Linux (Debian) Changelog

Stuff changes, see exactly what

v2.12.1 (Alpha)

Released: 2024/10/01
SHA-256: 7dc3039a3a73fe6177ebd0b31e8296553e407989e896e10ff2dc4098a5c3f4db

- Added support for in-app updates from many immutable distros.
- Added MAC spoofing.
- Improved split tunneling behavior by doing a self-test at service start.
- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Fixed helper may get stuck when disconnect on Raspberry Pi with split tunneling enabled.
- Fixed ingress packets are dropped incorrectly when using split exclude or no split tunneling.
- Fixed additional JSON & GUI input validation errors.
- Fixed debug log may fail to send. OpenSSL updated to the latest commit, version 3.4.0.
- Fixed double blinking cursors on custom config credential prompt.
- Fixed custom config auth data not deleted when custom config dir cleared.
- Fixed latency endpoint duplicate requests.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.

*** Known Issues ***
- MAC address spoofing is not working correctly.
- It is possible to lose ingress LAN connectivity when in exclusive split tunneling mode.

v2.11.11

Released: 2024/09/16
SHA-256: 82d9d2fd2e962eaa19a6720aa094a201b68177661e9e4a785381c16ef89c73e7

- Added support for quantum-safe TLS and OpenVPN.
- Added support for OpenSUSE.
- Added implementation of GUI-less (CLI) client.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Added "Packet Size" preference to match other platforms.
- Added handling for WireGuard key limit in CLI client.
- Added update functionality for CLI-only clients.
- Improved IPC sockets/lockfiles by consolidation.
- Improved debug log usefulness by adding routing table.
- Improved JSON import validation.
- Improved input validation on CLI commands, and added messages on successful commands.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed IKEv2 protocol is included in Linux package.
- Fixed CLI packaging for Arch CLI build and updates.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall blocking DHCP traffic on shared connections.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app update not completing if apt-listbugs is installed.
- Fixed helper not working after update until restart.
- Fixed Linux setgid change not working in OpenSUSE.
- Fixed firewall blocking DHCP traffic.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed missing dependency for xcb-util-cursor-devel in the OpenSUSE RPM package.
- Fixed app icons not showing in XFCE.
- Fixed helper checks of URLs in custom DNS entries are too strict.
- Fixed Linux default route may be mis-detected.
- Fixed CLI service did not start on boot.
- Fixed Dockerfile to use Ubuntu 20.04 and install the correct CMake/golang.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.
- Fixed DNS cache not cleared in wsnet when connecting or disconnecting to the VPN.
- Fixed some ingress packets are dropped incorrectly when using inclusive split tunneling.
- Fixed OpenVPN protocols not working on immutable distros.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

v2.11.9 (Beta)

Released: 2024/09/05
SHA256: 8e2b457cfd1d0fdf74a1dbbc0d2e98a6b0980f13de8bc839bd9dde37fe1bcb4f

- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.

v2.11.8 (Alpha)

Released: 2024/08/29
SHA-256: c88f1a74ce3ae9eb1760732ffe35fab727fff6c8ec59607784099066b4f7c066

- Added the new parameter language to wsnet library.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.

v2.11.6 (Alpha)

Released: 2024/08/20
SHA-256: 6b0450293184e1b03be680f73d8e898f13cc0e8ef7de4f60490908fb039942da

- Improved input validation on CLI commands, and added messages on successful commands.
- Fixed IKEv2 protocol is included in Linux package.
- Fixed CLI packaging for Arch CLI build and updates.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.

Note: please use one of the OpenVPN-based protocols if you have the anticensorship feature enabled. We are investigating a possible incompatibility with the feature and the WireGuard protocol.

v2.11.5 (Alpha)

Released: 2024/08/06
SHA-256: 2fe6c171477938e6c36512b3d806b71bb84ba07a0cfb812063cbb705ada4d685

- Added handling for WireGuard key limit in CLI client.
- Added update functionality for CLI-only clients.
- Improved JSON import validation.
- Fixed helper checks for URLs for custom DNS are too strict.
- Fixed Linux default route may be misdetected.
- Fixed CLI service did not start on boot.
- Fixed Dockerfile to use Ubuntu 20.04 and install the correct CMake/golang.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

v2.11.4 (Alpha)

Released: 2024/07/16
SHA-256: 2a27f8974ad99a0b735139380477e985feccb600b1bc6a6eebbcb3063d1bb132

