Releases

Latest product releases from GitHub Releases. Notes are generated when each tag is published.

v8.0.0

Nov 5, 2026

What's Changed

Edition and licensing. Plus ships as a bundle (Plus, plus the Xds and GeoIp satellites) under the PolyForm Noncommercial license. Response cache, active health, xDS, and GeoIP are Plus-gated. The MIT CLI zip does not include those satellites.
Kubernetes and containers. Three container images: the proxy, the Gateway controller, and Fleet Manager. Helm charts are 1.0.0 (app 8.0.0), published as OCI charts and as .tgz files on this release. The glibc image includes Lua and Wasmtime. The image does not include HTTP/3.
Gateway API and Ingress. The controller watches GatewayClass, HTTP and HTTPS Gateways (TLS Terminate), and HTTPRoute, and installs the standard-channel CRD bundle v1.7.0. L4 and gRPC route kinds ship in that bundle and are not watched. Ingress uses titanium.io/ annotations.
Fleet Manager. SQLite fleets, staged rollouts, and last-known-good, with its own Helm chart and image.
Scripting. Lua and WASM, reported by titanium scripting-deps. Natives ship in the RID zips and the glibc image. They are not NuGet packages. win-arm64 is unsupported.
Plus operations. OIDC for the dashboard and route policy, fleet Redis rate limits, managed versus advisory mode, and WAF.
Data plane. HTTP/3 WebSocket bridges, compression including zstd, GeoIP, DNS SRV, zone-aware load balancing, TCP TLS, UDP, OTLP, and the documented hot-restart limits.
Packaging. A release cut requires the nightly readiness set, an image scan, and a hard-fail scripting smoke so a zip cannot ship without its natives.
Migration. See the website guide and docs/migration-7-to-8.md. The Plus ABI is 8.0.0. Managed mode is separate from the Gateway controller.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.27...v8.0.0

v8.0.0-betaprerelease

Nov 5, 2026

What's Changed

Edition and licensing. Plus ships as a bundle (Plus, plus the Xds and GeoIp satellites) under the PolyForm Noncommercial license. Response cache, active health, xDS, and GeoIP are Plus-gated. The MIT CLI zip does not include those satellites.
Kubernetes and containers. Three container images: the proxy, the Gateway controller, and Fleet Manager. Helm charts are 1.0.0 (app 8.0.0), published as OCI charts and as .tgz files on this release. The glibc image includes Lua and Wasmtime. The image does not include HTTP/3.
Gateway API and Ingress. The controller watches GatewayClass, HTTP and HTTPS Gateways (TLS Terminate), and HTTPRoute, and installs the standard-channel CRD bundle v1.7.0. L4 and gRPC route kinds ship in that bundle and are not watched. Ingress uses titanium.io/ annotations.
Fleet Manager. SQLite fleets, staged rollouts, and last-known-good, with its own Helm chart and image.
Scripting. Lua and WASM, reported by titanium scripting-deps. Natives ship in the RID zips and the glibc image. They are not NuGet packages. win-arm64 is unsupported.
Plus operations. OIDC for the dashboard and route policy, fleet Redis rate limits, managed versus advisory mode, and WAF.
Data plane. HTTP/3 WebSocket bridges, compression including zstd, GeoIP, DNS SRV, zone-aware load balancing, TCP TLS, UDP, OTLP, and the documented hot-restart limits.
Packaging. A release cut requires the nightly readiness set, an image scan, and a hard-fail scripting smoke so a zip cannot ship without its natives.
Migration. See the website guide and docs/migration-7-to-8.md. The Plus ABI is 8.0.0. Managed mode is separate from the Gateway controller.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.27-beta...v8.0.0-beta

