Releases: Chilledheart/yass
Post Quantum Kyber Support (M126)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options. This option will be enabled by default in the future (M128).
Caddy HTTPS protocol support
Caddy's HTTPS protocol is compatible from release 1.10.3 and 1.9.7.
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Notarized macOS releases
macOS releases from 1.5.19 are notarized. Please note the dmg suffixed with -unsigned
is not.
MinGW Build (alias Window Build)
MinGW 64-bit releases from 1.6.5 and 1.7.1 no longer require Visual C++ 2010 Runtime.
For XP SP3 Users, please use 32-bit releases and install Visual C++ 2010 x86 Runtime.
Supplementary support for missing ISRG (Let's Encrypt Root) on some Windows 11 Installation and Android prior to 7.1.1
Releases from 1.5.25 and 1.6.4 fixes an issue that ISRG Root 1 and ISRG Root 2 might be missing in some machines and that causes troubles.
What's Changed
- net: support socks-style cipher by @Chilledheart in #945
- ios: use NetworkPathMonitor by @Chilledheart in #946
- Bump chromium 126 dependents by @Chilledheart in #947
- harmony: update for sdk api level 11 by @Chilledheart in #949
- core: update rand_util_win by @Chilledheart in #950
- net: support username/password auth for socks5 cipher by @Chilledheart in #951
- bump nghttp2 to v1.62.0 by @Chilledheart in #952
- gtk: update po files by @Chilledheart in #953
- cli: handle keep-alive for http proxy properly by @Chilledheart in #955
- cli: resolve domain name locally for sock4/socks5 on demand by @Chilledheart in #956
- net: return http version correctly by @Chilledheart in #958
- net: don't call send in recv callback (nghttp2) by @Chilledheart in #959
- net: handle submit request failure by @Chilledheart in #960
- net: send any pending writes if possible by @Chilledheart in #961
- net: reduce memory footprint peak and cpu peak by @Chilledheart in #962
- cmake: add basic ctest support by @Chilledheart in #963
- gh actions: use xcode 15.4 for mac/ios builds by @Chilledheart in #964
- gh actions: replace fedora 38 with fedora 39 by @Chilledheart in #965
- net: detect DigiCert Global Root G2 ca by @Chilledheart in #966
- mingw: add missing manifests for cli/server by @Chilledheart in #968
- ssl: add load ca tests by @Chilledheart in #969
- windows: attach parent's console if current is unavailable by @Chilledheart in #971
- gh actions: use cmake 3.28.5 for deb packaging by @Chilledheart in #972
- gh actions: replace with alpine3.20 by @Chilledheart in #973
- build: generate subtag suffix correctly by @Chilledheart in #974
- gh actions: use cmake 3.28.5 if possible by @Chilledheart in #975
- freebsd: don't build with builtin ca bundle by @Chilledheart in #976
- mac: bring to front on startup/recover by @Chilledheart in #977
- android: return to parent activity correctly by @Chilledheart in #978
- linux: use mold linker for prebuilt binaries by @Chilledheart in #979
- net: add modp_b64 by @Chilledheart in #980
- net: allow empty authorization for http by @Chilledheart in #981
- net: support https protocol via caddy by @Chilledheart in #982
Full Changelog: https://github.com/Chilledheart/yass/compare/1.9.5..1.10.3
Post Quantum Kyber Support (M125)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options.
Caddy HTTPS protocol support
Caddy's HTTPS protocol is compatible from release 1.10.3 and 1.9.7.
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use x86 installer or x64 installer.
