MHSanaei Release Notes
Last updated: Mar 14, 2026
MHSanaei Products
All MHSanaei Release Notes (10)
- Mar 4, 2026
- Date parsed from source:Mar 4, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.11
MHSanaei highlights a new release patch with feature tweaks and stability gains, including restart of xray-core from CLI, performance tweaks, added Ubuntu cron, Alpine runlevel, HTTP 200 checks, timeouts, and robustness fixes. It summarizes v2.8.10 to v2.8.11 changelog for improved reliability and security.
What's Changed
New
- [feat] restart xray-core from cli @alireza0
Update & improvement
- Adjust KCP MTU when selecting xDNS mask
- Add cron to ubuntu packages @xqzts
- Add 'default' runlevel to x-ui service in Alpine @linkerlau
- Require HTTP 200 from curl before using IP
- Add timeouts and delays to backup sends
- Improve telego client robustness and retries
- Bump Go to 1.26
- update dependencies
Bug fixed
- fix windows build @alireza0
- bug fix
- translate bug fix
- fix: remove excluded paths from gzip middleware in router initialization @NabiKAZ
- Fix: escape HTML characters in tgbot start command @rydve
- Fix DeepLink for Happ, remove encoding URL @mangustyura
Reports
Full Changelog: v2.8.10...v2.8.11
Original source Report a problem - Feb 11, 2026
- Date parsed from source:Feb 11, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.10
MHSanaei unveils a new update with security, stability and performance enhancements. It adds a last IP wins policy for IP limits, TLS peer cert tweaks, Windows MSYS2 runtime fix, outbound URL speed test, cache cleanup workflow, geofile and translation updates, IPv6/routing bug fixes, and notes a full changelog from v2.8.9 to v2.8.10.
What's Changed
New
- Finalmask: Add XICMP
- feat: implement 'last IP wins' policy for IP limitation @AungYeZawDev
- feat: add openssl to dockerfile @mojixcoder
- Add url speed test for outbound @surbiks
Update & improvement
- Remove allowInsecure
- refactor: set default ProfileUrl @nebulosa2007
- refactor: set header only if it not empty @nebulosa2007
- Refactor TLS peer cert verification settings
- Update geofiles according 304 http respond @nebulosa2007
- [Windows] Use MSYS2 to fix the runtime CGO problem @EbrahimTahernejad
- Add workflow to clean old GitHub Actions caches
- Xray Core v26.2.6 and dependency updates
- Update translate.es_ES.toml @emirjorge
Bug fixed
- Fix ipv6 hostname parsing for subscriptions @bakatrouble
- fix security issue
- fix : Uncontrolled data used in path expression
- fix: trim whitespace from comma-separated list values in routing rules @Alimpo
Reports
- Full Changelog: v2.8.9...v2.8.10
All of your release notes in one feed
Join Releasebot and get updates from MHSanaei and hundreds of other software products.
- Feb 1, 2026
- Date parsed from source:Feb 1, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.9
MHSanaei highlights a fresh release featuring a new XHTTP transport with CDN detection bypass options, UDP hop interval support for Hysteria, and pinnedPeerCertSha256 in TLS. It adds hysteria2 hints, updates targets, and renames a peer cert verification method for xray-core compatibility. Telegram bot fix and full changelog from v2.8.8 to v2.8.9.
What's Changed
New
- XHTTP transport: New options for bypassing CDN's detection
- inbound : finalmask
- outbound: finalmask
- Add UDP hop interval min/max support for Hysteria
- Add pinnedPeerCertSha256 support to TLS settings
- feat: more subscription information fields @sh1shd
- Update & improvement
- Add UDP hop interval min/max support for Hysteria
- Add hysteria2 protocol in hint text @nebulosa2007
- Update reality_targets.js @lillinlin
Bug fixed
- fix: rename verifyPeerCertInNames to verifyPeerCertByName to be compatible with xray-core v26.1.31 @farhadh
- Fix default CA by enforcing it everywhere @sam-mosleh
- fix Telegram bot ignores reverse proxy setting @sviatoslav-gusev
- Fix modifying default CA @sam-mosleh
- fix Telegram bot ignores reverse proxy setting @mr-shura
Reports
- Full Changelog: v2.8.8...v2.8.9
- Jan 18, 2026
- Date parsed from source:Jan 18, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.8
MHSanaei announces a release featuring Hysteria2 outbound protocol support, new inbound TUN protocol, UDP mask for outbound, port selection for ACME HTTP-01, and curl added to Dockerfile. Core upgrade to Xray v26.1.18 plus WebSocket improvements and targeted bug fixes.
