the GUI).

Broccoli 0.2.3

What's Changed

• Offer the rule editor's inbound tags as a selector (6f01f1f)
• A congested swapchain acquire cannot cost the device (417ce1c)
• Write only the state file whose bytes changed (a02ea28)
• Judge every decoded value the way the pinned core does (1905c7f)
• Gate the freedom fragment and noises blocks where the core refuses them (d752822)
• Warn on the dokodemo shapes the core starts with (10f36e8)
• Fold wire vocabularies the way Go lowercases them (218da83)
• Raise the WireGuard rules in the model pass (61e1dc9)
• Import the client-issued link schemes Xray supports (2915496)
• Shield a TUN session's whole egress, fail closed from the first moment (9a9ef7f)
• Move ambient UI explanation into hover tooltips (48e41e2)

Full Changelog: v0.2.2...v0.2.3

1. Trimmed the GUI's small explanatory text into hover tooltips and silenced the probe-payload log line.
2. Fail-closed WFP shield: pre-adapter block install, IPv6 kill-switch, per-install sublayer key, top-bar warning.
3. Import now accepts socks5/http(s)/wg/hysteria2 links too, warning on unmappable parameters; export unchanged.
4. Fixed a bug that caused the app to crash under high load. (after 25045a1)
5. Fixed inbound tag selector missing in routing tab

I. WireGuard rules moved into the model pass, vocabularies fold like Go, and dokodemo findings the core starts with now warn.
II. The app now judges values exactly as the pinned core does: freedom fragment/noises moved into the model pass, and every base64/range decode shares one Go-faithful helper.
III. Saves now rewrite only the state file that actually changed; keeping them on the UI thread stands, with a concrete trigger to revisit.

Broccoli 0.2.2

What's Changed

• Serve the tunnel's IPv6 gateway in the in-tun DNS listeners (10932a2)
• Correct the claims and the duplicate test the current pin no longer matches (c97d715)
• Keep the row controls clear of the list's overlay scrollbar (8ac2594)
• Log the findings a commit or import drops, and bound three silent paths (b005991)
• Name the TUN adapter the app emits instead of guessing the core's default (b9a575c)
• Refuse the freedom strategy and warn on the bootstrap override (777c4e7)
• Give app-authored log lines a scan-first standard and a level (4624f05)
• Add a manual network-state cleanup to Settings (4ac41e3)
• Point the other adapters at the tunnel DNS while TUN runs (e067353)
• Make the latency probe pick the interface Xray actually dials through (c8f533f)
• Enforce the Rust quality rules with clippy lints (5ed47d5)
• Keep the geodata picker open while its search field is clicked (7f81420)
• Keep a field's verdict on the field the label names (51f669a)
• Scope the bootstrap DNS marking to the outbounds the document dials (e73fbda)
• Accept upstream transport aliases in share-link import (0d8c081)
• A lost graphics device costs the window, not the process (25045a1)

Full Changelog: v0.2.1...v0.2.2

1. Improved handling of program crashes when switching windows
2. Import links now support more types
3. Fixed the actual outbound identification logic
4. Fixed some UI bugs
5. Fixed clippy reports
6. Fixed Test latency not working when using 'auto' in 'auto outbounds interface'
7. Fixed slow DNS lookups, ipv6 dns
8. Added a manual cleanup button in case the program isn't closed properly
9. Improving Log Readability
10. Fixed pinned-core divergences, surfaced dropped config warnings, hardened three silent paths, fixed the delete button and stale text.