What's Changed
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- Bump chromium 125 dependents by @Chilledheart in #893
- debian: use system zlib library (trivial) by @Chilledheart in #894
- win32: support logging to command line by @Chilledheart in #895
- build: make quiche optional by @Chilledheart in #896
- bump quiche to match chromium 125.0.6419.1 by @Chilledheart in #897
- config: restrict logging usage inside by @Chilledheart in #898
- net: add io uring support by @Chilledheart in #901
- ci: use clang 17 instead of 16 by @Chilledheart in #902
- core: use constexpr string literals by @Chilledheart in #903
- concept: use StartClosableConnection by @Chilledheart in #904
- net: fix silence crash similar to CVE-2024-32475 by @Chilledheart in #905
- Quiche update override headers by @Chilledheart in #906
- gtk4: fix broken alert dialog on failure by @Chilledheart in #907
- core: reject zero server port by @Chilledheart in #908
- android: show alert dialog on failure by @Chilledheart in #909
- security: don't print password in plaintext by @Chilledheart in #910
- tcmalloc: switch to gperftools by @Chilledheart in #911
- tcmalloc: fix broken linkage by @Chilledheart in #912
- tcmalloc: add build-only support windows by @Chilledheart in #913
- rpm: use system tcmalloc for fedora by @Chilledheart in #914
- build: deduplicate yass_cli object library by @Chilledheart in #915
- core: refine ExpandUser by @Chilledheart in #916
- logging: support drop_log_memory for freebsd by @Chilledheart in #917
- core: drop SetUTF8Locale by @Chilledheart in #918
- core: drop icu support by @Chilledheart in #919
- net: improve SplitHostPort and isVersionValid by @Chilledheart in #920
- core: improve ReadFileToBuffer with span by @Chilledheart in #921
- tls: fix broken --certificate_chain_file flag by @Chilledheart in #923
- tls: add --enable_post_quantum_kyber option by @Chilledheart in #924
- core: set LC_NUMERIC to C by @Chilledheart in #925
- tls: load from/save to persistent config by @Chilledheart in #926
- tls: implement private_key_password by @Chilledheart in #927
- bump clang to match chromium 125.0.6422.0 by @Chilledheart in #928
- ca-certificates: update for 20240203.3.98 release by @Chilledheart in #929
- rust: bump to 1.78.0 by @Chilledheart in #930
- Update Crashpad to 1cea0473 by @Chilledheart in #932
- server: add server field in http2 response by @Chilledheart in #933
- server: fix asan error with nghttp by @Chilledheart in #934
- ui: add enable_post_quatumn_kyber button by @Chilledheart in #936
- gh actions: build loongarch64 gui variant by @Chilledheart in #937
- linux: roll sysroots with gtk4 support by @Chilledheart in #939
- android: add post quantum kyber option by @Chilledheart in #941
- ios: add add post quantum kyber in settings by @Chilledheart in #942
- 6d3285d net: support socks-style cipher
- 823b926 ios: use NetworkPathMonitor
- c724991 gh actions: android uses ndk 26 (latest)
- b35a515 core: update rand_util_win
- 0e383e2 net: support username/password auth for socks5 cipher
- 29c0b7c gtk: update po files
- 27b7c2c net: option congestion_algorithm is valid for linux only
- e215bf1 net: change congestion_algorithm default value to empty
- 61c1ba3 cli: handle keep-alive for http proxy properly
- 244cb33 cli: resolve domain name locally for sock4/socks5 on demand
- 667ec96 net: return http version correctly
- 51a1ad3 cli: handle with chunk tranfer encoding properly
- 6807332 net: don't call send in recv callback (nghttp2)
- f9452aa net: handle submit request failure
- 5482168 net: send any pending writes if possible
- d5daa92 net: improve buffer to 16k
- a9ae001 net: reduce memory footprint peak and cpu peak
- 33303df scripts: add ubuntu 24.04 label
- 69310f0 cmake: add basic ctest support
- 79241d2 net: detect DigiCert Global Root G2 ca as well
- 387e650 net: fix dos line ending issue in mingw/windows build
- 5a3c4ac mingw: add missing manifests for cli/server
- 2122a6c mingw: add missing manifests for test/benchmark
- 11f3ca3 ssl: add load ca tests
- be48dde openwrt: depends on ca-certificates
- 384a06e android: fix some issues with tmpdir
- c6a9624 windows: attach parent's console if current is unavailable
- 99bd26a build: generate subtag suffix correctly
- 7193d9e freebsd: don't build with builtin ca bundle
- e618364 mac: bring to front on startup/recover
- dc66778 android: return to parent activity correctly
- d094922 linux: use mold linker for prebuilt binaries
- 1b989e7 net: add modp_b64
- 64fb9aa net: allow empty authorization for http
- e6148d4 net: support https protocol via caddy
Full Changelog: 1.8.3...1.9.7
Post Quantum Kyber Support (M126)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options. This option will be enabled by default in the future (M128).
