Commit Graph

  • d3df3e9ea7 fix(frontend): keep node-reported values one URL path segment MHSanaei 2026-11-01 00:08:35 +01:00
  • daf5b16eda fix(wireguard): hold /0 allowedIPs to the overlap guard MHSanaei 2026-11-01 00:06:09 +01:00
  • d114845e44 fix(clients): store client group names trimmed MHSanaei 2026-11-01 00:03:48 +01:00
  • 376ab34c0f fix(clients): purge depleted clients by their exact usage key MHSanaei 2026-11-01 00:02:25 +01:00
  • 7907843941 fix(node): let a node change only the clients it alone hosts MHSanaei 2026-11-01 00:02:12 +01:00
  • f66e369e41 fix(node): keep pushed inbounds off the node host's own resources MHSanaei 2026-10-31 23:30:02 +01:00
  • e1950b7575 fix(amneziawg): bound the egress relay's UDP sessions as a whole MHSanaei 2026-10-31 15:20:50 +01:00
  • f988e9677f fix(amneziawg): cap port-forward relays and UDP sessions MHSanaei 2026-10-31 15:18:43 +01:00
  • ac896a9f95 fix(amneziawg): drop a removed client's flows before its address is reused MHSanaei 2026-10-31 15:10:32 +01:00
  • 0ea11e1643 fix(amneziawg): keep a port forward accepting after a failed accept MHSanaei 2026-10-31 15:06:34 +01:00
  • 53ee53ed9c fix(amneziawg): take a forwarded TCP connection's source from the request MHSanaei 2026-10-31 15:05:12 +01:00
  • 6d90dcfe0c fix(tuic): bound what unauthenticated connections cost MHSanaei 2026-10-31 15:03:21 +01:00
  • e51a32b045 fix(tuic): bound one client's connections and UDP relays MHSanaei 2026-10-31 14:59:20 +01:00
  • 838923058b fix(tuic): end a UDP response relay with its association MHSanaei 2026-10-31 14:55:29 +01:00
  • 5cf2ab4f69 fix(tuic): bound the timeout settings at a day MHSanaei 2026-10-31 14:53:20 +01:00
  • 425a2bbf08 fix(amneziawg): bound what a handshake allocates and the tunnel MTU MHSanaei 2026-10-31 14:50:18 +01:00
  • dcdc56c64b fix(traffic): stop adding capped counters in SQL MHSanaei 2026-10-31 14:41:12 +01:00
  • d69b924baf fix(wireguard): step over wide address claims when allocating MHSanaei 2026-10-31 14:35:01 +01:00
  • 351a01ff0c fix(clients): bound the auto-renew interval at a century MHSanaei 2026-10-31 14:32:31 +01:00
  • 47e9ef1a07 fix(sub): convert far expiry dates to Jalali in constant time MHSanaei 2026-10-31 14:28:18 +01:00
  • fe5d704d67 fix(api): cap the client traffic list a master pushes by entry count MHSanaei 2026-10-31 14:25:21 +01:00
  • 44a502a407 fix(clients): probe inbound settings with a short literal pattern MHSanaei 2026-10-31 14:24:28 +01:00
  • a69f2dee13 fix(node): keep a node's online and IP reports to its own clients MHSanaei 2026-10-31 14:14:01 +01:00
  • 4d27313c5e fix(node): give each node one push budget per traffic sync MHSanaei 2026-10-31 14:07:08 +01:00
  • d005d89a8b fix(node): settle each queued node reset on its own MHSanaei 2026-10-31 14:01:45 +01:00
  • 469758837a fix(node): reconcile the local core after node disables without forcing it MHSanaei 2026-10-31 10:44:59 +01:00
  • f67111a08a fix(traffic): keep enforcing limits when one inbound's settings are broken MHSanaei 2026-10-31 10:43:40 +01:00
  • a203056949 fix(node): rewrite a node's settings blob without decoding all of it MHSanaei 2026-10-31 10:39:13 +01:00
  • 8ca321138b fix(traffic): keep lifecycle statements under SQLite's variable limit MHSanaei 2026-10-31 10:34:35 +01:00
  • fd3fa86982 fix(node): drop a swept inbound's bookkeeping from the node runtime MHSanaei 2026-10-31 09:28:39 +00:00
  • d4b80b5d80 fix(node): merge each node inbound once and sweep what the node dropped MHSanaei 2026-10-31 09:26:31 +00:00
  • 87f3f54ea6 fix(node): bound the panel GUIDs a peer reports MHSanaei 2026-10-31 09:22:24 +00:00
  • 9cf8c87e8d fix(netsafe): give a guarded dial one time budget for every address MHSanaei 2026-10-31 09:19:54 +00:00
  • 5a1ea42785 fix(node): bound what a node's answers can cost the master MHSanaei 2026-10-31 09:19:51 +00:00
  • 08482154c2 fix(node): keep master requests on the node they were sent to MHSanaei 2026-10-31 09:14:57 +00:00
