Snapshot

Note

The snapshot version is for testing purposes only. It is not recommended for production use.

How to Install the Snapshot Version

1. Ensure you have uninstalled the previous version of the package.
2. Download and install the package from the Assets section below.

v2.6.5

Fixed

• Fixed duplicate tray icons caused by both Tauri configuration and application code creating a tray icon (fix #464).
• Fixed a potential crash when VPN progress messages contain printf-style format specifiers.

v2.6.4

Fixed

• Fixed gateway login MFA OTP retries sending duplicate passwd form fields, which could cause authentication to fail with HTTP 512 after 2.6.0 (fix #626).

v2.6.3

Fixed

• Fixed NixOS GUI launch authorization after package updates.
• Fixed disconnect handling so a normal Ctrl+C logout no longer reports an error.
• Fixed snapshot flake hash update automation for prebuilt Nix packages.

v2.6.2

Fixed

• Fixed gateway fallback browser authentication when external browser authentication is explicitly requested.
• Added logging for portal config default-browser behavior.
• Added GUI managed configuration support with gpgui.conf, including reset to managed config.
• Improved GUI config directory migration and managed license auto activation.

v2.6.1

Changed

• Improved external browser authentication so --browser chooses Chrome first, then Firefox, then the system default browser.
• Improved NixOS prebuilt package integration for launching helper binaries and desktop services.
• Updated the release process to publish GitHub release notes from the changelog.

Fixed

• Fixed NixOS GUI launch failures caused by package-local binary paths.
• Fixed NixOS tray icon setup documentation for GNOME desktops.
• Fixed browser authentication for portals that require a client certificate.
• Fixed release automation so Nix flake hash updates are run manually after release assets are available.

v2.6.0

Added

• Added automatic gateway selection with fallback to the next available gateway when early gateway connection steps fail.
• Added optional cookie cache support for faster reconnects.
• Added Microsoft Defender status reporting in HIP reports.
• Added support for portals that require client-side checks before connection.
• Added FreeBSD and OpenBSD package builds and release artifacts.
• Added build provenance attestations for release assets.

Changed

• Improved compatibility with official GlobalProtect client request behavior.
• Improved SAML authentication behavior in the embedded webview.
• Improved default browser authentication handling.
• Improved host identity consistency across authentication, connection, and HIP flows.
• Improved GUI gateway selection behavior and made the selection list more compact.
• Updated NixOS installation instructions.

Fixed

• Fixed a crash when opening settings on KDE/Wayland.
• Fixed browser authentication when gpclient is started with sudo.
• Fixed gateway fallback behavior when using gpauth | gpclient --cookie-on-stdin.
• Fixed inconsistent host ID handling between GUI, CLI, OpenConnect, and HIP.
• Fixed portal and gateway authentication cookie handling in several edge cases.
• Fixed GUI connection state issues around gateway switching and cached credentials.

v2.5.4

What's Changed

• Add Alpine/musl gpgui release assets for x86_64 and aarch64.
• Download the musl gpgui asset from gpgui-helper and release package builds on musl Linux.
• Keep existing glibc gpgui asset names unchanged for compatibility.

v2.5.3

Changes

• Fixed Linux systemd-resolved DNS routing when the VPN server does not provide split-DNS domains. In that case, the vendored vpnc-script now routes DNS through the VPN globally, matching the pre-2.5.2 behavior. Fixes #604.
• Added an info log that reports whether systemd-resolved is using server-provided split DNS or global VPN DNS routing.

Full Changelog: v2.5.2...v2.5.3

v2.5.2

• Experimental: GUI/CLI add session expiry warnings and support automatic session extension when allowed by the portal.
• GUI/CLI: expose additional OpenConnect connection options.
• Fix Linux packages to vendor the vpnc-script.
• Remove OpenConnect from the packaging dependency.
• Fix reconnect handling by preserving GlobalProtect cookie fields.
• Fix auth callback data parsing
• Improve NixOS packaging and user-level installation docs.
• Upgrade Rust, Tauri, Vite, frontend, and Rust dependencies.