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Notarized macOS releases
macOS releases from 1.5.19 are notarized. Please note the dmg suffixed with -unsigned
is not.
MinGW Build (alias Window Build)
MinGW 64-bit releases from 1.6.5 and 1.7.1 no longer require Visual C++ 2010 Runtime.
For XP SP3 Users, please use 32-bit releases and install Visual C++ 2010 x86 Runtime.
Supplementary support for missing ISRG (Let's Encrypt Root) on some Windows 11 Installation and Android prior to 7.1.1
Releases from 1.5.25 and 1.6.4 fixes an issue that ISRG Root 1 and ISRG Root 2 might be missing in some machines and that causes troubles.
What's Changed
- net: support socks-style cipher by @Chilledheart in #945
- ios: use NetworkPathMonitor by @Chilledheart in #946
- Bump chromium 126 dependents by @Chilledheart in #947
- harmony: update for sdk api level 11 by @Chilledheart in #949
- core: update rand_util_win by @Chilledheart in #950
- net: support username/password auth for socks5 cipher by @Chilledheart in #951
- bump nghttp2 to v1.62.0 by @Chilledheart in #952
- gtk: update po files by @Chilledheart in #953
- cli: handle keep-alive for http proxy properly by @Chilledheart in #955
- cli: resolve domain name locally for sock4/socks5 on demand by @Chilledheart in #956
- net: return http version correctly by @Chilledheart in #958
- net: don't call send in recv callback (nghttp2) by @Chilledheart in #959
- net: handle submit request failure by @Chilledheart in #960
- net: send any pending writes if possible by @Chilledheart in #961
- net: reduce memory footprint peak and cpu peak by @Chilledheart in #962
- cmake: add basic ctest support by @Chilledheart in #963
- gh actions: use xcode 15.4 for mac/ios builds by @Chilledheart in #964
- gh actions: replace fedora 38 with fedora 39 by @Chilledheart in #965
- net: detect DigiCert Global Root G2 ca by @Chilledheart in #966
- mingw: add missing manifests for cli/server by @Chilledheart in #968
- ssl: add load ca tests by @Chilledheart in #969
- windows: attach parent's console if current is unavailable by @Chilledheart in #971
Full Changelog: https://github.com/Chilledheart/yass/compare/1.9.5..1.10.2
Post Quantum Kyber Support (M126)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options.
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
MinGW Build (alias Window Build)
MinGW 64-bit releases from 1.6.5 and 1.7.1 no longer require Visual C++ 2010 Runtime.
For XP SP3 Users, please use 32-bit releases and install Visual C++ 2010 x86 Runtime.
What's Changed
- net: support socks-style cipher by @Chilledheart in #945
- ios: use NetworkPathMonitor by @Chilledheart in #946
- Bump chromium 126 dependents by @Chilledheart in #947
- harmony: update for sdk api level 11 by @Chilledheart in #949
- core: update rand_util_win by @Chilledheart in #950
- net: support username/password auth for socks5 cipher by @Chilledheart in #951
- bump nghttp2 to v1.62.0 by @Chilledheart in #952
- gtk: update po files by @Chilledheart in #953
- cli: handle keep-alive for http proxy properly by @Chilledheart in #955
- cli: resolve domain name locally for sock4/socks5 on demand by @Chilledheart in #956
- net: return http version correctly by @Chilledheart in #958
- net: don't call send in recv callback (nghttp2) by @Chilledheart in #959
- net: handle submit request failure by @Chilledheart in #960
- net: send any pending writes if possible by @Chilledheart in #961
Full Changelog: https://github.com/Chilledheart/yass/compare/1.9.5..1.10.1
Post Quantum Kyber Support (M125)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options.
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use x86 installer or x64 installer.