v7.0.27

Oct 28, 2026

What's Changed

Reverse-proxy parity (phases 0–11) and the follow-ups on top of it. Documented limits that stay: a decrypting MASQUE hairpin is not implemented, and QUIC origins are not retried on the path that was called out in the HTTP/3 notes.
MASQUE is opt-in. The listener can relay CONNECT-UDP over HTTP/2 capsules, and over HTTP/1.1 when the listener opts in. Credentials are per listener. A chunked HTTP/1.1 connect-udp upgrade is rejected. The tunnel slot and UDP socket survive ordinary failures. The TLS handshake continues when the leaf is not this manager's certificate.
HTTP/3 origins: race TCP/HTTP/2 against a cold QUIC handshake; stop retrying a blackholed QUIC origin and keep HTTP/2 clients on HTTP/2; replay a safe request over TCP when a QUIC origin goes silent; do not re-dial QUIC from a call queued behind a failed handshake; replay an HTTP/2 or HTTP/3 client once when the HTTP/1.1 origin returns a gateway status; do not replay a slow origin when the QUIC connection is already answering; the stall guard keeps waiting while some other stream is alive, skips event streams, and cold dial waiters fall back to TCP; a broken QUIC origin backs off instead of a flat five minutes.
Keep-alive and pooling: replay on a fresh connection when a reused socket closes without a response; hold the body for replay only on an idle keep-alive socket, and replay a POST only when the EOF follows the write closely; drop a pooled connection the origin already closed; keep the origin connection when throttling an HTTP/2 client bridged to an HTTP/1.1 origin; wake pooled waiters, and let a no-cache request evict an idle socket.
HTTP/2: do not relay a client RST_STREAM before the request HEADERS were sent. The HTTP/2 probe finishes at the ServerHello budget instead of failing the CONNECT.
Certificates and trust: do not learn a pin for a host the client already trusted; learn a decrypt bypass once when several connections to a host fail together; present the leaf directly when the OS cannot pre-build its chain; client-certificate checks no longer fetch an attacker-chosen URL. The private-network guard also blocks embedded and documentation addresses.
Forwarded headers: trusted proxies match with CIDR for IPv4 and IPv6; an entry that does not parse is rejected; an IPv4-mapped client is written as IPv4.
Mirror routes get their own queue and workers. MaxBodyBytes is capped at 1 MiB. Request lines and headers that contain control characters are refused.
A slow passthrough or PROXY-protocol client no longer stalls the accept loop. A drained accept closes with FIN after the leftover bytes are discarded. The connection-cap slot is released on dispose. A full cap does not eject the destination. A failed retry is counted once when no alternate exists.
Health probes run concurrently, probe a unix socket by connecting, bracket IPv6 hosts, and bound DNS refresh. Routing honors HalfOpenSuccesses, resets ejection state on restore, and keeps DNS-pinned destinations off the fast path. A generated config file keeps its schema bounds. Stop returns without waiting out one-second delays.
Bridged exchanges report the real client and origin protocol. DBSC secure-session challenges are ignored for bot-block learning, and the Inspector file log writer stays alive.
The Titanium.Web.Proxy package carries MIT license metadata. The unused Hosting project is gone.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.26...v7.0.27

