Yet Another Public Notification Channel

sing-box 1.14.0-beta.14 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.14

sing-box 1.14.0-beta.13 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.13

sing-box 1.13.18 has been released. * Update naiveproxy to v150.0.7871.63-1 * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.13.18

sing-box 1.14.0-beta.7 has been released. * Add Hysteria2 Chrome QUIC fingerprint parroting 1 * Update quic-go to v0.61.0 * Update tailscale to v1.102.1 * Update gvisor to 20260727.0 * Fixes and improvements 1: Hysteria2 client connections now parrot Chrome's QUIC handshake by default, making the traffic harder to identify by handshake fingerprinting. Since Chrome does not declare support for Ed25519, servers using Ed25519 certificates will fail the handshake; see disable_chrome_parrot. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.7

sing-box 1.14.0-beta.5 has been released. * Remove client metadata from AnyTLS requests by default 1 * Update naiveproxy to v150.0.7871.63-1 * Fixes and improvements 1: We found that the AnyTLS client implementation uploads metadata that is not used by the open-source server, and there are reports of vendors using it to profile and discriminate against users. We now leave it empty by default and allow you to customize it, see AnyTLS client metadata. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.5

sing-box 1.13.16 has been released. * Remove client metadata from AnyTLS requests by default 1 * Fixes and improvements 1: We found that the AnyTLS client implementation uploads metadata that is not used by the open-source server, and there are reports of vendors using it to profile and discriminate against users. We now leave it empty by default and allow you to customize it, see AnyTLS client metadata. https://github.com/SagerNet/sing-box/releases/tag/v1.13.16

sing-box 1.14.0-beta.4 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.4

sing-box 1.14.0-beta.3 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.3

sing-box 1.13.15 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.13.15

sing-box 1.14.0-beta.2 has been released. * Add JSON Schema support 1 * Fixes and improvements 1: sing-box now provides a JSON Schema for its configuration, enabling completion and validation in compatible editors. The schema published with the documentation can be selected with the new top-level $schema field, while the new sing-box schema command generates a schema matching the current binary and its build tags. We have also improved the JSON editor experience in the graphical clients on macOS, Android, Windows, and Linux, and added schema-based completion support. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.2

sing-box 1.14.0-beta.1 has been released. * Correct undefined rule-set matching semantics 1 * Add search domain rule items 2 * Add parallel DNS response evaluation support 3 * Fixes and improvements 1: Rule-set matching has always been described as merged matching: fields of rule-set rules are considered merged into the referencing rule. However, this description is only intuitive when a rule-set contains only a single default rule without invert. Merged matching is now limited to exactly this case; any other referenced rule-set is matched as an other field, which matches when any of its rules matches on its own. Since the previous behavior in the corrected cases was effectively undefined, counterintuitive, and hard to understand, we do not consider this a breaking change — except for configurations that worked without their author understanding why. 2: The new DNS rule items domain_label_count and search_domain_available match the number of labels in the query name and whether a DNS server currently holds search domains; combined with racing, they allow unqualified name queries to race a server that can expand them against a public resolver. Additionally, preferred_by now matches search domain suffixes and supports local and dhcp servers. 3: The evaluate action can now assign a tag to each response, allowing multiple evaluated responses to coexist and be selected through tagged match_response rules. The new race field allows response-dependent rules to compete in parallel, with the first matching rule taking effect and the remaining queries canceled. The new speculative option can start evaluate and route queries while race rules are still pending, reducing latency at the cost of potentially unused queries. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-beta.1

sing-box 1.14.0-alpha.50 has been released. • Improve OpenVPN interoperability 1 • Improve OpenConnect interoperability 2 • Add Fortinet host check support 3 • Fixes and improvements 1: The OpenVPN client and server now interoperate with more existing deployments through static-key mode, additional legacy ciphers and digests, and OpenVPN-compatible certificate purpose, key usage, extended key usage, and certificate profile checks. They also support more OpenVPN options for tunnel addressing, MSS calculation, replay windows, timers, and TLS renegotiation. The new OpenVPN DNS server can use both modern and legacy DNS options pushed by OpenVPN servers, while the sing-box server can push both forms. 2: The OpenConnect client now supports existing authentication sessions, OIDC Bearer authentication, additional platform and AnyConnect mobile identity fields, AnyConnect compression, and controls for MTU, DPD and reconnect timing, TCP keep alive, and TLS trust and certificate pinning. The new OpenConnect DNS server can use pushed split-DNS resolvers and, when enabled, general pushed resolvers. 3: The OpenConnect Client endpoint can now submit Fortinet host check results using the new fortinet_host_check option. This behavior is modeled after openfortivpn and is not an OpenConnect feature. sing-box only submits explicitly configured values when requested by the Fortinet server and does not collect system information automatically. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.50

sing-box 1.14.0-alpha.48 has been released. * Add SSO support for AnyConnect 1 * Add Linux support for the desktop client application 2 * Fixes and improvements 1: The OpenConnect Client endpoint now supports SSO (single sign-on) authentication for Cisco AnyConnect servers, available through the sing-box graphical clients. 2: The sing-box for Desktop client is now available for Linux (x64 / arm64 / armv7l) from GitHub Releases. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.48

sing-box 1.14.0-alpha.47 has been released. • Add OpenVPN client and server support 1 • Add OpenConnect client support 2 • Fixes and improvements 1: The new OpenVPN Client and OpenVPN Server endpoints are compatible with standard OpenVPN clients and servers. Interactive client authentication is available through the sing-box graphical clients and Dashboard. 2: The new OpenConnect Client endpoint supports Cisco AnyConnect, GlobalProtect, Fortinet, F5, Pulse Connect Secure, and Juniper Network Connect VPN servers. Interactive authentication is available through the sing-box graphical clients and Dashboard. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.47

sing-box 1.14.0-alpha.46 has been released. • Add multiple tags support to rule-sets 1 • Add new UDP NAT options 2 • Fixes and improvements 1: The rule-set tag field now accepts a list of tags to define multiple rule-sets sharing other options at once, with the {tag} placeholder in path or url replaced by each tag. 2: The new UDP NAT fields udp_mapping, udp_filtering and udp_nat_max configure the NAT mapping and filtering behaviors and the maximum number of UDP NAT sessions for TUN and TProxy inbounds and the WireGuard endpoint. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.46

sing-box 1.14.0-alpha.45 has been released. • Improve the Windows client application 1 • Fixes and improvements 1: The Windows client now includes an updater, adds support for Windows native sharing of sing-box profile and JSON files, and fixes the Tailscale SSH terminal. The Tailscale SSH server can now open sessions for any local user in the graphical client, while the command line client remains limited to the user sing-box runs as. Additionally, configurations that use privileges unrelated to networking are now rejected by default; an insecure mode is available to allow them. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.45

sing-box 1.14.0-alpha.44 has been released. • Introducing our new Windows client application 1 • Fixes and improvements 1: The new Windows client provides an experience equal to other standard sing-box graphical clients, is available for Windows 10+ (x64 / x86 / arm64), and is distributed as an installer from GitHub Releases (SFW-<version>-<architecture>.exe). https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.44

sing-box 1.14.0-alpha.43 has been released. * Add network namespace support 1 * Fixes and improvements 1: The new network_namespaces option defines Linux network namespaces for inbounds and outbounds, referenced by tag from the new tun netns field and the existing Listen and Dial netns fields. The unshare type creates the namespace at startup without requiring root privileges: a rootless sing-box can provide a tun (including auto_route and auto_redirect) inside a namespace, which can be entered with nsenter. https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.43

sing-box 1.14.0-alpha.42 has been released. • Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.42