What's Changed
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- Bump chromium 125 dependents by @Chilledheart in #893
- debian: use system zlib library (trivial) by @Chilledheart in #894
- win32: support logging to command line by @Chilledheart in #895
- build: make quiche optional by @Chilledheart in #896
- bump quiche to match chromium 125.0.6419.1 by @Chilledheart in #897
- config: restrict logging usage inside by @Chilledheart in #898
- net: add io uring support by @Chilledheart in #901
- ci: use clang 17 instead of 16 by @Chilledheart in #902
- core: use constexpr string literals by @Chilledheart in #903
- concept: use StartClosableConnection by @Chilledheart in #904
- net: fix silence crash similar to CVE-2024-32475 by @Chilledheart in #905
- Quiche update override headers by @Chilledheart in #906
- gtk4: fix broken alert dialog on failure by @Chilledheart in #907
- core: reject zero server port by @Chilledheart in #908
- android: show alert dialog on failure by @Chilledheart in #909
- security: don't print password in plaintext by @Chilledheart in #910
- tcmalloc: switch to gperftools by @Chilledheart in #911
- tcmalloc: fix broken linkage by @Chilledheart in #912
- tcmalloc: add build-only support windows by @Chilledheart in #913
- rpm: use system tcmalloc for fedora by @Chilledheart in #914
- build: deduplicate yass_cli object library by @Chilledheart in #915
- core: refine ExpandUser by @Chilledheart in #916
- logging: support drop_log_memory for freebsd by @Chilledheart in #917
- core: drop SetUTF8Locale by @Chilledheart in #918
- core: drop icu support by @Chilledheart in #919
- net: improve SplitHostPort and isVersionValid by @Chilledheart in #920
- core: improve ReadFileToBuffer with span by @Chilledheart in #921
- tls: fix broken --certificate_chain_file flag by @Chilledheart in #923
- tls: add --enable_post_quantum_kyber option by @Chilledheart in #924
- core: set LC_NUMERIC to C by @Chilledheart in #925
- tls: load from/save to persistent config by @Chilledheart in #926
- tls: implement private_key_password by @Chilledheart in #927
- bump clang to match chromium 125.0.6422.0 by @Chilledheart in #928
- ca-certificates: update for 20240203.3.98 release by @Chilledheart in #929
- rust: bump to 1.78.0 by @Chilledheart in #930
- Update Crashpad to 1cea0473 by @Chilledheart in #932
- server: add server field in http2 response by @Chilledheart in #933
- server: fix asan error with nghttp by @Chilledheart in #934
- ui: add enable_post_quatumn_kyber button by @Chilledheart in #936
- gh actions: build loongarch64 gui variant by @Chilledheart in #937
- linux: roll sysroots with gtk4 support by @Chilledheart in #939
- android: add post quantum kyber option by @Chilledheart in #941
- ios: add add post quantum kyber in settings by @Chilledheart in #942
- 6d3285d net: support socks-style cipher
- 823b926 ios: use NetworkPathMonitor
- c724991 gh actions: android uses ndk 26 (latest)
- b35a515 core: update rand_util_win
- 0e383e2 net: support username/password auth for socks5 cipher
- 29c0b7c gtk: update po files
- 27b7c2c net: option congestion_algorithm is valid for linux only
- e215bf1 net: change congestion_algorithm default value to empty
- 61c1ba3 cli: handle keep-alive for http proxy properly
- 244cb33 cli: resolve domain name locally for sock4/socks5 on demand
- 667ec96 net: return http version correctly
- 51a1ad3 cli: handle with chunk tranfer encoding properly
- 6807332 net: don't call send in recv callback (nghttp2)
- f9452aa net: handle submit request failure
- 5482168 net: send any pending writes if possible
- d5daa92 net: improve buffer to 16k
Full Changelog: 1.8.3...1.9.6
Post Quantum Kyber Support (M126)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options.
Experimental SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
MinGW Build (alias Window Build)
MinGW 64-bit releases from 1.6.5 and 1.7.1 no longer require Visual C++ 2010 Runtime.
For XP SP3 Users, please use 32-bit releases and install Visual C++ 2010 x86 Runtime.