v7.0.27-betaprerelease

Oct 28, 2026

What's Changed

Reverse-proxy parity (phases 0–11) and the follow-ups on top of it. Documented limits that stay: a decrypting MASQUE hairpin is not implemented, and QUIC origins are not retried on the path that was called out in the HTTP/3 notes.
MASQUE is opt-in. The listener can relay CONNECT-UDP over HTTP/2 capsules, and over HTTP/1.1 when the listener opts in. Credentials are per listener. A chunked HTTP/1.1 connect-udp upgrade is rejected. The tunnel slot and UDP socket survive ordinary failures. The TLS handshake continues when the leaf is not this manager's certificate.
HTTP/3 origins: race TCP/HTTP/2 against a cold QUIC handshake; stop retrying a blackholed QUIC origin and keep HTTP/2 clients on HTTP/2; replay a safe request over TCP when a QUIC origin goes silent; do not re-dial QUIC from a call queued behind a failed handshake; replay an HTTP/2 or HTTP/3 client once when the HTTP/1.1 origin returns a gateway status; do not replay a slow origin when the QUIC connection is already answering; the stall guard keeps waiting while some other stream is alive, skips event streams, and cold dial waiters fall back to TCP; a broken QUIC origin backs off instead of a flat five minutes.
Keep-alive and pooling: replay on a fresh connection when a reused socket closes without a response; hold the body for replay only on an idle keep-alive socket, and replay a POST only when the EOF follows the write closely; drop a pooled connection the origin already closed; keep the origin connection when throttling an HTTP/2 client bridged to an HTTP/1.1 origin; wake pooled waiters, and let a no-cache request evict an idle socket.
HTTP/2: do not relay a client RST_STREAM before the request HEADERS were sent. The HTTP/2 probe finishes at the ServerHello budget instead of failing the CONNECT.
Certificates and trust: do not learn a pin for a host the client already trusted; learn a decrypt bypass once when several connections to a host fail together; present the leaf directly when the OS cannot pre-build its chain; client-certificate checks no longer fetch an attacker-chosen URL. The private-network guard also blocks embedded and documentation addresses.
Forwarded headers: trusted proxies match with CIDR for IPv4 and IPv6; an entry that does not parse is rejected; an IPv4-mapped client is written as IPv4.
Mirror routes get their own queue and workers. MaxBodyBytes is capped at 1 MiB. Request lines and headers that contain control characters are refused.
A slow passthrough or PROXY-protocol client no longer stalls the accept loop. A drained accept closes with FIN after the leftover bytes are discarded. The connection-cap slot is released on dispose. A full cap does not eject the destination. A failed retry is counted once when no alternate exists.
Health probes run concurrently, probe a unix socket by connecting, bracket IPv6 hosts, and bound DNS refresh. Routing honors HalfOpenSuccesses, resets ejection state on restore, and keeps DNS-pinned destinations off the fast path. A generated config file keeps its schema bounds. Stop returns without waiting out one-second delays.
Bridged exchanges report the real client and origin protocol. DBSC secure-session challenges are ignored for bot-block learning, and the Inspector file log writer stays alive.
The Titanium.Web.Proxy package carries MIT license metadata. The unused Hosting project is gone.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.26-beta...v7.0.27-beta

v7.0.26

Oct 19, 2026

Highlights

Capture local traffic: Unchecking the option now stops routing 127.0.0.1 / localhost through the system proxy. Re-applying the proxy no longer merges the live WinINET bypass list (which kept copying a stale <-loopback> token back in), and the baseline list resets when original settings are restored.
SystemProxySettings.ManageLoopbackRule: Opt-in flag so ProxyLoopback alone decides whether <-loopback> is written when the pre-apply list already contains a stale entry. MitmExclusionDefaults.CreateSystemProxySettings enables it for Inspector and the CLI; default library behavior is unchanged.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.25...v7.0.26

v7.0.26-betaprerelease

Oct 19, 2026

Highlights

Capture local traffic: Unchecking the option now stops routing 127.0.0.1 / localhost through the system proxy. Re-applying the proxy no longer merges the live WinINET bypass list (which kept copying a stale <-loopback> token back in), and the baseline list resets when original settings are restored.
SystemProxySettings.ManageLoopbackRule: Opt-in flag so ProxyLoopback alone decides whether <-loopback> is written when the pre-apply list already contains a stale entry. MitmExclusionDefaults.CreateSystemProxySettings enables it for Inspector and the CLI; default library behavior is unchanged.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.25-beta...v7.0.26-beta

v7.0.25

Oct 16, 2026

Highlights

HTTP/2 decrypt-bypass: On bot-challenge document navigations, the proxy queues GOAWAY(NO_ERROR) behind the meta-refresh instead of closing the socket while HTTP/2 frames are still draining, so browsers follow the refresh and reconnect through the learned opaque tunnel (fixes net::ERR_HTTP2_PROTOCOL_ERROR). HTTP/1.1 behavior is unchanged; a bounded fallback closes clients that ignore GOAWAY.
Inspector: Settings dialogs stay within the work area and scroll instead of clipping; expanding a section scrolls it into view; body-inspect notices are colored by severity.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.24...v7.0.25

v7.0.25-betaprerelease

Oct 16, 2026

Highlights

HTTP/2 decrypt-bypass: On bot-challenge document navigations, the proxy queues GOAWAY(NO_ERROR) behind the meta-refresh instead of closing the socket while HTTP/2 frames are still draining, so browsers follow the refresh and reconnect through the learned opaque tunnel (fixes net::ERR_HTTP2_PROTOCOL_ERROR). HTTP/1.1 behavior is unchanged; a bounded fallback closes clients that ignore GOAWAY.
Inspector: Settings dialogs stay within the work area and scroll instead of clipping; expanding a section scrolls it into view; body-inspect notices are colored by severity.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.24-beta...v7.0.25-beta