- Added support for quantum-safe TLS and OpenVPN.
- Added support for OpenSUSE.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Added "Packet Size" preference to match other platforms.
- Added partial implementation of GUI-less client.
- Improved IPC sockets/lockfiles by consolidation.
- Improved debug log usefulness by adding routing table.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall blocking DHCP traffic on shared connections.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app update not completing if apt-listbugs is installed.
- Fixed helper not working after update until restart.
- Fixed Linux setgid change not working in OpenSUSE.
- Fixed firewall blocking DHCP traffic.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed missing dependency for xcb-util-cursor-devel in the OpenSUSE RPM package.
- Fixed app icons not showing in XFCE.

v2.10.15

Released: 2024/07/02
SHA-256: da3cf7b297503b739a08b16771810645c561589b491b1e5c5a6a708443f804eb

- Added support for private key passwords in OpenVPN custom configs.
- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Added a limit of 50 hostname split tunnel entries to ensure stability.
- Added requirement for iputils or equivalent since wsnet may use the 'ping' utility directly.
- Improved best location selection to lean towards 10 Gbps servers.
- Improved OpenVPN and WireGuard anti-censorship.
- Improved internal error handling.
- Improved IPC message passing to adhere to best practices.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved Polish translations.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Improved logging by adding distribution name and version.
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed tray icon sometimes can't be clicked.
- Fixed resolvconf/NetworkManager DNS managers sometimes not taking effect.
- Fixed GNOME/NetworkManager may show a scary message when disconnecting WireGuard.
- Fixed misdetection of platform on Raspberry Pi.
- Fixed pid race in helper.
- Fixed typo in command to get local IP.
- Fixed Free Data usage in app doesn't update.
- Fixed failed assertion in log for EmailItem.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed app window resize workaround may cause transitions to be jittery.
- Fixed app window may not resize if occluded by another window.
- Fixed app window resize again, forcing a size update at the end of animations.
- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Fixed split tunnel for IP assumes /32 subnet.
- Fixed split tunneling for distributions which mount cgroups v2 by default.
- Fixed makepkg bug mangling the ctrld binary by specifying !debug in the PKGBUILD.
- Removed "New Window" desktop action, which previously did nothing.
- Removed net-tools dependency.
- Updated ctrld dependency to 1.3.7.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

v2.10.14 (Beta)

Released: 2024/06/25
SHA-256: 885f799e0ff23aa88b1ee0a08cbe022acc0ae44a859a80cdefae585ed3f5167c

- Improved best location selection to lean towards 10 Gbps servers.

v2.10.12 (Beta)

Released: 2024/06/17
SHA-256: 2924d8e879c65af4fe5230d268454c719747c92c3bbfe6eab219b0c45d4a4a92

- Improved OpenVPN and WireGuard anti-censorship.
- Improved wsnet to use TLS padding when anti-censorship is enabled.
- Fixed wsnet thread synchronization issue that could cause a crash.

v2.10.11 (Alpha)

Released: 2024/06/05
SHA-256: 3a7b9569b38a1caae15824068b1c9a1ea90661938f643478242872e7501ea47e

- Improved internal error handling.
- Improved limit of 50 split tunnel entries to only apply to hostnames.
- Improved IPC message passing to adhere to best practices.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Fixed tray icon sometimes can't be clicked.
- Fixed resolvconf/NetworkManager DNS managers sometimes not taking effect.
- Fixed GNOME/NetworkManager may show a scary message when disconnecting WireGuard.
- Fixed misdetection of platform on Raspberry Pi.
- Fixed pid race in helper.
- Fixed typo in command to get local IP.
- Updated ctrld dependency to 1.3.7.

v2.10.8 (Alpha)

Released: 2024/04/08
SHA-256: 5047e30fe3d95d6dffa3a050cbe728f26c9c4a0d8b0f053117286cd4efb7b08c

- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Fixed split tunnel for IP assumes /32 subnet.
- Fixed split tunneling for distributions which mount cgroups v2 by default.
- Fixed makepkg bug mangling the ctrld binary by specifying !debug in the PKGBUILD.

v2.10.6 (Alpha)

Released: 2024/04/01
SHA-256: 3e6761d1d67131fc3abf90174a3c149c0ef1a352d17914943dae995f040f3319

- Added a limit of 50 split tunnel entries to ensure stability.
- Added requirement for iputils or equivalent since wsnet may use the 'ping' utility directly.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Fixed callback may not be called on error [wsnet].
- Fixed app window resize again, forcing a size update at the end of animations.