What's Changed
- net: support socks-style cipher by @Chilledheart in #945
- ios: use NetworkPathMonitor by @Chilledheart in #946
- Bump chromium 126 dependents by @Chilledheart in #947
- harmony: update for sdk api level 11 by @Chilledheart in #949
- core: update rand_util_win by @Chilledheart in #950
- net: support username/password auth for socks5 cipher by @Chilledheart in #951
- bump nghttp2 to v1.62.0 by @Chilledheart in #952
- gtk: update po files by @Chilledheart in #953
Full Changelog: https://github.com/Chilledheart/yass/compare/1.9.5..1.10.0
Post Quantum Kyber Support (M125)
Post Quantum Kyber Support
Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
There is no changes in default options.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use x86 installer or x64 installer.
What's Changed
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- Bump chromium 125 dependents by @Chilledheart in #893
- debian: use system zlib library (trivial) by @Chilledheart in #894
- win32: support logging to command line by @Chilledheart in #895
- build: make quiche optional by @Chilledheart in #896
- bump quiche to match chromium 125.0.6419.1 by @Chilledheart in #897
- config: restrict logging usage inside by @Chilledheart in #898
- net: add io uring support by @Chilledheart in #901
- ci: use clang 17 instead of 16 by @Chilledheart in #902
- core: use constexpr string literals by @Chilledheart in #903
- concept: use StartClosableConnection by @Chilledheart in #904
- net: fix silence crash similar to CVE-2024-32475 by @Chilledheart in #905
- Quiche update override headers by @Chilledheart in #906
- gtk4: fix broken alert dialog on failure by @Chilledheart in #907
- core: reject zero server port by @Chilledheart in #908
- android: show alert dialog on failure by @Chilledheart in #909
- security: don't print password in plaintext by @Chilledheart in #910
- tcmalloc: switch to gperftools by @Chilledheart in #911
- tcmalloc: fix broken linkage by @Chilledheart in #912
- tcmalloc: add build-only support windows by @Chilledheart in #913
- rpm: use system tcmalloc for fedora by @Chilledheart in #914
- build: deduplicate yass_cli object library by @Chilledheart in #915
- core: refine ExpandUser by @Chilledheart in #916
- logging: support drop_log_memory for freebsd by @Chilledheart in #917
- core: drop SetUTF8Locale by @Chilledheart in #918
- core: drop icu support by @Chilledheart in #919
- net: improve SplitHostPort and isVersionValid by @Chilledheart in #920
- core: improve ReadFileToBuffer with span by @Chilledheart in #921
- tls: fix broken --certificate_chain_file flag by @Chilledheart in #923
- tls: add --enable_post_quantum_kyber option by @Chilledheart in #924
- core: set LC_NUMERIC to C by @Chilledheart in #925
- tls: load from/save to persistent config by @Chilledheart in #926
- tls: implement private_key_password by @Chilledheart in #927
- bump clang to match chromium 125.0.6422.0 by @Chilledheart in #928
- ca-certificates: update for 20240203.3.98 release by @Chilledheart in #929
- rust: bump to 1.78.0 by @Chilledheart in #930
- Update Crashpad to 1cea0473 by @Chilledheart in #932
- server: add server field in http2 response by @Chilledheart in #933
- server: fix asan error with nghttp by @Chilledheart in #934
- ui: add enable_post_quatumn_kyber button by @Chilledheart in #936
- gh actions: build loongarch64 gui variant by @Chilledheart in #937
- linux: roll sysroots with gtk4 support by @Chilledheart in #939
- android: add post quantum kyber option by @Chilledheart in #941
- ios: add add post quantum kyber in settings by @Chilledheart in #942
Full Changelog: 1.8.3...1.9.5
Post Quantum Kyber Support (M124)
Post Quantum Kyber Support
Starting with release 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Suppot
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use [x86 installer][vs2010_x86] or [x64 installer][vs2010_x64].