Broccoli 0.2.1

What's Changed

• Name the failure as a literal, never as its payload (bba4986)
• Keep the credential out of the link diagnostics (ff1de85)
• Give the lifecycle one home for shutdown and the rollback takes (68e0fbd)
• Run the remaining oracles on the gate (bf1409e)
• Run the elevated and archive-backed oracles in CI (6d90210)
• State the latency-probe header's repro reason inline (3007998)
• Give the runtime's lifecycle one home, and the exit window one rule (c311605)
• Prove every validation code renders a sentence (3bf778a)
• Move the text standard into the test tree (632ef30)
• Decide the pin mode where a test can see it (2ff1121)
• Give the live-core suites one fixture, and let the workflow run them all (c5631b5)
• Gate the editor drafts and name the fields the tests reach (f9d5c3e)
• Give the log view model one door (3233089)
• Give the readiness clock one home (2c83a8c)
• Repair the defects the review found in the preceding refactors (f8af843)
• Give the runtime's event stream its own module, and the screen tests one fixture (1fdaf76)
• Give the screen tests one harness and publish the bounds they copied (8d818f7)
• Give the helper launch protocol one home and its wire one type (0264d63)
• Project the safety hazards once and let surfaces ask by field (506dd8c)
• Make the log view's decisions values instead of counters (7633f88)
• Bundling the frame's requests and giving screens one send verb (7abcb85)
• Give generation one control-plane preamble and one fact bundle (21cdd8a)
• Let the verdict answer the severity tier (9e07dd4)
• State the transport-block correspondence as one table (8e8b614)
• Give the profile dial graph one home (de3a1c8)
• Publish the backend transport with the phase, and stop re-deriving TUN state (ed538dd)
• Let the top bar own its row, its memos and the phase badge's wording (d594855)
• Publish the model generation and the snapshot types' own equality (a3a168a)
• Give the pinned-core open one decision at the payload pins (970aa97)
• Close the review findings on the preceding refactors (ee454a0)
• Let the text table carry its own placeholder contract (782f6a3)
• Give the rule set, the tag universe and the draft one home each (3064ed5)
• Finish the boot-fixture migration (01f503a)
• Drop the vocabulary nothing reads, and pin the action row by the facts it reads (c58c8f5)
• Restore the no-op transport toggle's busy line, and state the internal start's invariant (8aec275)
• Give the generated document's keys one home at its author (b7faea0)
• Publish the busy window as one value and state the refusal ladder once (b025028)
• Give the screen tests one boot fixture (e57f61b)
• Declare each exclusive job's busy reject with its rule, and let an apply verdict name its revision (55bd143)
• Return validation findings from the editor sweep, and give a field vocabulary one home (6619f71)
• Fix defects in persistence, teardown, the per-frame paths and FFI (e63251c)
• Delete the write-only metrics layer, keeping every guard it carried (7b56d66)
• Assert the caches where they live, and collapse two rules written twice (ae2c7cc)
• Hide the sockopt fields no Windows dialer can read (9e4951f)
• Pin the CodeQL action to v4.38.1, on a commit rather than a tag object (8deda5c)
• Decode the ACE bytes from the descriptor slice instead of the pointer (636e7f1)
• Read the ACE prefix of a protected DACL without a typed place on it (ba2e0a1)

Full Changelog: v0.2.0...v0.2.1

1. Fixed the issue reported by Miri
2. Hide options that are not available in Windows
3. Dropped the write-only performance counters, the app-boot test harnesses, and two duplicated rules.
4. Fix defects in persistence, teardown, the per-frame paths and FFI
    
5. Validation returns findings, and vocabularies, wire keys, busy state and save state each have one home.
6. Deepen the config, draft, share-link and job-fact seams: one owner per rule, tag set, draft, verb seam, share table, key contract and kind table.
7. refactor: the runtime's state and links given one home each; test-only modules moved to tests/; every ignored oracle now runs in CI

Broccoli 0.2.0

What's Changed

• Explain an empty inbound traffic table instead of rendering nothing (62e3b3f)
• Give the core one setup surface in two mounts, and keep the phase readable while an error stands (f9a53a2)
• Regenerate the runtime configuration for every spawn, and keep a verified core when a configuration fails (e76df40)
• Validate a candidate profile against a prepared snapshot, not its siblings' findings (2707e62)
• Choose the chain target from the profile list instead of typing a tag (87940f6)
• Mirror the core's parsers for VLESS encryption and the blackhole response type (ae6cc9c)
• Widen the chain-hazard warning and accept zone-scoped hop addresses (3603958)
• Bind the QUIC path-MTU switch, and tighten the hop advisory to what upstream reads (d50528c)
• Gate mask order, and add the QUIC switches, blackhole custom, realm and hysteria settings (9ef7100)
• Add the udphop mask, WireGuard remoteDNS, and routing localOS (db4f99c)
• Pin Xray core v26.9.9 and refresh the pin-carrying fixtures (6461208)
• Emit one chain-via spelling, retire the proxySettings key, and trim the REALITY fingerprint options (2f31494)

Full Changelog: v0.1.1...v0.2.0

1. Xray-core v26.7.28 -> v26.9.9
2. Added a core update mechanism
3. Fixed bugs encountered during updates

Broccoli 0.1.1

What's Changed

• Re-arm a repaint egui still owes so a lost wake cannot mute the app (20f5021)
• Bound the exit teardown so Quit cannot hang on a stalled system exit (558f7e9)
• Keep the resized window size when the session ends minimized (cbb2d6b)
• Stop loading the GL driver stack and the second CJK font copy (9a603d2)

Full Changelog: v0.1.0...v0.1.1

1. Reduced memory usage
2. Fixed some GUI issues

Broccoli 0.1.0

Initial release
https://www.virustotal.com/gui/file/e1852564115ae1d6a08e250e65f8eded9f6eef67a2e47f87b9f923adc6bb9fb5