Shadowrocket

* feat(protocol): add Sudoku proxy protocol support and optimize data-path forwarding to reduce memory allocations and buffer copying * feat(dns): support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules * feat(tailscale): migrate login to TS2021, support subnet routing and exit nodes, and introduce low-power tunnel suspension on demand * feat(protocol): support Clash SSH/packetaddr subscription imports * feat(macos): add menu bar routing controls and quick server configurations for macOS * feat(group): add an independent ping-based auto-sort option for policy groups * perf(transport): handle KCP backpressure, harden WireGuard/Hysteria packet security, and restore full upload throughput on QUIC transports * fix(vpn): prevent tunnel startup hangs, preserve local device connectivity, and prevent stale speedtests from resetting VPN states * fix(dns): route host resolutions and QUIC endpoints through tunnel resolver, and reuse H2 addresses for H3 upgrades * fix(tailscale): advertise disco keys for direct paths, respect custom DERP TLS verification, and fix battery drain when VPN is disconnected * fix(rule): fix remote rule set refreshes, preserve quoted rewrite tokens during parsing/export, and guard compiled policy group updates * fix(system): support WebKit scoped globals and fetch polyfills in scripts, and apply tombstone-based iCloud manifest to prevent configuration rollbacks * fix(system): prevent WKWebView/JavaScriptCore teardown crashes and limit proxy stream memory growth to prevent OOM Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.