  • f1e1b0fb0c fix(i18n): publish the translation bundle only once it is complete MHSanaei 2026-10-31 09:11:54 +00:00
  • e3736564a3 perf(wirecodec): decode a config envelope into one buffer MHSanaei 2026-10-31 09:09:22 +00:00
  • cea69a4117 fix(api): accept config envelopes only on requests that carry a body MHSanaei 2026-10-31 09:09:06 +00:00
  • b1108a9e81 fix(web): match the WebSocket origin on scheme and port, not only host MHSanaei 2026-10-31 09:06:41 +00:00
  • ce532e8df7 fix(web): start a fresh session at login MHSanaei 2026-10-31 09:05:28 +00:00
  • 2e14a2a51a fix(web): refuse oversized login usernames before recording them MHSanaei 2026-10-31 09:04:27 +00:00
  • 8e8541a5d8 fix(web): count login attempts per address and while they are checked MHSanaei 2026-10-31 09:04:23 +00:00
  • 661a169045 fix(sub): bound what a remote routing profile renders to MHSanaei 2026-10-31 08:59:23 +00:00
  • 8359a0f72e fix(sub): keep every Clash scalar on its own line MHSanaei 2026-10-31 08:56:24 +00:00
  • 534afe13ab fix(sub): treat external subscription providers as untrusted input MHSanaei 2026-10-31 08:53:27 +00:00
  • 3cdb7e2b49 fix(traffic): keep client accounting independent of outbound counters MHSanaei 2026-10-31 08:46:13 +00:00
  • 61ee202750 fix(xray): bound what the in-process config loader is asked to expand MHSanaei 2026-10-31 08:43:30 +00:00
  • db20e491e6 fix(net): stop per-request clients parking connections to remote hosts MHSanaei 2026-10-31 08:32:58 +00:00
  • f1444bec3f fix(outbound): store subscription refreshes without trusting the row read MHSanaei 2026-10-31 08:31:03 +00:00
  • 2d72d9c715 fix(xray): check outbounds the way the core's handlers will MHSanaei 2026-10-31 08:23:24 +00:00
  • 1fa8cc785d fix(outbound): keep imported links to remote-server settings MHSanaei 2026-10-31 08:19:44 +00:00
  • 4167597a15 fix(database): replace the stored session secret once on upgrade MHSanaei 2026-10-31 08:10:36 +00:00
  • c621ba9014 v3.11.0 v3.11.0 MHSanaei 2026-10-25 20:08:14 +01:00
  • 7f82daa42f feat(finalmask): tlshello fragment presets for client editors MHSanaei 2026-10-25 15:54:53 +01:00
  • f992694712 feat(tls): cipher suite presets and a uTLS fingerprint warning MHSanaei 2026-10-25 15:54:48 +01:00
  • c3d4a153b3 fix(sub): pin fp=unsafe on links that carry cipher suites MHSanaei 2026-10-25 15:54:42 +01:00
  • 8eb58a4a14 perf(ip-sync): avoid redundant client IP reads and writes (#6930) Hamed 2026-10-25 16:43:18 +03:30
  • 952c1c751a perf(inbounds): batch client identities for stats enrichment (#6929) Hamed 2026-10-25 16:31:46 +03:30
  • be25314157 fix(monitoring): refresh cached public IP addresses (#6933) VAIO73 2026-10-25 13:50:29 +01:00
  • 56ac8d0fc7 feat(amneziawg): add opt-in Linux kernel datapath (#6877) YoungReckless4andMHSanaei 2026-10-25 15:24:50 +03:00
  • 4d6db99be8 fix(docker): ship the right Xray and mtg binaries on arm and 386 images MHSanaei 2026-10-25 11:44:15 +01:00
  • 39935ed9ef fix(tests): stabilize local network fixtures YoungReckless4 2026-10-22 14:23:13 +03:00
  • 96069e9393 perf(amneziawgnet): autotune the embedded TCP receive buffer up to 8 MB MHSanaei 2026-10-25 11:31:38 +01:00
  • 64a7697f56 perf(traffic): skip unchanged global writes between heartbeats (#6931) Hamed 2026-10-25 11:14:05 +03:30
  • 73fad424ed perf(sub): cache each inbound's settings without clients for subscription bodies (#6758) Шакирзянов Амир 2026-10-24 23:45:46 +03:00
  • 8da3b3c344 feat(hosts): give a host a pool of SNIs, random per config or shared (#6923) Pejman Yousefi 2026-10-24 22:35:42 +03:30
  • 14c9bdff89 refactor(frontend): read the panel's navigation from one route manifest (#6922) 25f2002654 2026-10-25 00:18:31 +05:30
  • 746bdbe9f4 fix(monitoring): read LXC CPU, swap and uptime from the container (#6920) VAIO73 2026-10-24 20:24:34 +02:00