What's Changed
- Bump chromium 124 dependents by @Chilledheart in #839
- doh: loose test cases incase of timed out event by @Chilledheart in #840
- doh: add gui and cli support by @Chilledheart in #841
- worker: don't cache dns results by @Chilledheart in #843
- harmony: add doh support by @Chilledheart in #844
- abseilcpp: silence compiler warning on msvc by @Chilledheart in #845
- core: use constexpr const by @Chilledheart in #846
- bump icu to match chromium 124.0.6364.1 by @Chilledheart in #847
- gh src bots: generate bz2 tarball as well by @Chilledheart in #848
- win32: fix broken port flag after upgrade by @Chilledheart in #849
- bump chromium components up to 124.0.6367.6 by @Chilledheart in #853
- zlib: add riscv64 simd optimization by @Chilledheart in #855
- harmony: fix display layout by @Chilledheart in #856
- ui: don't allow field changing once starting by @Chilledheart in #857
- doh: add more loggings by @Chilledheart in #858
- doh: fix possible memory leak by @Chilledheart in #859
- doh: handle localhost as special domain name by @Chilledheart in #860
- gh actions: don't install deb package on cache hit by @Chilledheart in #861
- ui: add starting/stopping state by @Chilledheart in #862
- doh: support handle fragmented dns response by @Chilledheart in #863
- gui: fix display wrong address in status once started by @Chilledheart in #864
- zstd: bump to version 1.56 by @Chilledheart in #867
- rust: bump to 1.77.0 by @Chilledheart in #868
- tun2proxy: don't use global context by @Chilledheart in #869
- tun2proxy: fix crash when shutting down by @Chilledheart in #870
- mbedtls: bump to 3.6.0 by @Chilledheart in #871
- rust: bump to 1.77.1 by @Chilledheart in #872
- Update Crashpad to c4d4a4d83e86 by @Chilledheart in #873
- gh actions: use xcode 15.3 by @Chilledheart in #875
- build: fix some missing flags in minsizerel build and fortify: use level 3 for release build by @Chilledheart in #877
- openwrt: release a72 and aarch64 generic binary by @Chilledheart in #879
- nghttp2: Fix (nghttp2) CVE-2024-30255 by @Chilledheart in #880
- nghttp2: Fix (nghttp2) CVE-2024-30255 by @Chilledheart in #881
- gh actions: add loongarch64 bot by @Chilledheart in #882
- gh actions: add riscv64 bot by @Chilledheart in #883
- core: fix RelWithDebInfo build by @Chilledheart in #884
- gh actions: add riscv32 bot by @Chilledheart in #885
- dot: implement functionality (DNS over TLS) by @Chilledheart in #886
- ui: add dot support by @Chilledheart in #887
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- 606b685 - net: fix silence crash similar to CVE-2024-32475 (52 minutes ago)
- cae5f12 - concept: use StartClosableConnection (80 minutes ago)
- fdd1ce6 - core: use constexpr string literals (24 hours ago)
- bc231e6 - ci: use clang 17 instead of 16 (2 days ago)
- 1ecf193 - net: add io uring support (3 days ago)
- 8170513 - config: restrict logging usage inside (4 days ago)
- c525135 - build: make quiche optional (5 days ago)
- 263c2da - tls: fix broken --certificate_chain_file flag (2 minutes ago)
- cc641ff - core: improve ReadFileToBuffer with span (3 minutes ago)
- ead2a67 - net: improve split host port (24 hours ago)
- b640c83 - net: improve isVersionValid (24 hours ago)
- 0bc3103 - net: improve SplitHostPort with gurl impl (24 hours ago)
- 795c6c6 - core: drop icu support (29 hours ago)
- b712a35 - core: drop SetUTF8Locale (3 days ago)
- 0efc15e - win32: support logging to command line (3 days ago)
- 63ffa9b - logging: support drop_log_memory for freebsd (3 days ago)
- 04ca9c8 - win32: refine autostart read calls (3 days ago)
- 763c485 - core: refine ExpandUser (3 days ago)
- 1380cdb - concepts: add BasicConnection (4 days ago)
- 8b49d01 - build: deduplicate yass_cli object library (4 days ago)
- 1ab38a4 - dot/doh: enable ios and android tests (verified) (5 days ago)
- 261a45f - rpm: add tests_dns option (5 days ago)
- f7bab04 - harmony: fix translation of the message on failure (7 days ago)
- 04ef085 - security: don't print password in plaintext (7 days ago)
- 2838603 - android: show alert dialog on failure (7 days ago)
- 55d635b - core: reject zero server port (7 days ago)
- e470d84 - gtk4: fix broken alert dialog on failure (7 days ago)
