v1.6.9

This is a patch for the major 1.6 release.
It contains a various UI and platform-specific bug fixes:

• fix issues with deep-links not working on Windows (#827)
• fix blocking Windows syscalls locking the UI process (#825)
• handle disabled IPv6 stack on Windows causing connection errors (DefGuard/wireguard-rs#131, #930)

Other Changes

• Preserve old package versions on APT repository by @jakub-tldr in #821
• Clear TOTP code input on MFA failure by @jakub-tldr in #857
• Handle error on session end & regenerate QR on session end by @jakub-tldr in #863
• fix(nix): handle various DNS setups in nix package by @wojcik91 in #867
• Chocolatey update workflow by @jakub-tldr in #873
• migrate nix package build process to crane by @wojcik91 in #876

Full Changelog: v1.6.8...v1.6.9

v1.6.8

This is a patch for the major 1.6 release. It fixes a problem with service location.

Other Changes

• Fix service location failure by @t-aleksander in #818

Full Changelog: v1.6.7...v1.6.8

v1.6.7

This is a patch for the major 1.6 release. It fixes TLS verification (for HTTPS to the enrolment service) for some valid certificates.

Other Changes

• Allow build for Windows ARM64 by @moubctez in #799
• Pass more webview logs to the tauri backend by @t-aleksander in #810

Full Changelog: v1.6.6...v1.6.7

v1.6.6

This is a patch for the major 1.6 release. It includes fixes for IPv6 routing on macOS.

Other Changes

• macOS: clamp IPv6 prefix to /120 by @moubctez in #781
• Upgrade BoringTun bindings by @moubctez in #783
• Add icon by @jakub-tldr in #787
• Release 1.6.6 by @moubctez in #789
• Fix nix hash by @wojcik91 in #791
• Added new issue templates by @kchudy in #794

Full Changelog: v1.6.5...v1.6.6

v1.6.5

This is a patch for the major 1.6 release. It includes fixes for DNS suffix on Windows, and system tray on macOS.

Other Changes

• Import filename as tunnel name, import all DNS by @jakub-tldr in #770
• New release with Windows DNS fix by @moubctez in #775
• Fix tray status on macOS and other improvements by @moubctez in #777

Full Changelog: v1.6.4...v1.6.5

v1.6.4

This is a patch for the major 1.6 release. It includes fixes for Defguard group not being assigned to the user when installing DEB/RPM through a GUI tool (Ubuntu App Center etc) and "force all traffic" functionality.

What's Changed

• Update repositories on full release/pre-release by @jakub-tldr in #754
• add gh cli dependency by @jakub-tldr in #759
• fix(package): detect current user when installing DEB through a GUI by @wojcik91 in #757
• Remove outdated information by @jakub-tldr in #758
• Fix force all traffic by @j-chmielewski in #761
• Prepare 1.6.4 by @j-chmielewski in #762

Full Changelog: v1.6.3...v1.6.4

v1.6.3

This is a patch for the major 1.6 release.

MacOS Desktop Client is undergoing Apple Store review.

What's Changed

Other Changes

• Detailed view fix by @jakub-tldr in #749
• fix Nix package dependencies by @wojcik91 in #747
• Remove state change before Instance removal by @jakub-tldr in #750
• Disable APT repository signing/uploads by @jakub-tldr in #752

Full Changelog: v1.6.2...v1.6.3

v1.6.2

This is a patch for the major 1.6 release.

What's Changed

• DG CLI Ubuntu 22.04 LTS workflow by @jakub-tldr in #726
• Change create_dir to create_dir_all for default config directory creation by @hnnsly in #730
• Added third party license info by @kchudy in #732
• fix: location traffic toggle by @filipslezaklab in #735
• Remove silly logs from VPN extension by @moubctez in #736
• Bug fixes by @moubctez in #739

New Contributors

• @hnnsly made their first contribution in #730

Full Changelog: v1.6.1...v1.6.2

v1.6.1

This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:

🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.

🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.

🪟 Windows Desktop Client has finally an MSI package - with native Wireguard networking based on WireguardNT. Please read the migration docs.

 MacOS Desktop Client introduces native Swift/macOS VPN implementation and is published in Apple macOS Store officially. ⚠️ Migration is required to connect to the currently configured VPN locations. Please read the migration blog post.

🖥️ All desktop Clients now have a new MTU setting available.

🚦 Introducing Client Traffic Policy Selection. This lets administrators define whether VPN clients can choose their routing mode or are forced to use a specific traffic policy, such as routing all traffic through the VPN or only predefined traffic.

⚠️ Make sure your environment is up to date to use all the features mentioned. Verify this in our feature compatibility matrix.

