Commit Graph

  • 83ea59fb69 fix(tgbot): restore the admin's client link and QR buttons (#6986) main dev-latest 25f2002654 2026-11-03 20:22:35 +05:30
  • 19f2f21d81 fix(inbounds): reject incompatible VLESS fallbacks and prevent Xray crashes (#7003) Hamed 2026-11-03 18:22:30 +03:30
  • fee7b1621d fix(amneziawg): validate peer subnets before enabling kernel mode (#6965) Aleksey 2026-11-03 17:52:26 +03:00
  • e093854f5b fix(tgbot): send fresh screens for typed commands (#6999) Hamed 2026-11-03 18:22:20 +03:30
  • 728c2fb94f fix(install): handle yes responses and validate panel ports (#6992) Hamed 2026-11-03 18:22:14 +03:30
  • 129e4f5292 fix(link): keep IPv6 brackets in imported wireguard endpoints (#6976) Jay Hemnani 2026-11-03 20:22:09 +05:30
  • eae4725d99 fix(traffic): restore quota-disabled inbounds when their traffic is reset (#6962) 25f2002654 2026-11-02 20:20:25 +05:30
  • 1796352600 fix(ui): avoid scrollbar flashes when lazy dialogs load (#6981) VAIO73 2026-11-02 15:50:20 +01:00
  • 54a509fd67 fix(hosts): say how a host remark reaches the config name (#7044) Guidance 2026-11-02 18:09:00 +03:30
  • 09799ff734 fix(scripts): preserve custom webBasePath during updates (#6964) Hamed 2026-11-02 18:05:20 +03:30
  • 121123eaaa fix: keep panel restarts from hanging on the CPU job and Telegram (#7029) PluS98 2026-11-02 17:34:22 +03:00
  • 43af7ada96 fix(sub): restore TUIC links in subscriptions after v3.11.0 (#6963) Denis Gritsenko 2026-11-02 17:27:49 +03:00
  • 81059edc91 fix(sync): preserve shared client lifecycle across nodes (#7038) Seyed Mahdi 2026-11-02 17:57:44 +03:30
  • a712bf1413 fix(tgbot): let clients page their screens and see usage per account (#7033) Бат-Орших 2026-11-02 22:27:40 +08:00
  • 77b56a2178 fix(url): keep capitalized mailto: and tel: links as they are (#7052) kevin 2026-11-02 23:22:43 +09:00
  • 6d9e836d61 fix(update): keep Xray-core running until update downloads finish (#7002) Cheng Ho Ming, Eric 2026-11-02 22:17:01 +08:00
  • 4d583cebf3 fix(tgbot): recover menus when cached artwork is rejected (#6968) Hamed 2026-11-02 17:44:03 +03:30
  • d2450e103c fix(server): honor keepHostSettings for SQLite imports into PostgreSQL (#6995) Hamed 2026-11-02 17:43:58 +03:30
  • 4180899f15 fix(link): decode share link remarks once (#6977) Jay Hemnani 2026-11-02 19:43:54 +05:30
  • 4cc742bf6f fix(tgbot): restore current ban log delivery and skip empty files (#6991) Hamed 2026-11-02 17:40:32 +03:30
  • ce44d2e772 fix(ldap): keep trusted baseline after rejected fetch (#6936) 25f2002654 2026-11-02 19:40:28 +05:30
  • 34a762f7c8 fix(sub): preserve external Hysteria2 Clash options (#6944) Hamed 2026-11-02 17:40:24 +03:30
  • 05199dda00 fix(routing): show the Balancer label on mobile rule cards (#6960) Cheng Ho Ming, Eric 2026-11-02 22:10:18 +08:00
  • 14f2bb5e2c fix(link): accept padded URL-safe base64 in vmess links (#6975) Jay Hemnani 2026-11-02 19:40:13 +05:30
  • 1bdb517b88 fix(a11y): silence live stats and make Select tags removable for screen readers Alireza Ahmadi 2026-11-01 16:49:19 +01:00
  • cbf596d889 chore(deps): bump docs and frontend dependencies MHSanaei 2026-11-01 15:58:11 +01:00
  • d94a63d8bc Merge pull request #7040 from MHSanaei/fix/hardening-2026-11 Sanaei 2026-11-01 15:44:17 +01:00
  • 6f37433d43 fix(amneziawgnet): stop tests binding fixed ports in the ephemeral range MHSanaei 2026-11-01 15:14:49 +01:00
  • 757444d505 fix(tgbot): let a screen-art reset outlast a probe still in flight MHSanaei 2026-11-01 14:56:40 +01:00
  • 62d27d54d5 feat(xray): support the XDRIVE s3 storage service MHSanaei 2026-11-01 14:56:26 +01:00
  • 87749c1ee4 feat(xray): accept the TUN WFP leak ports of xray-core 26.10.31 MHSanaei 2026-11-01 14:56:13 +01:00
  • ba27b74be8 feat(xray): keep the XHTTP server's h2Params MHSanaei 2026-11-01 14:55:57 +01:00
  • 7982794291 fix(xray): refuse geodata settings xray-core 26.10.29 refuses at startup MHSanaei 2026-11-01 14:55:41 +01:00
