vpn-egressctl (0.2.0) unstable; urgency=medium

  * Target sing-box 1.14.0 and add the fixed HY2XS Gecko profile.
  * Use native TUN DNS hijacking and remove the redundant route-level rule.
  * Reject cross-release upgrades while allowing a consistent 0.2.0 reinstall.
  * Reject unmanaged configuration adoption and legacy rollback state.
  * License the 0.2 release under MPL-2.0.

 -- Flamy Studio <dev@flamy.studio>  Tue, 08 Sep 2026 00:00:00 +0500

vpn-egressctl (0.1.0) unstable; urgency=medium

  * Initial release for sing-box 1.13.19.
  * Require the nftables guard before starting sing-box.
  * Enforce QUIC and gVisor build tags and remove the unsafe render command.
  * Tighten URI parsing and protected filesystem diagnostics.
  * Document local healthcheck and forwarded workload acceptance separately.

 -- Flamy Studio <dev@flamy.studio>  Thu, 27 Aug 2026 00:00:00 +0500