Known Issues:
- ctrld utility (used when custom DNS option is enabled) fails to start on Arch Linux.

v2.10.5 (Alpha)

Released: 2024/03/19
SHA-256: 90773c5c1e8357836785a7211549276fc916b354ea2fc3fd9336b41b415d404e

- Added support for private key passwords in OpenVPN custom configs.
- Added the user-agent request header to all HTTP-requests [wsnet].
- Added new API endpoints needed for mobile [wsnet].
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed wsnet versioning to be the same as the client application [wsnet].
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed app window resize workaround may cause transitions to be jittery.
- Fixed duplicate copies of wsnet in RPM package.
- Fixed app window may not resize if occluded by another window.
- Removed "New Window" desktop action, which previously did nothing.
- Updated ctrld dependency to 1.3.5.

v2.10.2 (Alpha)

Released: 2024/02/29
SHA-256: 0f2e5ca68fa7e7ca357720815d296970289bd889c0f01860bf78f9f88c6b7c42

- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Improved anti-censorship measures in WireGuard and OpenSSL.
- Improved Polish translations.
- Improved secrets organization in the wsnet library.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Improved logging by adding distribution name and version.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed advanced parameter ws-use-icmp-pings ignored by app.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed Help screen to only show human support link for Pro accounts, and update descriptions.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Removed net-tools dependency.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

v2.9.9

Released: 2024/02/20
SHA-256: c1c62d4101b63dd574b986a124b07c5e9649f88e7a249dc42a454b4f90105baa

- Added per-app split tunneling support.
- Added feature to export/import preferences to/from JSON file.
- Added password reveal/hide button for main login.
- Added 'status' command to the CLI.
- Added missing dependency for libglvnd-opengl.
- Added advanced parameter for specifying specific wireguard server.
- Improved anti-censorship measures in WireGuard and OpenVPN.
- Improved labels and descriptions in preferences to match the mobile app.
- Fixed WireGuard anti-censorship.
- Fixed transition to 2FA screen when logging in.
- Fixed importing/exporting preferences closes the app window if docked.
- Fixed banned/disabled message not showing during login.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed installer log reordering in merge log.
- Fixed escaping of the OpenVPN password.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed DNS script can't find some executables.
- Fixed compile dependency missing from README.
- Fixed app possibly getting stuck at startup or shortly after.
- Fixed export preferences dialog not adding the correct suffix automatically.
- Fixed non-existent pkexec dependency for older versions of Ubuntu.
- Fixed DNS scripts incorrectly referencing full paths to binaries.
- Fixed app search in preferences not working if it is reopened.
- Fixed inclusive app not obeying Allow LAN Traffic setting.
- Fixed service is not enabled on some distributions during install.
- Fixed log spam when restarting while connected.
- Fixed location of the close and minimize buttons on the login and start screens.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Removed app shadows causing various issues.
- Removed unnecessary threads running on helper service.
- Updated boost and c-ares dependencies.
- Updated ctrld dependency to 1.3.3.

v2.9.7 (Beta)

Released: 2024/02/09
SHA-256: c3ff4b71a8a1c3b316bedc8cf804c6e4eee7f4e3e29da4d346cddd726581f958

- Improved anti-censorship measures.
- Fixed exporting preferences closes the app window if docked.

v2.9.6 (Alpha)

Released: 2024/02/05
SHA-256: 4a5e9a03749c1c2bc4e53a05074278aeea25e150eb9f44809acdc26e7f37fad2

- Improved anti-censorship measures in WireGuard and OpenVPN.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed compile dependency missing from README.
- Fixed app possibly getting stuck at startup or shortly after.

v2.9.4 (Alpha)

Released: 2024/01/26
SHA-256: 2dbe22b672e984d6874d8390d6cb47be5b3e006c6c102e89e5b370401ca0f520

- Added password reveal/hide button for main login.
- Improved UX for the export/import preferences feature and filter irrelevant preferences when importing.
- Fixed WireGuard anti-censorship.
- Fixed inclusive app not obeying Allow LAN Traffic setting.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed export preferences dialog not adding the correct suffix automatically.
- Fixed non-existent pkexec dependency for older versions of Ubuntu.
- Fixed DNS scripts incorrectly referencing full paths to binaries.
- Fixed app search in preferences not working if it is reopened.
- Removed app shadows causing various issues.
- Removed unnecessary threads running on helper service.
- Removed changes causing credential issues with OpenVPN custom config.
- Updated ctrld dependency to 1.3.3.