  • 2c18cbe1cd fix(sub): close a deleted host binding only on the inbound it served MHSanaei 2026-10-24 20:07:55 +02:00
  • e8feb9d641 ci: run the Postgres suites that never ran and lint the shell (#6917) 25f2002654 2026-10-24 23:25:23 +05:30
  • 180cc37503 fix(xray): allow a private DoH server on the port Xray dials (#6918) Jay Hemnani 2026-10-24 23:10:00 +05:30
  • f105132866 perf(runtime): pool the local xray gRPC connection (#6916) 25f2002654 2026-10-24 23:00:09 +05:30
  • de21c128fc fix(storybook): hold the Storybook build to the app's chunk-size ceiling MHSanaei 2026-10-24 13:00:54 +02:00
  • a46bed383c fix(security): build the scanner image with the Go go.mod requires MHSanaei 2026-10-24 12:45:23 +02:00
  • 15fee2a035 feat(tgbot): rebuild the Telegram bot around editable screens and inline lists (#6760) DIMFLIX 2026-10-24 13:39:56 +03:00
  • bc1b750e00 feat(clients): bind host rules to individual clients in subscriptions (#6620) Nethmina Yasas 2026-10-24 16:03:02 +05:30
  • d103c0c012 fix(amneziawg): keep the fallback egress port below the panel's reserved ports MHSanaei 2026-10-24 12:23:24 +02:00
  • e66d18fe05 fix(sub): expand CIDR hosts in the hosts-first subscription order MHSanaei 2026-10-24 07:38:32 +02:00
  • 052b11d2bc feat(i18n): add the Slovak (sk-SK) panel locale (#6889) VAIO73 2026-10-24 07:35:28 +02:00
  • e0d2a0c58c fix(fallback): derive a linked fallback's PROXY protocol header from its child (#6880) Matt Van Horn 2026-10-23 22:30:09 -07:00
  • 136c1c4d50 feat(hosts): add drag-and-drop and global subscription ordering (#6895) Hamed 2026-10-24 08:57:47 +03:30
  • a69ae2b0ea test(tuic): retry until one port is free for both TCP and UDP MHSanaei 2026-10-24 07:20:16 +02:00
  • 0b90dc2bed feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838) Emma Hermione 2026-10-24 13:10:30 +08:00
  • 2b759f3916 feat(sub): export TLS cipher suites as the cs query param in share links (#6825) Rouzbeh 2026-10-24 06:44:24 +02:00
  • 3af0f81181 style(frontend): use the Telegram icon for the Telegram bot settings (#6848) Rashid Yusubov 2026-10-24 07:37:44 +03:00
  • 35e09191de feat(amneziawg): support persistent keepalive ranges (#6881) YoungReckless4 2026-10-24 07:36:49 +03:00
  • 207c705300 fix(tuic): preserve client identity for Xray user routing (#6875) Egor 2026-10-24 09:20:39 +05:00
  • 07910bf6c0 fix(outbound): dial IPv6 literals correctly in TCP probes (#6850) Hamed 2026-10-24 07:39:36 +03:30
  • 49c0600f35 fix(iplimit): keep recording client IPs with fail2ban disabled (#6830) clearlove13 2026-10-24 12:09:01 +08:00
  • 0729fc6dbb fix(sub): send no-store on every subscription route (#6862) Yuri Khachaturyan 2026-10-24 07:08:02 +03:00
  • f43645656c feat(tls): add a dynamic DoH helper for echConfigList, with CDN guidance (#6869) 55575455 2026-10-24 12:07:11 +08:00
  • 41bafb3fd5 feat(sub): make the host "Mihomo X25519" switch drop ML-KEM (#6803) Aleksey 2026-10-24 07:01:48 +03:00
  • a403faee23 feat(tgbot): route admin notifications to a forum topic (#6879) Tuyến Trần 2026-10-24 10:55:55 +07:00
  • 7d45456feb fix(tgbot): look up a Telegram account's clients through the indexed client table (#6887) Hamed 2026-10-24 07:25:19 +03:30
  • d2a0216e01 fix(web): install the share-link provider before the panel serves (#6914) 25f2002654 2026-10-24 09:20:46 +05:30
  • ad470681ef fix(web): stop clean shutdowns logging false errors, and let the panel stop its children (#6884) Rouzbeh† 2026-10-24 06:45:34 +03:30
  • 40cea0c2fe feat(sub): generate random IPs from CIDR host addresses (#6784) Pejman Yousefi 2026-10-24 06:43:44 +03:30
  • f6a233220a perf(auth): look up api tokens by their hash index (#6915) 25f2002654 2026-10-24 08:36:49 +05:30
  • 9f0f2b3802 fix(service): run inbound deletes and depleted-client purges on the serial traffic writer (#6912) 25f2002654 2026-10-24 08:36:03 +05:30
  • 5a135d2adb fix(inbounds): preserve formatting in the advanced JSON editor (#6857) Hamed 2026-10-24 06:24:19 +03:30