- df2df2e - ios: logging to stderr (fix) (9 days ago)
- 65ffda9 - harmony: logging to stderr (9 days ago)
- c2eb338 - android: logging to stderr (9 days ago)
- 06c7c47 - ios: logging to stderr (10 days ago)
- 4dc3c0d - core: use more precise location for log directory (10 days ago)
- 9890c1a - rpm: fix a typo in changelog (10 days ago)
- d43394c - ca-certificates: update for 20240203.3.98 release (8 minutes ago)
- bbdcba2 - tls: implement private_key_password (8 minutes ago)
- 20723f4 - tls: load from/save to persistent config (8 minutes ago)
- cb2d820 - core: set LC_NUMERIC to C (29 hours ago)
- 205f304 - tls: add --enable_post_quantum_kyber option (31 hours ago)
- fdd55a7 - ios: add add post quantum kyber in settings (5 minutes ago)
- 3829e18 - android: add post quantum kyber option (3 hours ago)
- 91ec11d - linux: roll sysroots with gtk4 support (26 hours ago)
- 144c751 - gh actions: build loongarch64 gui variant (29 hours ago)
- b109550 - ui: add enable_post_quatumn_kyber button (2 days ago)
- 7e70bf5 - server: fix asan error with nghttp (2 days ago)
- 59a754f - server: add server header in...
Post Quantum Kyber Support (M125)
Post Quantum Kyber Support (Desktop Platforms only)
Starting with release 1.9.4, Post Quantum Kyber Support is added on all of Desktop Platforms. You can enable it via Options Dialog manually.
There is no changes in default options.
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use x86 installer or x64 installer.
What's Changed
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- Bump chromium 125 dependents by @Chilledheart in #893
- debian: use system zlib library (trivial) by @Chilledheart in #894
- win32: support logging to command line by @Chilledheart in #895
- build: make quiche optional by @Chilledheart in #896
- bump quiche to match chromium 125.0.6419.1 by @Chilledheart in #897
- config: restrict logging usage inside by @Chilledheart in #898
- net: add io uring support by @Chilledheart in #901
- ci: use clang 17 instead of 16 by @Chilledheart in #902
- core: use constexpr string literals by @Chilledheart in #903
- concept: use StartClosableConnection by @Chilledheart in #904
- net: fix silence crash similar to CVE-2024-32475 by @Chilledheart in #905
- Quiche update override headers by @Chilledheart in #906
- gtk4: fix broken alert dialog on failure by @Chilledheart in #907
- core: reject zero server port by @Chilledheart in #908
- android: show alert dialog on failure by @Chilledheart in #909
- security: don't print password in plaintext by @Chilledheart in #910
- tcmalloc: switch to gperftools by @Chilledheart in #911
- tcmalloc: fix broken linkage by @Chilledheart in #912
- tcmalloc: add build-only support windows by @Chilledheart in #913
- rpm: use system tcmalloc for fedora by @Chilledheart in #914
- build: deduplicate yass_cli object library by @Chilledheart in #915
- core: refine ExpandUser by @Chilledheart in #916
- logging: support drop_log_memory for freebsd by @Chilledheart in #917
- core: drop SetUTF8Locale by @Chilledheart in #918
- core: drop icu support by @Chilledheart in #919
- net: improve SplitHostPort and isVersionValid by @Chilledheart in #920
- core: improve ReadFileToBuffer with span by @Chilledheart in #921
- tls: fix broken --certificate_chain_file flag by @Chilledheart in #923
- tls: add --enable_post_quantum_kyber option by @Chilledheart in #924
- core: set LC_NUMERIC to C by @Chilledheart in #925
- tls: load from/save to persistent config by @Chilledheart in #926
- tls: implement private_key_password by @Chilledheart in #927
- bump clang to match chromium 125.0.6422.0 by @Chilledheart in #928
- ca-certificates: update for 20240203.3.98 release by @Chilledheart in #929
- rust: bump to 1.78.0 by @Chilledheart in #930
- Update Crashpad to 1cea0473 by @Chilledheart in #932
- server: add server field in http2 response by @Chilledheart in #933
- server: fix asan error with nghttp by @Chilledheart in #934
- ui: add enable_post_quatumn_kyber button by @Chilledheart in #936
Full Changelog: 1.8.3...1.9.4
NaïveProxy protocol Support (M125)
Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Fix disk space occupation issue
Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.