v2.9.2 (Alpha)

Released: 2024/01/11
SHA-256: 020e337c42a2b3882e570de82da2c301150b0a319796681018222bcfb557c893

- Added per-app split tunneling support.
- Added feature to export/import preferences to/from JSON file.
- Added feature to support custom OpenVPN configs requiring a user name and password.
- Added 'status' command to the CLI.
- Added special logging category to the client log containing random hash code of the given connection.
- Added advanced parameter for specifying specific wireguard server.
- Added missing dependency for libglvnd-opengl.
- Improved labels and descriptions in preferences to match the mobile app.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed location of the close and minimize buttons on the login and start screens.
- Fixed service is not enabled on some distributions during install.
- Fixed log spam when restarting while connected.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost and c-ares dependencies.

v2.8.6

Released: 2023/12/14
SHA-256: 58c859439991b69a9b79dd1c0f5b06018fbf57ccdbd9ece01db8c2966aa3b6a4

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added hostname/IP split tunneling support.
- Added preference for setting tray icon color.
- Added StartupWMClass to windscribe.desktop file.
- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved uninstall scriptlets.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved in-app and manual upgrade experience.
- Improved iptables handling. Windscribe-specific rules are now prepended, rather than appended.
- Improved the appearance of the sign out button.
- Improved error message when the connected DNS utility (ctrld) fails to start.
- Improved build instructions in the README.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed wireguard binary contains debug symbols.
- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed install-update script not waiting for app to exit before invoking package manager.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed missing xcb dependencies for some distros.
- Fixed a firewall bug that may prevent multicast from working.
- Fixed signature check failing for the DGA library.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed ARM64 Linux package missing OpenGL library dependency for Pi devices.
- Fixed update-systemd-resolved script may not undo changes when disconnecting.
- Updated app dependencies (cURL/OpenSSL/OpenVPN etc.) to latest available version.
- Updated connected DNS utility (ctrld) to v1.3.2.
- Removed "Docked"/"Pinned" feature from preferences.

v2.8.5 (Beta)

Released: 2023/12/07
SHA-256: 9cf73414023a58efe29da880f42a7ff372800c864836740048d5f2a8ecca69aa

- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.

v2.8.4 (Alpha)

Released: 2023/12/01
SHA-256: 16512197f93444ccf351f9ec3d27a3be84f52769ce2720a69c3cfc1d65753e61

- Added StartupWMClass to windscribe.desktop file.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved iptables handling. Windscribe-specific rules are now prepended, rather than appended.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed wireguard binary contains debug symbols.
- Removed "Docked"/"Pinned" feature from preferences.
- Updated to OpenVPN 2.6.8.

v2.8.2 (Alpha)

Released: 2023/11/24
SHA-256: 7cb21fc7470c051b33c174d4b1546970687384fc891b832065f3ee3bbea147ed

- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when ctrld (custom DNS) fails to start.
- Improved build instructions in the README.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed install-update script not waiting for app to exit before invoking package manager.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed missing xcb dependencies for some distros.
- Fixed a firewall bug that may prevent multicast from working.
- Fixed signature check failing for the DGA library.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Upgraded app dependencies to latest available version.

v2.8.1 (Alpha)

Released: 2023/11/08
SHA-256: 98223315965c2eb0780dc419c00618b9124d47e04d765c7fb36ce2e19a79fb9c

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added hostname/IP split tunneling support.
- Added preference for setting tray icon color.
- Improved uninstall scriptlets.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved in-app and manual upgrade experience.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed ARM64 Linux package missing OpenGL library dependency for Pi devices.
- Fixed update-systemd-resolved script may not undo changes when disconnecting.
- Upgraded bundled ctrld utility to v1.3.1.

v2.7.14

Released: 2023/10/23
SHA-256: 35952ba97392503301b0b09045c75da601851eb25653e0b481bba05e8e104d9a

