New

• Freedom: Add maxSplit fragment option; Add applyTo noises option
• DNS outbound: Set "reject" as the default value for nonIPQuery
• go v1.25
• feat: Add remaining time to tgbot @Incognito-Coder
• Created / Updated fields for clients @aliglzr
• Add all-time traffic for inbounds and clients @aliglzr
• Xray Core v25.8.29

Update & improvement

• Moved DB to same app folder on Windows @fgsfds
• AutoFill OTP @finagin
• more list for public IP address
• Axios v1.11.0
• remove unnecessary vue files
• remove unnecessary ant files
• removed: Allocate
• actions/checkout from 4 to 5
• minor changes

Bug fixed

• fix saving sockopt
• fix: fail2ban on Debian 12

Reports

New

• Added filters to the xray logs viewer @fgsfds
• Added Update all geofiles button @fgsfds
• add sockopt to dockodemo @alireza0

Update & improvement

• upgrade telego @alireza0
• better musl libc usage @alireza0
• remove ocspStapling
• update dependencies

Bug fixed

• fix: inbounds slow loading @somebodywashere
• fix: Xray restarting after being manually stopped @fgsfds

Reports

New

• add ech support @alireza0
• add dokodemo port mapping @alireza0
• Added xray access log viewer @fgsfds

Update & improvement

• use musl libc toolchains for build statically linked binaries @elseif
• runs-on: ubuntu-latest
• change a-input to a-textarea
• xray core v25.8.3
• default Max Age to 360min
• update languages
• minor changes
• remove: glibc check

Bug fixed

• kill process instead of sending SIGTERM on Windows @fgsfds
• fix: pqv for sub
• fix portMap json @alireza0
• fix: simplify error handling
• fix: IPLimitlog display
• fix: sub enable warning

Reports

New

• add mldsa65 @alireza0
• Endpoint for updating client traffic by email @azavaxhuman
• GO v1.24.5 + update dependencies
• Reality: min & max client ver
• pqv: mldsa65Verify
• outbound: mldsa65Verify

Update & improvement

• xray core v25.7.26
• Xray core: old version removed
• remove password type
• ocspStapling set to 0
• Increase the number of characters for webBasePath @xujie86
• small improvement @X-Oracle

Bug fixed

• fix writeCrashReport() typo @ndanilo8

Reports

Bug fixed

• new alternative to get public IP address
• chore: return automatic generation of shadowsocks keys @shishkevichd
• fix: login title shifts the input fields @shishkevichd
• fixed: type
• fixed: mux

Reports

New

• feat: support .env file @aliglzr
• feat: add command list in telegram bot @spatiumstas
• feat: support metrics config @rammiah
• chore: add download config button for wireguard @shishkevichd
• feat: add comments under client id @egregors
• chore: add new dns features from v25.6.8 @shishkevichd

Update & improvement

• Code refactoring @Pk-web6936
• chore: X_UI_ENABLE_FAIL2BAN -> XUI_ENABLE_FAIL2BAN @shishkevichd
• chore: clean readme, add link to wiki @shishkevichd
• chore: update the installation command @jalalsaberi
• chore: build image in docker compose @shishkevichd
• chore: up minimal xray-core version to v25.6.8@shishkevichd
• chore: add translations for routing table@shishkevichd
• chore: add RHEL system to install.sh @xujie86
• refactor: use math.MaxUint16 when checking port @shishkevichd
• chore: clients comment improvement @shishkevichd
• refactor: use new page templates @shishkevichd
• refactor: new loading logic, icons for tabs @shishkevichd
• chore: russian language improvements@shishkevichd
• chore: mark 2053 port as unsecured@shishkevichd
• chore: reset two-factor authentication after changing admin credentials @shishkevichd @somebodywashere
• update dependencies

Bug fixed

• fix: handle inbounds interaction errors @shishkevichd
• fix: don't show ip limit for some protocols @shishkevichd
• fix: reduced login title font-size for mobile @spatiumstas
• fix: generate correct keys for shadowsocks inbounds @shishkevichd
• fix: selecting a supported language@shishkevichd

Reports

Important Note:
The secret token has been removed in this version due to the implementation of two-step authentication.
Additionally, because of the new password hashing feature, you will not be able to downgrade your panel to an earlier version after installing this update, unless you reset your password after downgrade.

