⚠️⚠️⚠️⚠️⚠️ This is a pre-release which is not compatible with 1.5.x - please help us test! ⚠️⚠️⚠️⚠️⚠️⚠️
What's Changed
This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:
🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.
🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.
🪟 Windows Desktop Client has finally an MSI package - see the client 1.6 alpha releases with native Wireguard networking based on WireguardNT. Please read the migration docs.
MacOS Desktop Client introduces native Swift/macOS VPN implementation and is published in Apple macOS Store officially!
🖥️ All desktop Clients now have a new MTU setting available.
What's Changed
Other Changes
- Release 1.5 merger by @wojcik91 in #577
- Fix build and cargo dependencies by @moubctez in #580
- Fixes pentest issue DG25-28 from 2025-09-02 by @j-chmielewski in #578
- Fixes pentest issue DG25-29 from 2025-09-02 by @j-chmielewski in #582
- Merge main into dev after 1.5.1 release by @j-chmielewski in #592
- Create SBOM files by @j-chmielewski in #593
- CI: scan code with trivy by @j-chmielewski in #594
- Fix RPM package by @moubctez in #595
- Periodic sbom regeneration by @j-chmielewski in #599
- Merge SBOM CI pipelines into main by @j-chmielewski in #600
- Merge release/1.5.2 into main by @wojcik91 in #605
- Fix pnpm build by @moubctez in #606
- BoringTun by @moubctez in #597
- share rust toolchain between nix shell & package by @wojcik91 in #610
- Merge main -> dev after 1.5.2 release by @wojcik91 in #609
- new job for building .deb for ubuntu 22.04 /debian 12 by @jakub-tldr in #611
- fix nix setup for boringtun repo by @wojcik91 in #613
- update aur packages workflow by @jakub-tldr in #614
- Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
- undo unnecessary deletion by @jakub-tldr in #620
- Run AUR workflow only on full release by @jakub-tldr in #619
- APT uploading/signing workflow by @jakub-tldr in #622
- Direct WireGuard management on Windows using wireguard-nt by @j-chmielewski in #626
- client auto-provisioning by @wojcik91 in #627
- Build and sign Defguard client without wireguard binary by @j-chmielewski in #629
- List whole directory by @jakub-tldr in #631
- Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
- refresh tray icon after instance deletion by @jakub-tldr in #639
- OpenID modal refresh by @jakub-tldr in #640
- add Windows provisioning script to MSI installer by @wojcik91 in #625
- Service locations on Windows (Pre-logon, Always-on) by @t-aleksander in #636
- add missing DEB & RPM dependencies by @wojcik91 in #642
- Fix issues related to service locations by @t-aleksander in #643
- Fix issues related to service locations by @t-aleksander in #644
- Add missing sqlx query by @t-aleksander in #646
- Fixes pentest issue DG25-27 from 2025-09-02 by @j-chmielewski in #641
- Add ubuntu 22.04 apt upload pipeline by @jakub-tldr in #645
- Merge main branch into dev before 1.6-alpha release by @j-chmielewski in #649
- Don't log enrollment token by @j-chmielewski in #650
- add admin helper script to generate enrollment tokens by @wojcik91 in #653
- Swift plugin by @moubctez in #630
- Fix Windows build by @moubctez in #655
- fix(CI): build missing service binary for MSI by @wojcik91 in #656
- Basic client version reporting by @t-aleksander in #658
- add admin helper script for generating enrollment tokens in Entra environments by @wojcik91 in #665
- migrate trivyignore format by @wojcik91 in #666
- update helper provisioning scripts to include optional token expiration time by @wojcik91 in #669
- Add global MTU setting by @j-chmielewski in #668
- fix MFA modal error handling by @wojcik91 in #670
- macOS: switch to objc2 by @moubctez in #659
- Workflow: use Tauri action by @moubctez in #673
- Restore MTU by @moubctez in #674
- fix DNS error handling by @wojcik91 in #676
- macOS tunnel statistics by @moubctez in #678
- Fix macOS build after merge by @moubctez in #679
- Implement "force all traffic" enterprise setting by @j-chmielewski in #672
- Cleaner error message by @jakub-tldr in #680
- Fix resolvconf on debian 13 by @t-aleksander in #681
- Sync locations and tunnel with system settings by @moubctez in #684
- Cleanup for Windows by @moubctez in #685
- Backport debian 13 DNS fix by @t-aleksander in #687
- Fix tauri pipelines by @t-aleksander in #688
- Bump version to 1.5.3 by @t-aleksander in #689
- update aur repo to 1.5.2 by @jakub-tldr in #682
- [MacOS] Synchronizing state with system VPN status, logging by @t-aleksander in #694
- Fix "object not found" during disconnect after system settings connect, other small fixes by @t-aleksander in #697
- [MacOS] Trigger MFA if needed when connecting via system settings by @t-aleksander in #700
- macOS: populate Help menu by @moubctez in #704
- use published wireguard-rs by @j-chmielewski in #706
- Silence error on cancelling mobile MFA by @moubctez in #709
- Clean Apple API functions by @moubctez in #711
- Use correct logging filename by @moubctez in #714
- macOS: set MTU on config sync by @moubctez in #715
- fix submodules handling in Nix package by @wojcik91 in #716
Full Changelog: v1.5.1...v1.6.1