Fail-closed minisign verification, security hardening, and a major visual overhaul.

SlothClash v0.6.0 — signed updates and a UI you can live in
1 mins
116 words

SlothClash v0.6.0 is the big polish release — security, signed self-updates, and a UI overhaul.

Highlightsh2

  • Signed, fail-closed in-app updates — releases verified with minisign (ed25519) before anything launches; unsigned or tampered builds are refused
  • Update UX — download progress, in-app changelog, restart-to-apply flow, automatic updates toggle
  • CI security gatinggovulncheck and pnpm audit --prod block on known vulnerabilities
  • Mihomo core pinned to v1.19.26 — reproducible builds, no more latest at compile time
  • Import local configs & share linksconfig.yaml, vless://, vmess://, ss://, and more
  • Visual overhaul — design-token system, milky-coffee light theme, Proxies accordion, reworked Rules modal

Fixes worth notingh2

  • TUN no longer breaks the first connect after an in-app update
  • Windows installer shows progress during VC++ runtime install

Full changelog on GitHub: v0.5.1…v0.6.0