Shadowrocket

• feat(protocol): add Sudoku proxy protocol support and optimize data-path forwarding to reduce memory allocations and buffer copying
• feat(dns): support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules
• feat(tailscale): migrate login to TS2021, support subnet routing and exit nodes, and introduce low-power tunnel suspension on demand
• feat(protocol): support Clash SSH/packetaddr subscription imports
• feat(macos): add menu bar routing controls and quick server configurations for macOS
• feat(group): add an independent ping-based auto-sort option for policy groups
• perf(transport): handle KCP backpressure, harden WireGuard/Hysteria packet security, and restore full upload throughput on QUIC transports
• fix(vpn): prevent tunnel startup hangs, preserve local device connectivity, and prevent stale speedtests from resetting VPN states
• fix(dns): route host resolutions and QUIC endpoints through tunnel resolver, and reuse H2 addresses for H3 upgrades
• fix(tailscale): advertise disco keys for direct paths, respect custom DERP TLS verification, and fix battery drain when VPN is disconnected
• fix(rule): fix remote rule set refreshes, preserve quoted rewrite tokens during parsing/export, and guard compiled policy group updates
• fix(system): support WebKit scoped globals and fetch polyfills in scripts, and apply tombstone-based iCloud manifest to prevent configuration rollbacks
• fix(system): prevent WKWebView/JavaScriptCore teardown crashes and limit proxy stream memory growth to prevent OOM

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

• feat(tailscale): add global Tailscale tunnel, local MagicDNS resolution, and UI support for peer device, RTT, and config management
• perf(tailscale): optimize Tailscale power efficiency and stability, scheduling WireGuard ticks on demand and improving UDP socket recreation
• feat(masque): add MASQUE outbound proxy (H3 & H2 transport) with custom SNI/URI support, keepalive configuration, and logger gating
• feat(tls): add TLS ClientHello fingerprinting support and profile selection UI
• perf(network): optimize connection management for Mux, XHTTP, and Chain Sockets, supporting HTTP/2 graceful stream shutdown and resolving SOCKS5 UDP relay failures in chained proxy setups
• fix(dns): restore Bonjour and DNS-SD service discovery over VPN, centralize query retry scheduling, and optimize IPv6 PTR local resolution
• fix(ssh): avoid blocking multiplexed queues during handshake and correct UDPGW length calculations
• fix(protocol): enhance Mieru user hints and Clash parsing, correct Hysteria 2 stream closure, fix AmneziaWG magic header processing, and guard OpenConnect config updates
• perf(system): rewrite IPC message channel and encrypt status replies, fix WebKit runtime battery drain on iOS, unify HUD toasts, and add macOS/Catalyst certificate instructions
• chore(i18n): clean up and merge localized strings in Localizable.strings

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.