New

• Added 3 new buttons to telegram bot @nistootsin
• chore: implement 2fa auth @shishkevichd
• feat: implement geofiles update in panel @shishkevichd
• feat: hashing user passwords @Columbiysky
• geosite : category-porn
• Xray-core v25.5.16

Update & improvement

• chore: do not show the current login and password @shishkevichd
• chore: toasts translation refactoring @shishkevichd
• chore: russian translate improved @Columbiysky
• chore: add translations for a-table @shishkevichd
• chore: customizing triggers for builds @shishkevichd
• chore: сonfiguring paths for CI @shishkevichd
• chore: simplified Chinese translate improved @ckun52880
• update dependencies

Bug fixed

• fix: Restore from .db file fails @Columbiysky
• fix: 2fa qr-code @TaraRostami
• fix: check default credentials during a fresh installation @shishkevichd
• fix: remove duplicate path @shishkevichd

Reports

New

• feat: add Submit As Enable in telegram bot @nistootsin

Update & improvement

• feat: add a toggle to use public IPv4 in QR/URI @akilaid
• refactror: add check ipv6 path @BlackkkMaster
• chore: move qr params in a-popover @shishkevichd
• chore: deleting unnecessary functions @shishkevichd
• docs: Update README.zh_CN.md @006lp
• docs: Update README @Pk-web6936
• automatic Build and Release @Pk-web6936
• Xray Core v25.4.30
• update dependencies

Bug fixed

• chore: minor fixes for login page @TaraRostami
• fix: qr modal header @shishkevichd
• fix: encoding subscription title in base64 @shishkevichd
• fix: Error when generating shadowsocks keys in Blake3_AES_256_GCM @shishkevichd
• fix docker-compose.yml: the attribute version is obsolete @Columbiysky

Reports

New

• Add Admin-Controlled Client Management to Telegram Bot @nistootsin
• feat: add Arabic language @kmoshax

Update & improvement

• chore: update Go to v1.24.2 @Pk-web6936
• chore: simplify login page @shishkevichd
• chore: giving keys for each a-collapse-panel @shishkevichd
• chore: make class to get the device form factor @shishkevichd
• chore: meta tag change @shishkevichd
• chore: delete display.css @shishkevichd
• chore: improve russian translation @shishkevichd
• chore: moving the settings tabs to a separate directory @shishkevichd
• chore: moving the modals to a separate directory @shishkevichd
• chore: transforming a common sidebar into a separate component @shishkevichd
• chore: improve styles @shishkevichd
• chore: move client table into components @shishkevichd
• locs(RU\UA): a bit better translate @Columbiysky
• Consolidate and Optimize .gitignore Files @Pk-web6936
• Code refactoring @shishkevichd
• Code refactoring @Pk-web6936
• chore: create FileManager class for downloading files @shishkevichd
• minor changes
• Xray Core v25.3.31
• glibc version
• update dependencies

Bug fixed

• fix: current tab highlight in sidebar @shishkevichd
• fix: opening links in the sidebar @shishkevichd
• fix: dashboard won't load @shishkevichd

Reports

New

• feat: custom subscription title in panel @am-monkey
• chore: pretty 'Overview' page @shishkevichd
• chore: pretty Inbounds page @shishkevichd

Update & improvement

• Update to regular cert issue @somebodywashere
• Fixes and improvements @TaraRostami
• Code refactoring @shishkevichd
• chore: some improvements @shishkevichd
• Updates to CF cert issue @somebodywashere
• runs-on: ubuntu-22.04
• Axios v1.8.2
• warp - optimize utility code
• Refactor: Use any instead of interface{}
• xray log - minor change
• Russian translation fixes @saberkovich

Bug fixed

• fix - public IP

Reports