* feat(mieru): add support for Mieru traffic pattern obfuscation and fragmented timing
* perf(tester): optimize concurrent url-test scheduling and interim updates for large groups
* perf(tunnel): centralize DNS retry scheduling and add backoff retry for proxy binding
* perf(udp): correct UDP rule rematch priority after DNS and centralize relay socket cleanup
* perf(ssh): tune channel window adjustment
* fix(udp): correct UDP rule rematch after DNS resolution
* fix(rule): skip IP matching when IP is empty
* fix(tuic): retry authenticate when QUIC cannot write immediately
* fix(UI): fix table footer view layouts in macOS and QR scanner preview transitions

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* feat(vless): enable compact stream buffers on iOS/tvOS to reduce concurrent memory usage
* perf(tester): optimize group tester switch logic to compare current round results
* perf(hysteria): stabilize upload pacing and congestion control for HYBBR
* fix(dns): handle transient socket backpressure gracefully in DNS over QUIC/HTTP3
* fix(http3): fix egress write stalls and prevent assertions on HTTP/3 connections
* fix(fallback): prevent application crash when falling back to string policy group placeholders
* fix(xhttp): allow NSNumber values in options parsing to preserve numeric parameters

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* feat(mieru): add support for Mieru protocol and its reliable UDP transport mode
* refactor(ech): refine ECH mode detection and validate configurations
* perf(widget): simplify Control Center widget status checking and toggle logic
* fix(backend): fix parameter truncation error when parsing WebSocket Early Data paths

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* fix(tls): refine ECH mode detection and validate configurations
* perf(vless): release vless vision after padding passthrough

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.

* fix(vless/xtls): resolve issues in handshake, partial data, read-flush, and non-ENC XTLS path
* fix(xhttp): omit Session ID and correct path & default padding for stream-one mode
* fix(net/crypto): resolve UDP zero-checksum, QUIC rule state sharing, TLS fragment, and UUID parsing alignment
* perf(net): optimize memory allocations in hot paths and reduce vless buffer copying
* fix(misc): support form-driven OpenConnect authentication, script notifications, widget refresh, group reorder layout, and translations

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources.
Users are responsible for providing their own configurations.

* fix(udp): resolve QUIC blocking rule matching issue
* fix(http2): resolve http2 dest ip for rule matching issue
* fix(amneziawg): read junk packet keys from correct index

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.