What's Changed
New
- Add Hysteria2 outbound protocol support
- Add TUN protocol for inbound
- Add UDP mask support for Hysteria outbound
- Add x-ui.service.arch file @nebulosa2007
- Add port selection and checks for ACME HTTP-01 listener
- Added curl package to Dockerfile @VolgaIgor
Update & improvement
- Update minimum Xray version requirement
- feat: improve BBR management with sysctl.d and backup support @nebulosa2007
- Feature: Use of username and passwords consisting of several words @vorontsov-amd
- Enhance WebSocket client connection logic and improve event listener management @lolka1333
- refactor update geofiles fuctions @nebulosa2007
- Refactor ca-certificate dependency @nebulosa2007
- Default listen address to 0.0.0.0 in GenXrayInboundConfig
- Xray Core v26.1.18
Bug fixed
- Fixed incorrect filtering for IDN top-level domains @VolgaIgor
- Return nil if no error in GetXrayErr
Reports
- Full Changelog: v2.8.7...v2.8.8
- Jan 5, 2026
- Date parsed from source:Jan 5, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.7
MHSanaei announces a release with new IP cert, MTU 1250, fasthttp 1.69.0, OpenSSL 3.6.0, real-time outbound traffic and UI improvements.
What's Changed
New
- ip cert
Update & improvement
- mtu to 1250
- Update fasthttp to v1.69.0
- Update OpenSSL installer to version 3.6.0
Bug fixed
- feat: Real-time Outbound Traffic, UI Improvements & Fix by @lolka1333 in #3629
- Refactor code and fix linter warnings by @kr-ilya in #3627
- Added curl dependency to Dockerfile for improved functionality
- fix #3622
Reports
- Full Changelog: v2.8.6...v2.8.7
- Jan 3, 2026
- Date parsed from source:Jan 3, 2026
- First seen by Releasebot:Mar 14, 2026
v2.8.6
MHSanaei highlights a fresh release introducing WebSocket real time updates, enhanced VLESS with X-Forwarded-For, UI tweaks, etckeeper compatibility, self signed SSL, Telegram bot improvements, and a full changelog from v2.8.5 to v2.8.6.
New
- feat: Add WebSocket support for real-time updates and enhance VLESS settings @lolka1333
- Added WebSocket hub for real-time updates on inbounds and Xray service status
- Enhanced VLESS settings with X-Forwarded-For support and Vision Seed functionality
- Improved UI forms (TLS settings, VLESS configuration)
- feat: Add etckeeper compatibility @MeowyPouncer
- Self-signed SSL
- Add "Last Online" printing for Telegram bot @Psychosoc1al
- Add update-all-geofiles key to x-ui.sh @fgsfds
- Feature: add setting certs for subscription while generating for panel @dimasmir03
- feat: Add random Reality Target/SNI selection from 52 popular services @RFOTQ
- Update & improvement
- vless: use Inbound Listen address in Subscription service @gowa
- Added EnvironmentFile to systemd unit @cherts
- Better Random Reality @lillinlin
- Update for Red Hat base Linux @xujie86
- chore: use for date formatting @sh1shd
- Set variables for packaging purposes @nebulosa2007
- Remove wget dependency from everywhere @nebulosa2007
- Set log folder variable to /var/log/x-ui @nebulosa2007
- Improve English README @BOplaid
- Update x-ui.sh @EvgenyPopov72
- update dependencies
- minor changes
- Bug fixed
- feat: Add etckeeper compatibility @kr-ilya
- Fix telegram bot issue @vladon
- Fix QR codes colors inversion @Psychosoc1al
- fix: handle GitHub API error responses in GetXrayVersions @qzydustin
- fix: add missing is_domain helper function to x-ui.sh @Wyatt1026
- fix: display of outbound traffic @0zd0
- fix: handle CPU threshold error to prevent false notifications @kotopheiop
- Fix int64 for 32-bit arch @romka777
- Fix: Incorrect time in xray logs @fgsfds
- Fix: Invoke service.StopBot() in signal handlers @OleksandrParshyn
- fix: improve russian localization @rashid-yusubov
- Fix: Graceful Telegram bot shutdown to prevent 409 Conflict @OleksandrParshyn
Reports
- Full Changelog: v2.8.5...v2.8.6
- Oct 15, 2025
- Date parsed from source:Oct 15, 2025
- First seen by Releasebot:Mar 14, 2026
v2.8.5
MHSanaei reports a multi‑facet release with new LDAP component, an update script, file logger support, OpenSUSE Leap compatibility, DevTools refresh, Xray-core 25.10.15, improved wget IPv4 handling, and security and bug fixes from login to DB I/O. It signals an actual shipped changelog from v2.8.4 to v2.8.5.