v7.0.24

Oct 14, 2026

What's Changed

Inspector: replay decompresses gzip/br responses so the preview shows readable text instead of raw compressed bytes.
Inspector: after startup, the Decrypt trust pip refreshes when the root is already trusted so the toolbar shows CA trusted.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.23...v7.0.24

v7.0.24-betaprerelease

Oct 14, 2026

What's Changed

Inspector: replay decompresses gzip/br responses so the preview shows readable text instead of raw compressed bytes.
Inspector: after startup, the Decrypt trust pip refreshes when the root is already trusted so the toolbar shows CA trusted.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.23-beta...v7.0.24-beta

v7.0.23

Oct 14, 2026

What's Changed

Stable release of v7.0.23-beta.

Inspector: upstream proxy, HTTP/2, HTTP/3, and outbound TLS settings; disable caching and force uncompressed responses; highlight when network settings differ from the defaults.
Keyboard shortcuts, Help links, Statistics and Run log, real HAR timings, and per-host Windows authentication without a server-wide flag.
Marks and comments in the grid and in archives, a status list/range filter, keep-selected and remove-matching, copy as PowerShell, Python, or a table, save raw HTTP, related-session find, always-on-top, and Timeline. Clicking a Timeline row selects the matching session, and the legend shows durations and phase names. The chart redraws when retention or delete drops sessions, the scrollbar stays where you left it when the chart rebuilds, and it scrolls into view only when the selected session changes. Inspect explains a large CONNECT size so a decrypted tunnel is not described as opaque encrypted traffic.
Filters strip (Advanced), dated log files, and a grouped session context menu. Hidden host chips show a host prefix when a process chip is also showing. Hidden HTTP methods sit on a fixed-width Method button so the filter strip does not move. The Filters search box matches the toolbar search. Settings expanders stretch to the dialog width.
The CLI executable and Linux AppImage ship a file icon.
Library: AdditionalLoggerProviders adds host log sinks the proxy does not dispose. It is empty by default.
Library: when a pooled origin socket was idle-closed, the retry dials a fresh connection instead of renting another stale one, so a burst of idle-closed sockets no longer surfaces as a 502.
Library: a bodyless GET or HEAD on the reverse terminate path is replayed once on a fresh connection when the pooled origin socket was idle-closed, instead of dropping the client connection.
Inspector throttle: shared bandwidth is charged once per response, large buffered downloads trickle, HTTP/2 bandwidth is shaped, HTTP/2 latency is paid on the request side with a burst fallback when trickle is refused, and HTTP/3 origins are covered. A handler can replace a buffered origin body with paced slices on HTTP/3, transparent HTTP/2, and SOCKS. WebSocketFrameElidedEventArgs.Delay is new and defaults to zero.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.22...v7.0.23

v7.0.23-betaprerelease

Oct 13, 2026

What's Changed

Inspector: upstream proxy, HTTP/2, HTTP/3, and outbound TLS settings; disable caching and force uncompressed responses; highlight when network settings differ from the defaults.
Keyboard shortcuts, Help links, Statistics and Run log, real HAR timings, and per-host Windows authentication without a server-wide flag.
Marks and comments in the grid and in archives, a status list/range filter, keep-selected and remove-matching, copy as PowerShell, Python, or a table, save raw HTTP, related-session find, always-on-top, and Timeline. Clicking a Timeline row selects the matching session, and the legend shows durations and phase names. The chart redraws when retention or delete drops sessions, the scrollbar stays where you left it when the chart rebuilds, and it scrolls into view only when the selected session changes. Inspect explains a large CONNECT size so a decrypted tunnel is not described as opaque encrypted traffic.
Filters strip (Advanced), dated log files, and a grouped session context menu. Hidden host chips show a host prefix when a process chip is also showing. Hidden HTTP methods sit on a fixed-width Method button so the filter strip does not move. The Filters search box matches the toolbar search. Settings expanders stretch to the dialog width.
The CLI executable and Linux AppImage ship a file icon.
Library: AdditionalLoggerProviders adds host log sinks the proxy does not dispose. It is empty by default.
Library: when a pooled origin socket was idle-closed, the retry dials a fresh connection instead of renting another stale one, so a burst of idle-closed sockets no longer surfaces as a 502.
Library: a bodyless GET or HEAD on the reverse terminate path is replayed once on a fresh connection when the pooled origin socket was idle-closed, instead of dropping the client connection.
Inspector throttle: shared bandwidth is charged once per response, large buffered downloads trickle, HTTP/2 bandwidth is shaped, HTTP/2 latency is paid on the request side with a burst fallback when trickle is refused, and HTTP/3 origins are covered. A handler can replace a buffered origin body with paced slices on HTTP/3, transparent HTTP/2, and SOCKS. WebSocketFrameElidedEventArgs.Delay is new and defaults to zero.

