Upgrade Notes
Configs are migrated to the sing-box 1.14 shapes automatically on first start, once. Two cases are not migrated because rewriting them would change how names resolve — they are logged with the upstream migration link so you can handle them yourself:
- DNS rules using legacy address filters (
ip_cidr,ip_is_private,ip_accept_anyor an IP rule-set) — still working in 1.14, removed in 1.16, migrate them tomatch_response - the deprecated
strategyDNS rule action option
What's Changed
- Sing-Box v1.14.0
- Go v1.26.7
- New protocols of sing-box 1.14: Snell (in/out), Cloudflared inbound, Bridge outbound, OpenConnect and OpenVPN endpoints, mDNS/Resolved/OpenConnect/OpenVPN DNS transports and API, OOM-Killer and USB/IP services
- New endpoints with mTLS support
- ACME and Tailscale certificate providers registered for the new
certificate_providerregistry - Automatic migration of inline
tls.acmetocertificate_providerwith typeacme - Automatic migration of options deprecated in 1.14:
dns.independent_cache,cache_file.store_rdrcandrule_set[].download_detour - Rule-set and external subscription downloads moved to the 1.14
http_client - Migrate Hysteria/QUIC and HTTP/HTTP2 transport fields to their 1.14 shapes
- Drop options removed in 1.14 from stored configs
- Issue certificates with a Cloudflare API token #1237
- Client remark in subscriptions #1228
- UDP option for Clash subscriptions #1227
- Trim surrounding whitespace from settings before validation #1229 @dactDMA
- Telegram bot in README #1230
- Update packages
Frontend
- Add the sing-box 1.14 protocols, DNS transports and services to the UI #234
- New endpoints and mTLS options
- Certificate provider instead of inline ACME
- HTTP, HTTP/2 and QUIC fields updated to the 1.14 shapes
- Stop emitting options deprecated or removed in sing-box 1.14
- Total sum of stats in traffic chart #1219
- UDP option for Clash subscriptions #1227
Bug Fixes
- Fix
undefinedin generated names, passwords and short IDs (off-by-one in the random generator), mostly visible on bulk client creation - Preserve Hysteria2 user identity across hot updates #1231 @LiGaAmG
- Fix IPv6 in links and subscriptions #1220
- Fix IPv6 in panel URI
- Fix service on Alpine #1225
- Catch untar errors on install/update #1225