  • e789583b63 fix(xray): keep legacy-private unencrypted outbounds on cores before 26.10.29 MHSanaei 2026-11-01 14:55:29 +01:00
  • 72c9092d4a feat(xray): update xray-core to v26.10.31 MHSanaei 2026-11-01 14:55:14 +01:00
  • 9938d0b7a6 chore(deps): update frontend dependencies MHSanaei 2026-11-01 14:55:10 +01:00
  • 4dfd008edb test(sub): assert linear allocation growth instead of an absolute budget MHSanaei 2026-11-01 14:00:29 +01:00
  • 99f386820d fix(tgbot): treat messages sent on behalf of a chat as strangers MHSanaei 2026-11-01 13:47:40 +01:00
  • 8f3dd70db4 fix(geodata): refuse a database whose category index is too large to browse MHSanaei 2026-11-01 13:46:18 +01:00
  • 846dfe3d74 fix(notifications): throttle failed-login alerts where they are published MHSanaei 2026-11-01 13:44:32 +01:00
  • 54339661a6 fix(server): keep the access log view when one line is over 64 KiB MHSanaei 2026-11-01 13:42:12 +01:00
  • e02f51320a fix(tgbot): release the invite claim lock even when a claim panics MHSanaei 2026-11-01 13:38:58 +01:00
  • d63583caaf fix(tgbot): keep a login alert's username on one line MHSanaei 2026-11-01 13:36:37 +01:00
  • 72fb4d9358 fix(frontend): keep node-reported text out of i18next's nesting parser MHSanaei 2026-11-01 13:34:21 +01:00
  • 6c74fccbf7 fix(amneziawg): only delete IPv6 aliases this panel added itself MHSanaei 2026-11-01 13:32:21 +01:00
  • 8b525b5be6 fix(node): clear a client's orphan mark when it is attached again MHSanaei 2026-11-01 13:30:53 +01:00
  • 3471cecbda fix(mtproto): leave clients mtg cannot parse out of the generated config MHSanaei 2026-11-01 13:27:02 +01:00
  • 5a6d40e3ff fix(inbounds): keep disabled clients out of the core when adding an inbound MHSanaei 2026-11-01 13:26:10 +01:00
  • 2e41f908db fix(limit-ip): do not re-add a client the database stopped serving MHSanaei 2026-11-01 13:22:26 +01:00
  • cc3aff2434 fix(discord): escape Markdown in alert text the panel did not write MHSanaei 2026-11-01 13:21:08 +01:00
  • 4d8e2b48ff perf(sub): make balancer member retagging linear MHSanaei 2026-11-01 13:20:27 +01:00
  • 8bbfda0510 fix(email): cap what one SMTP session reads from the server MHSanaei 2026-11-01 13:18:54 +01:00
  • 06cb1742a1 fix(server): bound the public-IP lookup and accept only an address MHSanaei 2026-11-01 13:18:01 +01:00
  • f99c6c664d fix(sub): resolve legacy socket fallback fronts on PostgreSQL too MHSanaei 2026-11-01 13:16:14 +01:00
  • 93d1e63554 fix(node): count only values against the node-answer value cap MHSanaei 2026-11-01 13:14:46 +01:00
  • 1d373cf67e fix(node): let a node take back a client orphaned before the upgrade MHSanaei 2026-11-01 13:13:10 +01:00
  • 828855cdb5 fix(node): apply the client gate to emails with non-ASCII capitals MHSanaei 2026-11-01 13:12:15 +01:00
  • 4cddcff12b fix(sub): fetch operator-chosen private and proxied external subscriptions again MHSanaei 2026-11-01 10:30:26 +01:00
  • 255c658468 fix(sub): escape a VLESS id the way the panel's own links do MHSanaei 2026-11-01 10:26:54 +01:00
  • 0394996a30 fix(node): keep summing usage across panels for a client the node shares by email MHSanaei 2026-11-01 10:25:14 +01:00
  • 9c0bf6938c test(sub): leave the decode-once allocation bound room for the race detector MHSanaei 2026-11-01 10:10:01 +01:00
  • 5c6cbb5680 chore(deps): update follow-redirects to 1.16.2 MHSanaei 2026-11-01 10:04:45 +01:00
  • 082d7ac091 fix(xray): block private-range egress in per-peer AmneziaWG IPv6 outbounds MHSanaei 2026-11-01 10:03:17 +01:00
  • ecd817658c fix(amneziawg): attribute an equal-prefix source to the peer the device picks MHSanaei 2026-11-01 10:02:11 +01:00
  • efaa73db3a perf(tgbot): stop loading the whole inbound per client in usage listings MHSanaei 2026-11-01 09:14:43 +01:00
  • 7163c6e521 perf(sub): decode TUIC and AmneziaWG settings once per request MHSanaei 2026-11-01 09:09:28 +01:00
  • dda44c1e72 perf(sub): resolve legacy socket fallback fronts once per request MHSanaei 2026-11-01 09:06:32 +01:00
