Stash - Rule Based Proxy

• New Features
- iOS 18 Control Widget
- Added REJECT-DROP Policy
- Added GEOIP database updates during Stash runtime
- Added basic rewrite editing via a visual editor
- Added ip.im IP information provider
- Icons adapted for iOS 18 Dark and Tinted modes

• Improvements
- When updating remote resources, Stash will now use ETag for cache negotiation. If the resource hasn't changed, Stash won't re-download it, saving bandwidth for both users and rule set providers.
- When setting server-cert-fingerprint, there's no need to set skip-cert-verify to true
- Improved multilingual translations
- Optimized system DNS

• Fixes
- Fixed an issue where configuration file names would occasionally appear abnormal

- Fixed an issue in version 2.6.5 where YAML whitespace could cause configuration file recognition errors
- Optimized QUIC

- Optimized Sniffing
When connecting to a domain, Stash will initiate a TCP handshake for all resolved results simultaneously and use the connection that succeeds the fastest. Upon sniffing a domain, Stash triggers a DNS resolution to perform the above function. If the domain has no resolution in public DNS servers, it may cause a connection error. This version improves compatibility with unresolved domains.

- Enhanced HTTP Engine Compatibility for Hosts with Ports
- Happy Eyeballs Dual Stack Moved from Experimental to Stable. Enabling this will improve compatibility between IPv4 and IPv6 dual stack.
- Support for setting benchmark-url and benchmark-timeout in Proxy Providers
- Fixed Unexpected Jumping in Some UI Lists

• New Features
- Support for Hysteria 2 port hopping feature
- Added support for SSH protocol
- Added support for Juicity protocol
- Shortcuts now support match_geosite syntax
- MitM feature will automatically disable when CA certificate is untrusted
- Ability to delete created certificates in the MitM settings page
- Added support for Russian language

• Improvements
- Optimized QUIC protocol 0-RTT
- Enhanced script Header compatibility
- Improved interaction on the Skip Proxy / Skip Tun page
- Reduced app size
- Optimized CA certificate logic, with issued certificates now valid for 10 years
- Improved interaction logic for installing CA certificates

• Fixes
- Fixed potential UI misalignment issue during drag-and-drop sorting in visual editing
- Fixed excessive space usage by cached files in some cases

- Optimized the stability of WireGuard connections
- Improved the compatibility of Hysteria2 0-RTT on certain networks
- Enhanced the runtime MitM certificate generation process, reducing redundant calculations, improving performance, and saving power consumption
- Improved WireGuard using underlying-proxy to automatically recover from connection errors
- Fixed the issue where scripts could not run on systems below version 15.4

- Fixed the issue where $persistentStore might not save correctly in certain situations.

• New
- Stash is now optimized for sniffing, supporting more STOverrides under "Tunnel Proxy Only" mode.
- Now supports sniffing possible HTTP requests in TCP connections, including Method, Host, and URL.
- Supports DNS over HTTP/3.
- Supports Server Certificate Fingerprint Pinning for proxy servers, verifying the server certificate's SHA256 fingerprint during the TLS handshake when enabled.
- Added Script Hub to the tools.
- Supports collapsing policy groups by clicking on the policy group icon.

• Optimization
- Optimized script performance and memory usage, significantly improving script performance.
- Optimized performance based on the QUIC protocol.
- Optimized the speed when disconnecting VPN connections.

• Fixes
- Fixed the issue where QR codes could not be scanned on iPads.
- Fixed a potential crash in the visual editor.
- Fixed a recent issue with delayed memory release in scripts.
- Fixed incorrect exception handling in script $httpClient.
- Fixed the issue where $persistentStore.write could not save when the value passed was null or undefined.
- Fixed the issue where the status might not refresh after toggling switches in the Today Widget.
- Fixed script timeout exceptions.
- Fixed issues causing some scripts to fail execution.

• New Features
- Added support for iOS 17 Interactive Widget
- Replaced JavaScript engine with a new engine that supports WebAPI
- Added support for DNS query following rules
- Added support for classical text rule sets
- Added support for one-click update for all overrides
- Added override categorization
- Added override icons
- Added support for proxying "Apple Push Notifications", "Wi-Fi Calling, MMS, SMS", "AirPlay, AirDrop"
- Script $environment now supports device-model
- Script $httpClient now supports parameters: timeout, insecure, auto-cookie, auto-redirect

• Enhancements
- Enhanced UDP compatibility
- Optimized Script memory usage
- Optimized override previews
- Optimized script $httpClient compatibility, fixing potential communication issues with some servers
- Enhanced visual DNS editing, now accessible from the homepage

• Fixes
- Fixed an issue with DNS over QUIC response timeouts
- Corrected the behavior of script $argument parameters; when not set, $argument is now undefined
- Addressed potential inaccuracies in matching with some large rule sets
- Fixed potential disconnection issues with doq
- Corrected an issue where connections from Stash internals were not properly recognized
- Fixed unresponsive import configuration issue
- Fixed a policy group crash
- Fixed an issue where overrides with the same name couldn't be installed