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.22-beta...v7.0.23-beta

v7.0.22

Oct 10, 2026

What's Changed

GA of v7.0.22-beta.
Inspector UI is localized from the OS language. Inspect closes when a filter drops the selected row.
A leading - hides one host or process from the session list (-host:example.com). Hidden hosts show as chips, and Filters edits those hides with more room; Clear filters resets them.
HTTP/2 accepts zlib-wrapped deflate bodies (RFC 9110) as well as bare deflate, and keeps wire bytes when Content-Encoding does not match so a bad origin body cannot tear down the multiplexed connection.
Decrypt-failure bypass learns a MITM HTTPS 403/429 only when the response looks like a bot challenge (vendor headers, bot-management cookies, or challenge/captcha markers). A plain 403 or Retry-After rate-limit 429 is never learned.
HTTP/3 SVCB DNS no longer wildcard-binds the query socket, so Windows Defender Firewall does not prompt for testhost during tests (loopback binds stay on loopback; other resolvers stay unbound until Connect).

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.21...v7.0.22

v7.0.22-betaprerelease

Oct 10, 2026

What's Changed

Inspector UI is localized from the OS language. Inspect closes when a filter drops the selected row.
A leading - hides one host or process from the session list (-host:example.com). Hidden hosts show as chips, and Filters edits those hides with more room; Clear filters resets them.
HTTP/2 accepts zlib-wrapped deflate bodies (RFC 9110) as well as bare deflate, and keeps wire bytes when Content-Encoding does not match so a bad origin body cannot tear down the multiplexed connection.
Decrypt-failure bypass learns a MITM HTTPS 403/429 only when the response looks like a bot challenge (vendor headers, bot-management cookies, or challenge/captcha markers). A plain 403 or Retry-After rate-limit 429 is never learned.
HTTP/3 SVCB DNS no longer wildcard-binds the query socket, so Windows Defender Firewall does not prompt for testhost during tests (loopback binds stay on loopback; other resolvers stay unbound until Connect).

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.21-beta...v7.0.22-beta

v7.0.21

Oct 10, 2026

What's Changed

Release 7.0.20-beta by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1082
Proxy error hardening: 502/504 before commit, truncation integrity, quieter expected failures by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1083
Proxy error hardening follow-up: bypass reason, remaining regression tests, loopback test listeners by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1084
Release 7.0.21-beta by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1085
test(inspector): stop gating body spill on process working set by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1088
Release 7.0.21 GA: promote beta with CI gates by @justcoding121 in https://github.com/justcoding121/titanium-web-proxy/pull/1087

Full Changelog: https://github.com/justcoding121/titanium-web-proxy/compare/v7.0.19...v7.0.21

Older release notes are on GitHub Releases.

Releases ​

What's Changed

v8.0.0-betaprerelease

What's Changed

What's Changed

v7.0.27-betaprerelease

What's Changed

Highlights

v7.0.26-betaprerelease

Highlights

Highlights

v7.0.25-betaprerelease

Highlights

What's Changed

v7.0.24-betaprerelease

What's Changed

What's Changed

v7.0.23-betaprerelease

What's Changed

What's Changed

v7.0.22-betaprerelease

What's Changed

What's Changed

Releases