Changes compared to the previous beta, v0.108.0-b.85. See CHANGELOG.md for all changes.
Acknowledgements
A special thanks to @N0zoM1z0 for reporting the vulnerability, our community moderators team, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!
Full changelog
Security
-
Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.26.3.
-
IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security.
This is GHSA-xgx4-4h9w-53pv. We thank @N0zoM1z0 for reporting this security issue.
Added
- New
reasonquery parameter inGET /control/querylog. Seeopenapi/openapi.yamlfor the full description.
Changed
-
Frontend API requests no longer depend on axios.
-
Dashboard charts use Recharts instead of Nivo.
-
enable_dnssecindnsconfiguration now defines whether the proxy should set the DO flag in the upstream requests, the default istrue(#7046).
Deprecated
- Query parameter
response_statusinGET /control/querylogis now deprecated. Use newreasonquery parameter instead.
Fixed
-
Statistics database deadlock (#8359).
-
Translated labels on the DNS settings pages not updating after changing the UI language.
-
Dashboard charts now correctly display lower query counts (#6823).
-
Redundant validation warnings about DHCP when it's disabled (#8348).
-
Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language.