- Fix HTTP/2 outbound panic on error.
- Fix package name matching error on non-main users.
- Remove TrustTunnel HTTP/1.1 support and use HTTP/2 or quic-go HTTP/3 internal connection pool.
- Allow to disable SOCKS5 inbound, disable SOCKS5 inbound UDP support, and set username and password for SOCKS5 and HTTP inbounds. However, if SOCKS5 inbound or SOCKS5 inbound UDP support is disabled, the function of some additional tools will be limited.
- Allow to manually specify custom package name or UID in routing instead of using the internal app picker.
- Change how custom configuration works. This is a breaking change. See the wiki for details.
See here for the statement regarding the so-called "critical vulnerability" farce.