• v0.9.2 5e7164c42f

    0.9.2
    All checks were successful
    ci / test (pull_request) Successful in 22s
    ci / test (push) Successful in 24s
    Stable

    mysticalsoap released this 2026-08-28 15:32:48 -04:00 | 26 commits to trunk since this release

    Signed by mysticalsoap
    SSH key fingerprint: SHA256:9YDy/JqlZ87+NCp7H32yS1SJq0eXYhL0fFILx8wQn7g

    Scope: ProtonVPN accounts and WireGuard tunnels. Supported providers
    are Airvpn, Mullvad, ProtonVPN and Windscribe; PIA and AzireVPN are
    dropped (#134). The cli is repaired and supported again (#132).
    Doublehop is broken and out of scope for this release (#179);
    WireGuard carries the main tunnel only -- hop and bypass connections
    stay OpenVPN (#176).

    • [new] ProtonVPN account import: SRP sign-in with 2FA, a browser-opened verification page when Proton demands one, and a persisted session so renewals never re-prompt (#33, #150, #147)
    • [new] WireGuard tunnels, plumbed with wg/ip directly instead of wg-quick, so aqomui stays the only routing manager and bypass keeps working (#152)
    • [new] provider auto-updates run on a schedule in the service, with no gui around (#142)
    • [new] cli selection modes on connect: --random, --random-favourite, --profile (#123)
    • [new] a cleared fallback DNS field means deliberate single-server, so resolved has nowhere to strand a failover (#167)
    • [change] providers are their own package: one module per provider, base configs in code instead of shipped templates, one supported-provider table
    • [change] Mullvad import is WireGuard-only -- Mullvad retired OpenVPN server-side
    • [change] the alternative DNS servers outrank whatever a tunnel config carries, on WireGuard too
    • [change] gui and cli run through one server catalog and one connect/reconnect decision (#123)
    • [change] the pre-fork legacy config layout is dropped (#54)
    • [bugfix] the cli's broken-since-fork commands work again: connect, enable/disable, alt-dns (#132)
    • [bugfix] a WireGuard teardown announces itself, so the gui cannot keep showing a dead connection
    • [bugfix] failed imports surface as a dialog, not a toast the desktop can swallow (#141)
    • [bugfix] imports resolve hostnames with the firewall up, and take their firewall exceptions back down on failure too (#158)
    • [bugfix] deleting a provider persists the protocol table (#139)
    • [bugfix] the bypass comes back after a reboot (#168)
    • [bugfix] no ipv6 bypass route is written on networks without an ipv6 gateway (#160)
    • [bugfix] Proton API sessions pin the plain transport: no DoH discovery against hardcoded public resolvers from the root service (#164)
    • [bugfix] the DNS watchdog backs off when re-pins never stick, instead of flushing caches forever (#166)
    • [bugfix] expected startup states and expected rule misses stopped logging as errors and warnings (#161, #162)
    Downloads