  • 878d37c2fc fix(panel): bound the sponsor logo cache and evict logos that left the list MHSanaei 2026-11-01 09:03:42 +01:00
  • 1507fd4edf fix(hwid): re-check the device limit where an unlimited fetch registers MHSanaei 2026-11-01 09:02:15 +01:00
  • fac9009398 fix(tgbot): escape template parameters once in I18nBot MHSanaei 2026-11-01 08:58:43 +01:00
  • a9191cb468 fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards MHSanaei 2026-11-01 08:55:38 +01:00
  • 0972ac31eb fix(clients): collapse repeated inbound ids before fanning a client out MHSanaei 2026-11-01 08:44:16 +01:00
  • f8ceede46f fix(hwid): keep a subscription's device limit while its client is disabled MHSanaei 2026-11-01 08:39:50 +01:00
  • bd36053356 fix(clients): match non-ASCII capitals in the shared-email checks MHSanaei 2026-11-01 08:37:01 +01:00
  • 2024d34928 fix(geodata): index a split category's attributes in one pass MHSanaei 2026-11-01 08:33:19 +01:00
  • 7f64a67ba5 fix(clients): re-enable only quota-disabled clients on a traffic reset MHSanaei 2026-11-01 08:31:27 +01:00
  • 67820dc20d fix(clients): keep a hand-disabled client off through auto-renew MHSanaei 2026-11-01 08:23:48 +01:00
  • 30f17ef5a3 fix(amneziawg): keep port forwards per inbound and off future relay ports MHSanaei 2026-11-01 01:22:51 +01:00
  • 6dbd219a14 fix(database): keep disabled clients disabled in the ClientsTable seeder MHSanaei 2026-11-01 01:16:56 +01:00
  • 2467b9d542 fix(sub): bound what one subscription response renders MHSanaei 2026-11-01 01:15:28 +01:00
  • fc8efc0745 fix(node): bound what one node inbound adds to a subscription MHSanaei 2026-11-01 01:11:00 +01:00
  • f9f21fd8a4 fix(node): bound the host groups a node's inbounds may adopt MHSanaei 2026-11-01 01:05:48 +01:00
  • 3526a65f5d fix(web): bound the panel's open connections and share asset gzip MHSanaei 2026-11-01 01:01:38 +01:00
  • 1c748adadf fix(sub): resolve a blank subId to no subscription MHSanaei 2026-11-01 00:57:32 +01:00
  • 9a95153f0e fix(hwid): track devices only for subscriptions a client owns MHSanaei 2026-11-01 00:54:59 +01:00
  • 2b9adaa6ff fix(clients): set a client's Telegram user on every inbound it is on MHSanaei 2026-11-01 00:51:31 +01:00
  • 6a0c983c89 fix(node): keep only the latest refused claims for the log-once state MHSanaei 2026-11-01 00:47:46 +01:00
  • c2250dbe57 fix(sub): keep the salamander warning state one entry per inbound MHSanaei 2026-11-01 00:45:21 +01:00
  • bebe1b911d fix(ldap): keep expired and over-quota clients off on directory sync MHSanaei 2026-11-01 00:44:05 +01:00
  • c92c7718bf fix(xray): refuse xhttp downloadSettings the core's dialer cannot use MHSanaei 2026-11-01 00:41:37 +01:00
  • 68e06a174b fix(job): withhold fail2ban bans for addresses a datagram alone reports MHSanaei 2026-11-01 00:39:26 +01:00
  • 152c84efa2 fix(inbounds): delete an inbound's dependent rows on every delete path MHSanaei 2026-11-01 00:36:45 +01:00
  • 776ca554bd fix(server): keep only the requested tail while reading the access log MHSanaei 2026-11-01 00:31:59 +01:00
  • c3a32c8343 fix(shadowsocks): keep a 2022 inbound with no enabled client locked MHSanaei 2026-11-01 00:30:14 +01:00
  • 07bbf4788a fix(node): remove a client a pushed inbound disables from the running core MHSanaei 2026-11-01 00:24:29 +01:00
  • c0bd572085 fix(sub): look up a socket child's fallback front on the child's own host MHSanaei 2026-11-01 00:21:03 +01:00
  • bc2c64d901 fix(amneziawg): bound the egress relay's pending tunnel DNS lookups MHSanaei 2026-11-01 00:19:34 +01:00
  • 1810996db6 fix(amneziawg): stop the TUN handoff from parking a peer's receiver MHSanaei 2026-11-01 00:17:33 +01:00
  • 5e6ffebdf2 fix(amneziawg): give each peer a share of the forwarder and UDP relay MHSanaei 2026-11-01 00:16:04 +01:00
  • 05abd00bf6 fix(sub): encode the link host and the VLESS id in share links MHSanaei 2026-11-01 00:10:23 +01:00