# LuLu changelog

> The free, open-source macOS firewall that blocks unauthorized outgoing connections.

- Vendor: Objective-See
- Category: Productivity
- Platforms: macOS
- Official site: https://objective-see.org/products/lulu.html
- Tracked by: What's New (https://whatsnew.fyi/product/lulu)
- Harvested from: GitHub (objective-see/LuLu)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### v4.5.1 — Version 4.5.1

- Date: 2026-08-05
- Version: v4.5.1
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.5.1
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.5.1
- Labels: Platforms: macOS

- **changed** — Improved 'Add Rules' window logic with better handling of deleted/invalid rules
- **changed** — Improved startup with new checkin logic to handle upgrade cases better

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.5.1
☑️ Improved 'Add Rules' window logic
Better handing of deleted/invalid rules.

☑️ Improved startup (#912)
New checkin logic to handle upgrade cases better.

🔐 Disk Image Hash (`SHA256`):
LuLu_4.5.1.dmg: `98F4D3427F4C6FCCF9680FED22879BE90A5AE81E80EB8616C1D758755B6BB624`

### v4.5.0 — Version 4.5.0

- Date: 2026-08-03
- Version: v4.5.0
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.5.0
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.5.0
- Labels: Platforms: macOS

- **added** — Add rule option for Process + Kids to apply a rule to a process and any children of it
- **changed** — Improve handling of no client by creating new rules that show up in Passively created rules in UI
- **changed** — Improve rule matching order for DNS and Apple Programs
- **changed** — Alert now remembers previous choices
- **changed** — Alert is now more likely to show domain on macOS 11 via flow.remoteHostname
- **changed** — Improve UI with Rules window live refresh
- **changed** — Improve localizations
- **changed** — Improve logic around importing rules
- **changed** — Improve handling of Simulator apps
- **changed** — Improve handling of glob and CIDR rules
- **changed** — Improve handling of Regex rules by anchoring them

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.5.0
☑️ New: Rule option for "Process + Kids" (#905)
If selected a rule will be created that will subsequently apply to the process, and any children of it.

☑️ Improved handling of "No client"
Now, when no user client is present, new rules are created, but will show up in "Passively created rules" in UI. 

☑️ Rule matching order improved (e.g. DNS for Apple Programs) 

☑️ Alert now remember previous choices (#910)
☑️ UI improvements (Rules window live refresh, etc.)
☑️ Alert now more likely to show domain (macOS 11, via `flow.remoteHostname`)

☑️ Improved localizations 
☑️ Improved logic around importing rules
☑️ Improved handling of Simulator apps (#893)
☑️ Improved handling of glob and CIDR rules (#885)
☑️ Improved handling of Regex rules (are now anchored).


🔐 Disk Image Hash (`SHA256`):
LuLu_4.5.0.dmg: `33B624CCF3640D2708993885E2AE7A266C3EC4EE0C3784DC9036E95368664CB1`

### v4.4.3 — Version v4.4.3

- Date: 2026-07-28
- Version: v4.4.3
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.4.3
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.4.3
- Labels: Platforms: macOS

- **fixed** — Fix decoder for rules format change that prevented LuLu Extension from starting

##### LuLu v4.4.3

☑️ Fix for #904 (LuLu Extension Not Starting) 
Part of the rules format changed, so decoder was updated.

🔐 Disk Image Hash (`SHA256`):
LuLu_4.4.3.dmg: `5C271AE161EC84ABAB9B430B647D20FA7DB09D9EF9113528788D8C33AB5475C0`

### v4.4.2 — Version 4.4.2

- Date: 2026-07-27
- Version: v4.4.2
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.4.2
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.4.2
- Labels: Platforms: macOS

- **fixed** — Fix for issue #904

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.4.2

☑️ Fix for #904

🔐 Disk Image Hash (`SHA256`):
LuLu_4.4.2.dmg: `93665CE8494524D4CF7312C3504A78C800CBA20D3998E2AEC1AA9E544A20238C`

### v4.4.1 — Version 4.4.1

- Date: 2026-07-27
- Version: v4.4.1
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.4.1
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.4.1
- Labels: Platforms: macOS

- **fixed** — Resume flows on disable
- **changed** — Improved block/allow list loading
- **changed** — Improved handling of temporarily allowed rules

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.4.1 

☑️ Resume flows on disable (#873)
☑️ Improved block/allow list loading (#881, #890)
☑️ Improved handling of "temporarily allowed" rules (#900)

🔐 Disk Image Hash (`SHA256`):
LuLu_4.4.1.dmg: `EE9C561705F646BB0F2CF2BA02484AFFAB6F18ADA44E09E4F0B426153FB59891`