New
- feat: add ldap component @konstpic
- feat: Add update script @cherts
- feat: add file logger support @slavafyi
- Add support for OpenSUSE Leap @xujiegb
- fragment : MaxSplit
DevTools
- Update & improvement
- Xray-core v25.10.15
- Add IPv4 for wget in install
- first try native CPU implementation
- [Security] Replace timestamp-based password generation with random generator @xujiegb
- login: autocomplete password
- tiny changes
- Update translate.ru_RU.toml @thefsfc
- update dependencies
- Bug fixed
- fix(import): prevent sqlite disk I/O error by validating temp DB then swapping
- fix: fix delete method @konstpic
- fix russian translate in tgbot @dimasmir03
- fix: login animation @TaraRostami
- fix
Reports
Full Changelog: v2.8.4...v2.8.5
Original source Report a problem - Oct 1, 2025
- Date parsed from source:Oct 1, 2025
- First seen by Releasebot:Mar 14, 2026
v2.8.4
MHSanaei reports a new release adding Alpine Linux support, port improvements, API fixes, and security updates with the v2.8.3–v2.8.4 changelog.
important bug fixed update to this version ASAP
New
- Add Alpine Linux support @evgenyvolferts
- Add Happ client export open link @mangustyura
Update & improvement
- max port to 65535 @dimasmir03
minor changes
- Bug fixed
- fix: outbound address for vless
- fix api : subid, uuid from inbound settings
- API improve security: returns 404 for unauthenticated API requests
- bug fix
Reports
- Full Changelog: v2.8.3...v2.8.4
- Oct 1, 2025
- Date parsed from source:Oct 1, 2025
- First seen by Releasebot:Mar 14, 2026
v2.8.3 Deprecated
MHSanaei highlights a new VACUUM database API with UUID for getClientTraffics, faster TGbot, DNS presets docs with comments, BuildURLs pageSize 25, Dockerfile EXPOSE port, several security fixes and minor fixes, and notes the full changelog from v2.8.2 to v2.8.3.
New
- new: VACUUM database
- API: UUID for getClientTraffics
Update & improvement
- better design for dns presets
- docs: add comments for all functions
- improved sub: BuildURLs
- pageSize to 25
- TGbot: improved (5x faster)
- add EXPOSE port in Dockerfile @dimasmir03
- undo vnext for vmess
- update dependencies
Bug fixed
- Bug fixed
- fix: subpath panic
- fix: ineffectual assignment to needRestart
- Fix ineffassign “date”
- misspell
Security fix
- security fix: Uncontrolled data used in path expression
- security fix: Use of insufficient randomness as the key of a cryptographic algorithm
- security fix: Workflow with permissions CWE-275
- security fix: Command built from user-controlled sources CWE-78
Minor Fixes
- Minor Fixes @TaraRostami
Full Changelog
- Full Changelog: v2.8.2...v2.8.3
- Oct 1, 2025
- Date parsed from source:Oct 1, 2025
- First seen by Releasebot:Mar 14, 2026
v2.8.2 Deprecated
MHSanaei presents the changelog for v2.8.1 to v2.8.2 with bug fixes, improvements, and developer tooling updates.
New
- new: subJsonEnable
- vscode: Debug for developer
Update & improvement
- enhancements
- chore: update sub page URL @harryngne
- minor change
- go package correction v2
- cpu history timeframe @Drahonn
Bug fixed
- misspell
- Fix ineffassign “date”
- fix: ineffectual assignment to needRestart
- fix PeriodicTrafficResetJob: log only when there are matching inbound
- fix: online
- Fix: Shadowrocket link using base64 encoding @harryngne
- css [fixes] @TaraRostami
- bug fix
Full Changelog: v2.8.1...v2.8.2
Original source Report a problem