- Added anti-censorship toggle in preferences.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added translations for Arabic, Czech, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added new in-house Stealth/Wstunnel application.
- Added a small loading spinner to some operations which may take a long time.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Added global DNS in the update-systemd-resolved script for a loopback DNS IP.
- Added support for native aarch64 (arm64) Ubuntu build.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added new logout and quit screens.
- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed OpenVPN not using custom DNS.
- Fixed app fails to download update package on Ubuntu arm64.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed Linux firewall may not block some traffic if sharing internet connection.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed incorrect app categorization.
- Fixed the dns-leak-protect script to only process IPv4 DNS.
- Fixed RPM package upgrade failures.
- Fixed validation of the domains entered by the user.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed route call failure if route binary not in $PATH.
- Fixed Arch install script to kill the app if it is running.
- Fixed RPM install script to ensure helper is running after upgrade.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Fixed uninstall script to terminate app during uninstall or manual update to new version.
- Fixed app to explicitly block only OS default DNS servers and allow all others.
- Fixed in-app upgrade on Ubuntu will fail if upgrade requires additional Linux packages to be installed.
- Fixed uninstall to remove all files created by the app.
- Fixed missing dependency requirements in install package for some desktop environments (e.g. XFCE).
- Fixed protocol badge not immediately updated on network changes.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.
- Removed timestamp from news feed items.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated to OpenVPN 2.6 and OpenSSL 3.

v2.7.12 (Beta)

Released: 2023/10/03
SHA-256: ef7e9ef97e0ae5c3e7277996e5adec06aed16698dac027d7477e87b1079e4915

- Fixed executable signature check disabled.

v2.7.11 (Alpha)

Released: 2023/09/23
SHA-256: fb9b5068ad3a9d69a58801172021b6850e7b2734677f078db490d163abba700b

- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.

v2.7.10 (Alpha)

Released: 2023/09/11
SHA-256: dc37f679923a1180a27af79af77cbc25f6fc31b07bf070f78846f46434a6aa3c

- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added new in-house Stealth/Wstunnel application.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.

v2.7.9 (Alpha)

Released: 2023/08/10
SHA-256: 348d8c7d5a33966d5007dc6e215a83516efac8f1d7c7bd13eabdff8979fb5c91

- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship toggle in preferences.
- Added Czech language translation.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed Russian translation.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed app fails to download update package on Ubuntu arm64.
- Fixed Linux firewall may not block some traffic if sharing internet connection.
- Removed timestamp from news feed items.
- Removed 'kill app' functionality from the uninstall script.

v2.7.6 (Alpha)

Released: 2023/06/20
SHA-256: 7aead7f2b4cdbfde572f236800d108fdb62f00be47b96affff66848ae9934328

- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed incorrect app categorization.
- Fixed the dns-leak-protect script to only process IPv4 DNS.
- Fixed RPM package upgrade failures.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.

v2.7.5 (Alpha)

Released: 2023/06/01
SHA-256: 1e9a937e868a508c0a26a1affe9d528a68040f1f841719b555acf53997759bae

- Added a small loading spinner to some operations which may take a long time.
- Added custom connected DNS placeholder text.
- Added global DNS in the update-systemd-resolved script for a loopback DNS IP.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Fixed missing ?int=ws in the URI when making queries if user supplies DoH resolver that's on *.controld.com.
- Fixed validation of the domains entered by the user.
- Fixed transition to the initialization window to hide the general message window shadow.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed missing port number for the CURLOPT_RESOLVE parameter.
- Fixed redundant updateFirewallSettings calls being made during pings.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed route call failure if route binary not in $PATH.
- Fixed Arch install script to kill the app if it is running.
- Fixed RPM install script to ensure helper is running after upgrade.
- Updated ctrld binary to v1.2.0.

v2.7.4 (Alpha)

Released: 2023/05/23
SHA-256: 123f102c916b13b3635fa6cb08c78ac6300fdba4bd98169c08fb6ee14a85b566

- Fixed uninstall script to terminate app during uninstall or manual update to new version.
- Fixed app to explicitly block only OS default DNS servers and allow all others.
- Fixed in-app upgrade on Ubuntu will fail if upgrade requires additional Linux packages to be installed.
- Fixed uninstall to remove all files created by the app.
- Fixed missing dependency requirements in install package for some desktop environments (e.g. XFCE).
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Updated wstunnel to v4.1 for x86_64 and arm64.

v2.7.3 (Alpha)