### v4.4.0 — Version 4.4.0

- Date: 2026-06-17
- Version: v4.4.0
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.4.0
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.4.0
- Labels: Platforms: macOS

- **added** — Support for rules with glob (*), range (-), or CIDR (/) notation
- **added** — Once option in alert
- **changed** — Approved compatibility with Apple's code signing changes in macOS 26.6 / Golden Gate
- **changed** — UI rendering improvements
- **changed** — Improved handling of related / shown alerts
- **changed** — Refactoring of upgrade logic to avoid having to re-approve new system extension
- **fixed** — UI fixed for profile creation

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.4.0 

☑️  Approved compatibility with Apple's code signing changes in macOS 26.6 / Golden Gate (#883)

☑️  Support for rules with glob (*), range (-), or CIDR (/) notation (#885)
☑️  UI rendering improvements (aimed at addressing #884)
☑️  Improved handling of related / shown alerts (aimed at addressing #873)
☑️  Refactoring of upgrade logic, to avoid having to re-approve (new) system extension 
☑️  UI fixed for profile creation (#865)
☑️  "Once" option in alert

🔐 Disk Image Hash (`SHA256`):
LuLu_4.4.0.dmg: `C9F8C669A7B4E3FF33BD1DF224A65451989142E678D4A3CFF3DB8C3DEB62BCA9`

### v4.3.2 — Version 4.3.2

- Date: 2026-05-03
- Version: v4.3.2
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.3.2
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.3.2
- Labels: Platforms: macOS

- **changed** — Improved localizations
- **changed** — Improved memory usage
- **fixed** — Fixed UI issue preventing profile creation

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.3.2

☑️ Improved localizations (#830, #863)
☑️ Improved memory usage (#858, #859, #873)
☑️ Fixed UI issue preventing profile creation (#865, #871)

---

🔐 Disk Image Hash (`SHA256`):
LuLu_4.3.2.dmg: `651D85539CB7008B33B8571215A8B8040F4F26D77306675E9C8972294A80F541`

### v4.3.1 — Version 4.3.1

- Date: 2026-03-17
- Version: v4.3.1
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.3.1
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.3.1
- Labels: Platforms: macOS

- **fixed** — Fixed issue process related flows
- **changed** — Double click on Rule's row now brings up 'Edit Rule' window

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.3.1

☑️ Fixed issue process related flows (#846, #845, #842)
☑️ Double click on Rule's row now brings up 'Edit Rule' window (#843 #827)

---

🔐 Disk Image Hash (`SHA256`):
LuLu_4.3.1.dmg: `CC0366527F1F4123295FD13329A08031A660AFD256076DDAB03E6074365CEF93`

### v4.3.0 — Version 4.3.0

- Date: 2026-03-14
- Version: v4.3.0
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.3.0
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.3.0
- Labels: Platforms: macOS

- **changed** — Improved handling of related flows
- **added** — Add localhost filtering setting to allow disabling default allowance of all localhost traffic and enable rules for applications communicating with local services

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.3.0

☑️ Improved handling of related flows (#816/#616) 
Mahalo @jhult 🙏🏽 

☑️ Localhost filtering (#809, #430, #371 #55)
By default, LuLu allows all localhost traffic. A new setting allows this behavior to be disabled, enabling rules for applications communicating with local services (e.g., a proxy).

---

🔐 Disk Image Hash (`SHA256`):
LuLu_4.3.0.dmg: `F123F9B8D126FDFAFE17297040F54377AAD402CA5BD848D8080F33C436995BFD`

### v4.2.1 — Version 4.2.1

- Date: 2026-02-01
- Version: v4.2.1
- Original notes: https://github.com/objective-see/LuLu/releases/tag/v4.2.1
- Permalink: https://whatsnew.fyi/product/lulu/releases/v4.2.1
- Labels: Platforms: macOS

- **changed** — Rule duration is now relative rather than a fixed end time
- **added** — User-created rules can now be exported and imported
- **changed** — Flows associated with processes that have exited are now denied
- **changed** — UI improvements

🆕 You can now sponsor **LuLu**/**Objective-See Foundation**:

[![](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&color=%23fe8e86)](https://github.com/sponsors/objective-see)

##### LuLu v4.2.1

☑️ UI Improvements  #812, etc.

☑️ Rule duration, now relative (rather than a fixed end time) #811, #813

☑️ Rules subset (user-created rules) can now be exported/imported #814

☑️ Flows associated with processes that have exited, now denied (mahalo Igor) 

🔐 Disk Image Hash (`SHA256`):
LuLu_4.2.1.dmg: `ED580410F38E8CC8F17CD4724182F9B7A6BBB1524797FF8E8019428A285244A0`