- Fixed an issue where the toggle button state was incorrect in some cases
- Fixed an issue where some converted scripts could not be installed
- Corrected issues with concurrent scripts behaving abnormally in certain situations
- Optimized script memory usage
- The script's setTimeout() now supports parameters:
setTimeout(function, delay, param1, param2, /* …, */ paramN)

- Fixed the issue of memory anomalies causing disconnections when using scripts in the previous version

- Fix some potential crashes
- Fix scripts not running in some cases

- Fixed a minor probability of crash in Network Extension.
- Fixed the issue where scheduled scripts may not run on time.
- Fixed the issue where switching configurations on the settings page might not refresh the homepage information.
- Fixed the issue where the homepage rules could not be accessed in certain cases.
- Fixed the issue of repeated notifications for automatic configuration updates in some cases.

- Fix Hysteria 2 timeout in some cases
- Bug fixes and improvements

- Enhanced Tun performance
- Added support for Hysteria 2
- Fixed GEOSITE
- Addressed roaming issues with the WireGuard protocol
- When switching from cellular data to Wi-Fi, protocols based on QUIC will now attempt to roam to Wi-Fi
- DoH/DoQ will re-establish connections when transitioning from cellular data to Wi-Fi to ensure more accurate DNS query records
- Stash now automatically blocks QUIC traffic that hits the MitM list, allowing it to fall back to HTTP1/2
- Fixed issues with delayed updating of information on the home page
- Resolved crashes related to the routing table under IPv6 environments

- Experimentally introduced Happy Eyeballs Dual Stack
When it enabled, IPv6 and IPv4 are treated with equal priority. For instance, in concurrent mode, Stash initiates TCP handshakes for all A and AAAA records of a domain, connecting to the fastest successful handshake.

- Enhanced Tun performance
- Added support for Hysteria 2
- Fixed GEOSITE
- Addressed roaming issues with the WireGuard protocol
- When switching from cellular data to Wi-Fi, protocols based on QUIC will now attempt to roam to Wi-Fi
- DoH/DoQ will re-establish connections when transitioning from cellular data to Wi-Fi to ensure more accurate DNS query records
- Stash now automatically blocks QUIC traffic that hits the MitM list, allowing it to fall back to HTTP1/2
- Fixed issues with delayed updating of information on the home page
- Resolved crashes related to the routing table under IPv6 environments

- Experimentally introduced Happy Eyeballs Dual Stack
When it enabled, IPv6 and IPv4 are treated with equal priority. For instance, in concurrent mode, Stash initiates TCP handshakes for all A and AAAA records of a domain, connecting to the fastest successful handshake.

- Fixed Sub-Store™

- Fix an issue where Network Extension may disconnect under high loads

- Optimize JavaScript Engine
- Added "Toggle" Shortcut

- Optimizing HTTP Engine Compatibility
- Bug Fixes and Improvements

- Bug fixes and improvements

- Sync Configuration supports transferring configuration files to tvOS
- Remote Controller supports automatic device registration
- Optimize QUIC protocol
- Optimize power consumption
- Optimize UI animations
- Bug fixes and improvements

- Fixed Country.mmdb does not update automatically
- Fixed the Policy Group was not displayed in some cases.
- Fixed iCloud files could not be read in some cases.

- Added support for Tuic v5 protocol
- Automatically generates a policy group named PROXY, which by default includes all proxies for external Override referencing

• Introduced a brand-new visual editor
- The visual editor now supports retaining comments and styles
- Local Proxies editing now supports more proxy protocols and fields
- Rules editing now supports more fields and allows for drag and drop sorting
- Policy Groups editing supports more fields and can hide policy groups in the interface
- Proxy Providers editing now supports more fields
- Rule Set editing supports more fields and allows selection of Remote Rule Sets
- Proxy Chains now support individual delay testing in a holistic manner for more accurate results

- Deleting or renaming proxies, policy groups, and remote proxies, etc, will cause corresponding modifications in references to ensure operational consistency
- Subscription cards now support displaying subscription information from multiple service providers
- Quick access to the visual editor for editing and managing by clicking the related card on the home page

- QR code scanning for import now supports choosing images from the Photos
- QR code scanning for import supports more QR code formats
- QR code scanning for import now supports importing QR codes with plugins, obfs, network protocols, and TLS

- Improved menu display
- Optimized icon set installation and deletion
- Optimized one-click log deletion, preserving the latest logs
- Enhanced interaction on iOS 15+ devices

- Fixed compatibility issues when upstream DNS servers return Fake IP
- Fixed configuration errors that may occur when visually editing DNS and log levels
- Fixed some UI misalignment issues
- Fixed crashes on iOS 13 in some cases
- Bug fixes and improvements

- Added more information for Recent Requests
- Improved App performance
- Improved iCloud file storage
- Refined UI details
- Config file changes in iCloud support real-time reload
- Fixed the issue of automatic speed test failing under certain circumstances
- Fixed the issue where remote resources cannot be automatically updated under certain circumstances
- Bug fixes and improvements

- Added a workaround to fix the Vmess performance issue
- Bug fixes and improvements