Released: 2023/05/01

- Added machine-generated translations for Arabic, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added new logout and quit screens.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added support for native aarch64 (arm64) Ubuntu build.
- Added the minimum requirements to Linux packaging specs.
- Fixed busy spinner displayed when exiting is not centered.
- Fixed ROBERT screen loading icon not antialiased.
- Fixed protocol badge not immediately updated on network changes.
- Fixed emergency connect feature not working.
- Fixed app crash during startup.
- Fixed python scripts to conform to the pep8 style guide.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed preference items are sometimes expanded when they shouldn't be.
- Fixed incorrect minimum glib requirements for install on Debian and Arch.
- Fixed custom configs not pinged on Linux.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated build system to use cmake for all projects.
- Updated to OpenVPN 2.6.1.
- Removed unnecessary code from when the UI and engine were separate executables.
- Removed use of OpenSSL 1.1.1.

v2.6.14

Released: 2023/03/27

- Fixed free accounts not pinging pro locations.
- Fixed upgrade widget not hidden when returning to login screen.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed MAC address spoofing toggle state isn't saved.
- Fixed iptables not flushed after disconnect on distros using iptables-legacy (Ubuntu 20.04/Fedora 29).

v2.6.12 (Alpha)

Released: 2023/03/13

- Added use of Encrypted Client Hello (ECH) as a fail-over mechanism to circumvent SNI filtering.
- Added all secrets to the domain generation algorithm library and removed them from the app code.
- Added OpenSSL 1.1.1t due to an OpenSSL security advisory.
- Added hover highlighting to the protocol change screen.
- Added a descriptive error message on the login screen when the user is disabled or rate-limited.
- Fixed crash may occur when switching protocol window modes.
- Fixed disconnecting a WireGuard connection while it is connecting may disconnect, then start connecting again once the WireGuard dynamic configuration has been acquired.
- Fixed a successful failover did not trigger the 'save preferred protocol' screen.
- Fixed server API request would never be processed by curl due to bug in curl libs 7.83/7.85.
- Fixed new notifications appear at the bottom of the News Feed screen.
- Fixed notification age label to display "Today" instead of "0 days ago" for new notifications.
- Fixed server API request pipeline to ensure requests are processed as quickly as possible.
- Fixed confirm email feature doesn't work.
- Fixed high CPU usage while idle.
- Fixed firewall to allow apps to reach the local interface address.
- Fixed firewall to always allow localhost (127.0.0.0/8 and ::1).
- Fixed out of place cancel button and overlapping entries in the change protocol screen.
- Fixed change protocol screen should not be available when using a custom config.
- Fixed WireGuard doesn't reconnect upon waking from sleep.
- Fixed manual-mode connections should not timeout.
- Fixed login screen overlay bugs.
- Fixed default notification message color, displayed when there are no notifications.
- Fixed protocols window expansion bug.
- Fixed potential app crash when exiting due to an OS restart.
- Fixed data counter appears in custom config mode.
- Fixed location latency checks (pings) displaying "-2" for many locations when connected.
- Fixed ON/OFF icon not centered on some display scale factors.
- Fixed "We've detected that your network settings may interfere with Windscribe" dialog displays multiple times.
- Fixed alignment of some icon and text widgets on the main app screen.
- Fixed 'App Internal DNS' preference description to indicate 'OS Default' may cause DNS leaks.
- Fixed location latency checks (pings) to only be performed when the app is disconnected.
- Fixed manual install does not detect an incompatible OS version.
- Fixed in-app check for update to not indicate an update is available if the OS kernel version is incompatible.
- Fixed in-app upgrade to use apt/dnf rather than dpkg/rpm.
- Fixed rpm package creation to use rpmbuild rather than convert the Debian package with fpm.
- Fixed domain generation algorithm library signature check.
- Fixed app does not relaunch after in-app upgrade.
- Fixed login hang on Xubuntu when app firewall is enabled.
- Fixed helper not enabled on Arch after install/reboot.
- Fixed firewall rules: multicast and localhost rules were uni-directional instead of both ways.
- Fixed firewall rules: added missing Linux IPv6 localhost rule.
- Updated 'App Internal DNS' preference to default to Cloudflare.

v2.6.6 (Alpha)

Released: 2023/01/17

- Added user interface improvements to indicate the app is failing over to another protocol.
- Fixed potential app crash when verifying an IP's validity.
- Fixed connectivity check fails when changing networks on Wstunnel / Stealth protocols.

v2.6.5 (Alpha)