Fix a regression bug in 1.7.4
Fix a regression bug causing windows client to lose its port settings in configuration.
Status of NaïveProxy Protocol Support
It refers to http2 cipher as NaïveProxy-compatible protocol support.
Please refer to this wiki page for more information about the support matrix.
Android vpn service support
Android releases from 1.6.3 are signed and have been updated to add VpnService support.
iOS packet tunnel support
iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.
Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.
Runtime requirement on MinGW Build (alias Windows Build)
MinGW 64-bit releases from 1.7.1 no longer require Visual C++ 2010 Runtime.
For Windows XP Users, please make Visual C++ 2010 Runtime installed and use 32-bit releases.
Depending the your system's architecture, use x86 installer or x64 installer.
What's Changed
- systemd: use dynamic user options by @Chilledheart in #888
- core: fix broken --log_dir support by @Chilledheart in #889
- core: remove deprecated strtoul calls by @Chilledheart in #890
- tcmalloc: update to apr 11, 2024 by @Chilledheart in #891
- core: fix gcc odr error by @Chilledheart in #892
- Bump chromium 125 dependents by @Chilledheart in #893
- debian: use system zlib library (trivial) by @Chilledheart in #894
- win32: support logging to command line by @Chilledheart in #895
- build: make quiche optional by @Chilledheart in #896
- bump quiche to match chromium 125.0.6419.1 by @Chilledheart in #897
- config: restrict logging usage inside by @Chilledheart in #898
- net: add io uring support by @Chilledheart in #901
- ci: use clang 17 instead of 16 by @Chilledheart in #902
- core: use constexpr string literals by @Chilledheart in #903
- concept: use StartClosableConnection by @Chilledheart in #904
- net: fix silence crash similar to CVE-2024-32475 by @Chilledheart in #905
- Quiche update override headers by @Chilledheart in #906
- gtk4: fix broken alert dialog on failure by @Chilledheart in #907
- core: reject zero server port by @Chilledheart in #908
- android: show alert dialog on failure by @Chilledheart in #909
- security: don't print password in plaintext by @Chilledheart in #910
- tcmalloc: switch to gperftools by @Chilledheart in #911
- tcmalloc: fix broken linkage by @Chilledheart in #912
- tcmalloc: add build-only support windows by @Chilledheart in #913
- rpm: use system tcmalloc for fedora by @Chilledheart in #914
- build: deduplicate yass_cli object library by @Chilledheart in #915
- core: refine ExpandUser by @Chilledheart in #916
- logging: support drop_log_memory for freebsd by @Chilledheart in #917
- core: drop SetUTF8Locale by @Chilledheart in #918
- core: drop icu support by @Chilledheart in #919
- net: improve SplitHostPort and isVersionValid by @Chilledheart in #920
- core: improve ReadFileToBuffer with span by @Chilledheart in #921
- tls: fix broken --certificate_chain_file flag by @Chilledheart in #923
- tls: add --enable_post_quantum_kyber option by @Chilledheart in #924
- core: set LC_NUMERIC to C by @Chilledheart in #925
- tls: load from/save to persistent config by @Chilledheart in #926
- tls: implement private_key_password by @Chilledheart in #927
- bump clang to match chromium 125.0.6422.0 by @Chilledheart in #928
- ca-certificates: update for 20240203.3.98 release by @Chilledheart in #929
Full Changelog: 1.8.3...1.9.3