What's Changed

• Release 1.5 merger by @wojcik91 in #577
• Fix build and cargo dependencies by @moubctez in #580
• Fixes pentest issue DG25-28 from 2025-09-02 by @j-chmielewski in #578
• Fixes pentest issue DG25-29 from 2025-09-02 by @j-chmielewski in #582
• Merge main into dev after 1.5.1 release by @j-chmielewski in #592
• Create SBOM files by @j-chmielewski in #593
• CI: scan code with trivy by @j-chmielewski in #594
• Fix RPM package by @moubctez in #595
• Periodic sbom regeneration by @j-chmielewski in #599
• Merge SBOM CI pipelines into main by @j-chmielewski in #600
• Merge release/1.5.2 into main by @wojcik91 in #605
• Fix pnpm build by @moubctez in #606
• BoringTun by @moubctez in #597
• share rust toolchain between nix shell & package by @wojcik91 in #610
• Merge main -> dev after 1.5.2 release by @wojcik91 in #609
• new job for building .deb for ubuntu 22.04 /debian 12 by @jakub-tldr in #611
• fix nix setup for boringtun repo by @wojcik91 in #613
• update aur packages workflow by @jakub-tldr in #614
• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• undo unnecessary deletion by @jakub-tldr in #620
• Run AUR workflow only on full release by @jakub-tldr in #619
• APT uploading/signing workflow by @jakub-tldr in #622
• Direct WireGuard management on Windows using wireguard-nt by @j-chmielewski in #626
• client auto-provisioning by @wojcik91 in #627
• Build and sign Defguard client without wireguard binary by @j-chmielewski in #629
• List whole directory by @jakub-tldr in #631
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• refresh tray icon after instance deletion by @jakub-tldr in #639
• OpenID modal refresh by @jakub-tldr in #640
• add Windows provisioning script to MSI installer by @wojcik91 in #625
• Service locations on Windows (Pre-logon, Always-on) by @t-aleksander in #636
• add missing DEB & RPM dependencies by @wojcik91 in #642
• Fix issues related to service locations by @t-aleksander in #643
• Fix issues related to service locations by @t-aleksander in #644
• Add missing sqlx query by @t-aleksander in #646
• Fixes pentest issue DG25-27 from 2025-09-02 by @j-chmielewski in #641
• Add ubuntu 22.04 apt upload pipeline by @jakub-tldr in #645
• Merge main branch into dev before 1.6-alpha release by @j-chmielewski in #649
• Don't log enrollment token by @j-chmielewski in #650
• add admin helper script to generate enrollment tokens by @wojcik91 in #653
• Swift plugin by @moubctez in #630
• Fix Windows build by @moubctez in #655
• fix(CI): build missing service binary for MSI by @wojcik91 in #656
• Basic client version reporting by @t-aleksander in #658
• add admin helper script for generating enrollment tokens in Entra environments by @wojcik91 in #665
• migrate trivyignore format by @wojcik91 in #666
• update helper provisioning scripts to include optional token expiration time by @wojcik91 in #669
• Add global MTU setting by @j-chmielewski in #668
• fix MFA modal error handling by @wojcik91 in #670
• macOS: switch to objc2 by @moubctez in #659
• Workflow: use Tauri action by @moubctez in #673
• Restore MTU by @moubctez in #674
• fix DNS error handling by @wojcik91 in #676
• macOS tunnel statistics by @moubctez in #678
• Fix macOS build after merge by @moubctez in #679
• Implement "force all traffic" enterprise setting by @j-chmielewski in #672
• Cleaner error message by @jakub-tldr in #680
• Fix resolvconf on debian 13 by @t-aleksander in #681
• Sync locations and tunnel with system settings by @moubctez in #684
• Cleanup for Windows by @moubctez in #685
• Backport debian 13 DNS fix by @t-aleksander in #687
• Fix tauri pipelines by @t-aleksander in #688
• Bump version to 1.5.3 by @t-aleksander in #689
• update aur repo to 1.5.2 by @jakub-tldr in #682
• [MacOS] Synchronizing state with system VPN status, logging by @t-aleksander in #694
• Fix "object not found" during disconnect after system settings connect, other small fixes by @t-aleksander in #697
• [MacOS] Trigger MFA if needed when connecting via system settings by @t-aleksander in #700
• macOS: populate Help menu by @moubctez in #704
• use published wireguard-rs by @j-chmielewski in #706
• Silence error on cancelling mobile MFA by @moubctez in #709
• Clean Apple API functions by @moubctez in #711
• Use correct logging filename by @moubctez in #714
• macOS: set MTU on config sync by @moubctez in #715
• fix submodules handling in Nix package by @wojcik91 in #716

Full Changelog: v1.5.1...v1.6.1

v1.5.3-rc1

⚠️⚠️ This is a pre-release ⚠️⚠️

This is a pre-release addressing issues found in the stable version of Defguard Client related to DNS on Debian 13.

What's Changed

Other Changes

• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• Backport debian 13 DNS fix by @t-aleksander in #687

Full Changelog: v1.5.1...v1.5.3-rc1