- Fixed app will use Preferred Protocol for a network even if it's disabled.
- Fixed HTTP/SOCKS Proxy Gateway setting to warn user the Allow LAN Traffic option must be enabled.
- Fixed privilege escalation vulnerability in usage of OpenVPN up/down directives.
- Fixed notice on the login screen when user is disabled or rate-limited.
- Fixed app to save a successful failover between program launches.
- Fixed error message when user tries logging in with their email address.
- Fixed app crash during exit on Ubuntu.
- Fixed firewall blocking the app from connecting if set to toggle on before connecting.
- Fixed firewall doesn't toggle off in automatic mode when disconnecting.
- Fixed firewall not enabled when firewall switch toggled on.
- Fixed privilege escalation vulnerabilities in communication mechanism between the app and helper.
- Fixed install folder to be /opt/windscribe.

v2.5.18

- Fixed potential app crash when the app is failing over to another protocol.

v2.5.17

- Fixed potential app crash when reading saved WireGuard config data created by the v2.4 app.

v2.5.14

- Fixed split tunneling driver not being installed when upgrading from 2.4 or older.

v2.5.12 (Beta)

- Fixed failover not triggering on TLS/SSL connection error.
- Fixed locations menu appearing randomly.
- Fixed build-a-plan users cannot use their static IPs.

v2.5.11 (Beta)

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences.
- Added installer command-line parameter to prevent automatic app launch.
- Added login and logout functionality to the CLI app.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added Auto Connect toggle to Connection Preferences.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added loading indicator to ROBERT screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.3.
- Updated locations tray for better performance / cleaner code.
- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed various routing/firewall issues.
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/WireGuard processes when app starts.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.
- Fixed connect/disconnect notifications do not display on Debian 11.

v2.5.10 (Alpha)

- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.

v2.5.9 (Alpha)

- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed settings synced immediately.
- Fixed wrong OpenGL/libkrb5 linking.
- Fixed WStunnel protocol entry shows up twice.

v2.5.8 (Alpha)

- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed some minor UI bugs.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed connect/disconnect notifications do not display on Debian 11.

v2.5.7 (Alpha)

- Added loading indicator to R.O.B.E.R.T. screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.

v2.5.6 (Alpha)

This is a major update!

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences
- Added login and logout functionality to the CLI app.
- Added log for any code assert statements that are triggered in a release build.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added advanced parameter ws-tunnel-test-no-error and allow ws-tunnel-test-attempts to be 0.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added auto-connect toggle to Connection Preferences.
- Added minimize/close-to-tray in Linux.
- Added support for wireguard kernel module on Linux if it's available.
- Added support Wayland compositor on Linux.
- Added support for Arch Linux via zst installer package.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.
- Updated locations tray for better performance / cleaner code.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues
- Fixed some tunnel test parameter bugs
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/Wireguard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Fixed incorrect Linux DNS manager detection on Fedora 36.
- Fixed no connectivity after waking from suspend with WireGuard and OpenVPN on Fedora 36.
- Removed use of the old method in the ServerLocations API.
- Removed terminate sockets network preference from the Linux app.
- Removed 'check for update failed' notification dialog on unsupported Linux distros (e.g. Arch Linux)

v2.4.8 (Beta)

- Same as last Alpha release

v2.4.7 (Alpha)

- Updated update-systemd-resolved script
- Log server errors when checking for available updates
- Fixed update flow for users without gnome-terminal

v2.4.6 (Alpha)

- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases
- Use resolvectl instead of systemd-resolve in some cases
- Fixed slow reconnect via WireGuard on Ubuntu in some cases

v2.4.5 (Alpha)

- Improved DNS manager automatic selection algorithm
- Fixed crash on bad server locations list
- Dynamic Wireguard Interface Allocation Support
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Standardized API interaction timers
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in menu bar

v2.3.15 (Beta)

- Initial GUI app beta release
- Everything is new
- Known issue: Does not support NetworkManager for DNS manipulation
- Known issue: Does not support ufw

v1.4.51

Final release of the CLI app - this version is EOL.

New Features:
-----------------------
- Custom configs support
- Support for systemd-resolved

Bug Fixes:
-----------------------
- Disables IPv6 to prevent WebRTC leak
- Debug log updates
- AUTH_FAILED and GET_CONFIG timeouts
- Refetch credentials on AUTH_FAILED fix
- Attempt to reconnect forever if internet is down
- Disable UDP protocol when a proxy is configured
- Stunnel log path fix
- Custom Plan info in `windscribe account` output

v1.3.19 (Deprecated)

No changelog

v1.2.1 (Deprecated)

No changelog

v1.1.1 (Deprecated)

No changelog

Open Source Software Attributions