Skip to content

Chore: bump github.com/sagernet/sing-box from 1.13.14 to 1.13.18 - #365

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-go_modules-github.qkg1.top-sagernet-sing-box-1.13.18
Closed

Chore: bump github.com/sagernet/sing-box from 1.13.14 to 1.13.18#365
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-go_modules-github.qkg1.top-sagernet-sing-box-1.13.18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/sagernet/sing-box from 1.13.14 to 1.13.18.

Changelog

Sourced from github.com/sagernet/sing-box's changelog.

1.13.18

  • Update naiveproxy to v150.0.7871.63-1
  • Fixes and improvements

1.14.0-beta.10

  • Fixes and improvements

1.14.0-beta.7

  • Add Hysteria2 Chrome QUIC fingerprint parroting 1
  • Update quic-go to v0.61.0
  • Update tailscale to v1.102.1
  • Update gvisor to 20260727.0
  • Fixes and improvements

1:

Hysteria2 client connections now parrot Chrome's QUIC handshake by default, making the traffic harder to identify by handshake fingerprinting. Since Chrome does not declare support for Ed25519, servers using Ed25519 certificates will fail the handshake; see disable_chrome_parrot.

1.14.0-beta.5

  • Remove client metadata from AnyTLS requests by default 1
  • Update naiveproxy to v150.0.7871.63-1
  • Fixes and improvements

1:

We found that the AnyTLS client implementation uploads metadata that is not used by the open-source server, and there are reports of vendors using it to profile and discriminate against users. We now leave it empty by default and allow you to customize it, see AnyTLS client metadata.

1.13.16

  • Remove client metadata from AnyTLS requests by default 1
  • Fixes and improvements

1:

We found that the AnyTLS client implementation uploads metadata that is not used by the open-source server, and there are reports of vendors using it to profile and discriminate against users. We now leave it empty by default and allow you to customize it, see

... (truncated)

Commits
  • 45ca32d Bump version
  • 93df3ef Fix slow open connection declaring lazy headroom
  • 7afc0aa Update naiveproxy to v150.0.7871.63-1
  • 4c02326 Fix route_address_set duplicated IP sets causing route creation failure
  • af40956 Update sing
  • 3b22615 tailscale: Match bare hostnames in preferred_by when search domains exist
  • cc1c891 tailscale: Fix preferred_by matching all addresses with exit node
  • 3d85cbd tailscale: Fix handle peer DNS query
  • 17ec3c7 Bump version
  • 6849e26 tailscale: Fix system interface network category on Windows
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/sagernet/sing-box](https://github.com/sagernet/sing-box) from 1.13.14 to 1.13.18.
- [Changelog](https://github.com/SagerNet/sing-box/blob/testing/docs/changelog.md)
- [Commits](SagerNet/sing-box@v1.13.14...v1.13.18)

---
updated-dependencies:
- dependency-name: github.com/sagernet/sing-box
  dependency-version: 1.13.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot-go_modules-github.qkg1.top-sagernet-sing-box-1.13.18 branch August 15, 2026 04:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant