Changelog

• 366f7c8 chore: bump version to 0.5.3
• 5e4eda8 feat: multi-server admin + audit logging
• 5ff35af fix: Svelte class directive syntax in servers page
• 45276d4 fix: address code review findings from Wave 2

Changelog

• 8a569a3 chore: bump version to 0.5.1
• 0e74a38 feat: v0.5.1 — security hardening, bandwidth tracking, test coverage
• 9533782 fix: externalize @tauri-apps/api/core in Vite build

Changelog

• 95dd8b5 Add UX tooltips to client features list in README
• 5e796e1 Add UX tooltips with detailed explanations for settings
• 3d4cfc4 Add comprehensive edge-case tests and fuzz tests
• b690b50 Add config validation on load with actionable error messages
• d33460a Add connection diagnostics tool
• 728a07e Add in-app log viewer with ring buffer
• f0d75c2 Add per-user bandwidth limits and server health metrics
• 8fc909d Add secret rotation API for JWT and Reality keys
• a1f9c0f Bump version to 0.5.0, update CHANGELOG and README
• 8575897 Finalize v0.5.0 CHANGELOG and README with all new features
• 37d27e6 Fix self-assignment lint warning in fallback chain
• cf78f42 Fix test configs to pass config validation after merge
• 7b32a88 Harden Docker deployment with non-root user, healthcheck, and resource limits
• eb99fcc Harden security: fix critical and high audit findings
• 6bc0b2f Merge branch 'worktree-agent-a1f1dafc'
• 40758bc Merge branch 'worktree-agent-a23b67cc'
• c7d8666 Merge branch 'worktree-agent-a2fcbfb3'
• 6a64e93 Merge branch 'worktree-agent-a9fbfafa'
• a6cfff0 Merge edge-case tests: resolve conflict in client_test.go
• 9af522a fix: restore .gitkeep after admin build in release CI

Changelog

• d0b13f4 Add .claude/worktrees to gitignore, remove cached worktrees
• fc7aa5b Add CDN/Cloudflare WebSocket transport for censorship circumvention
• 4e4b56e Add TCP relay/bridge mode for censorship circumvention
• be16e7a Add connection fallback chain: direct → CDN WebSocket
• ae8954e Add split tunneling with bypass domains and IPs
• 7d9ba6d Bump version to 0.4.0, update docs and CHANGELOG
• 0bc0f96 Fix config test to use tmpDir instead of /var/lib/burrow
• e272592 Fix gofmt formatting in daemon.go
• d33ca13 Harden cryptography: HMAC-signed invites, dedicated JWT secret, key validation
• 8c44c3e Merge branch 'worktree-agent-aa6eb9ec'
• 3a182bd Merge crypto hardening and CDN WebSocket transport
• 9197206 Merge mobile scaffold with conditional desktop/mobile compilation
• a1cf8f9 Scaffold mobile support with conditional desktop/mobile compilation

Changelog

• 7b324b6 Add auto-updater, single-instance, window-state plugins and CI test jobs
• 4fb806a Add comprehensive Go unit tests for client and server packages
• dc00845 Add vitest setup and comprehensive admin API tests
• c02aefc Add vitest setup and comprehensive client API/i18n tests
• fe2b41f Bump version to 0.3.0, update README and CHANGELOG
• c0387b1 Fix critical security vulnerabilities in kill switch, CORS, auth, and input validation
• b45ebbc Fix frontend state management, error handling, and security issues
• 44f329a Fix gofmt formatting in server API
• 3217e17 Fix race conditions, atomic config writes, HTTP timeouts, and error handling
• 71779d0 Merge branch 'worktree-agent-a468f46b'
• b1e19d1 Merge branch 'worktree-agent-a7b886d3'

Changelog

• 428a975 Add TUN mode: route all system traffic through VPN by default
• a790563 Add real-time traffic statistics via sing-box ClashAPI
• 17a326c Add return type to getConfig API function
• 7f2eedd Add scaffold READMEs to .gitignore
• bea2a14 Complete UX overhaul: tray, reconnect, i18n, onboarding, deep-links
• 552e3e1 Fix 23 bugs found by code review: race conditions, security, UX
• 621fd10 Fix critical error handling, security, and release issues
• c908839 Fix deep link scheme, update README accuracy, add CHANGELOG
• 152370a Fix gofmt formatting in tunnel.go
• 9475d3a Fix reconnect races, tray shutdown, admin types, dead i18n keys
• 9204a20 Improve UX: daemon auto-start, persistent preferences, smart first-run flow
• 54c0fa0 Major UX overhaul: notifications, ping, server switch, cancel reconnect
• cdb18c7 Merge release workflows: GoReleaser + Tauri in single pipeline
• a168304 Move deep-link config from app to plugins section
• 1892cb3 UX polish: live speed stats, error localization, tray tooltip, feedback
• 2c87ca6 Update README with new features, bump version to 0.2.0
• e3b4b0a Update README: reflect current features and architecture

Burrow v0.1.0

The first release of Burrow — a self-hosted VPN/proxy for censorship circumvention.

Server

Deploy on your VPS with Docker or manual setup. Supports VLESS+Reality, Hysteria 2, Shadowsocks 2022, and WireGuard protocols.

Desktop Client

Native desktop app built with Tauri 2. Download for your platform:

• Windows: Burrow_0.1.0_x64-setup.exe (NSIS) or .msi
• macOS (Apple Silicon): Burrow_0.1.0_aarch64.dmg
• macOS (Intel): Burrow_0.1.0_x64.dmg
• Linux: .AppImage, .deb, or .rpm

CLI Client

Standalone command-line client for all platforms — see burrow_* archives.

Features

• VLESS+Reality traffic camouflage (undetectable by DPI)
• Multi-protocol with automatic fallback
• Admin dashboard with real-time monitoring
• Invite-only access system
• Kill switch (blocks traffic if VPN disconnects)
• One-click connect