Release: v2.5.10 (#8533 )

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
fix: changelog
2026-11-03 21:52:11 +08:00 · 2026-11-03 17:23:02 +08:00 · 2026-11-03 17:19:17 +08:00 · 2026-11-03 09:34:16 +08:00 · 2026-11-03 09:34:16 +08:00 · 2026-11-03 09:34:15 +08:00
30 changed files with 574 additions and 571 deletions
@@ -150,7 +150,7 @@ dependencies = [
 "objc2-core-foundation",
 "objc2-core-graphics",
 "objc2-foundation",
- "parking_lot 0.12.5",
+ "parking_lot",
 "percent-encoding",
 "windows-sys 0.60.2",
 "wl-clipboard-rs",
@@ -159,9 +159,9 @@ dependencies = [

 [[package]]
 name = "arc-swap"
-version = "1.9.3"
+version = "1.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "380962b3d93b99642e50b9febf72c071e97e8b32d86eae9cf4ef582bb960ae6e"
+checksum = "c049c0be4daef0b145cb3555416b3b8ef5b7888a38aea1a3a155801fe7b0810b"
 dependencies = [
 "rustversion",
 ]
@@ -1081,7 +1081,7 @@ checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"

 [[package]]
 name = "clash-verge"
-version = "2.5.9"
+version = "2.5.10"
 dependencies = [
 "aes-gcm",
 "anyhow",
@@ -1118,12 +1118,12 @@ dependencies = [
 "objc2-app-kit",
 "objc2-foundation",
 "open",
- "parking_lot 0.13.0",
+ "parking_lot",
 "percent-encoding",
 "regex",
 "reqwest 0.13.5",
 "reqwest_dav",
- "rfd 0.17.2",
+ "rfd",
 "runas",
 "rustls",
 "scopeguard",
@@ -1176,7 +1176,7 @@ version = "0.1.0"
 dependencies = [
 "anyhow",
 "criterion",
- "parking_lot 0.13.0",
+ "parking_lot",
 "tokio",
 ]

@@ -1199,7 +1199,7 @@ dependencies = [
 "anyhow",
 "flexi_logger",
 "log",
- "parking_lot 0.13.0",
+ "parking_lot",
 "tracing-estuary",
 ]

@@ -1256,8 +1256,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "facfbc410a385e0b0cbca8179dd9e363ed70e8455960bf7545137e90ca753b66"
 dependencies = [
 "crossbeam-utils",
- "lock_api 0.4.14",
- "parking_lot_core 0.9.12",
+ "lock_api",
+ "parking_lot_core",
 "polonius-the-crab",
 ]

@@ -1334,7 +1334,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "117725a109d387c937a1533ce01b450cbde6b88abceea8473c4d7a85853cda3c"
 dependencies = [
 "lazy_static",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -1768,18 +1768,8 @@ version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
 dependencies = [
- "darling_core 0.23.0",
- "darling_macro 0.23.0",
-]
-
-[[package]]
-name = "darling"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed17f5901b6630b993ca003def43f2f8ef4014fc13b047b57aad617ff32bc2ec"
-dependencies = [
- "darling_core 0.24.1",
- "darling_macro 0.24.1",
+ "darling_core",
+ "darling_macro",
 ]

 [[package]]
@@ -1795,41 +1785,17 @@ dependencies = [
 "syn 2.0.119",
 ]

-[[package]]
-name = "darling_core"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6837e2cf7485aaae18f86181d2f0e9a7ed297a025e220aeabf63fdebd3a2ddff"
-dependencies = [
- "ident_case",
- "proc-macro2",
- "quote",
- "strsim",
- "syn 3.0.5",
-]
-
 [[package]]
 name = "darling_macro"
 version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
 dependencies = [
- "darling_core 0.23.0",
+ "darling_core",
 "quote",
 "syn 2.0.119",
 ]

-[[package]]
-name = "darling_macro"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ac7135c3ef02b2f7833bbeb1be5ba7f966dcde8a87c6b87f65a778d71a02785"
-dependencies = [
- "darling_core 0.24.1",
- "quote",
- "syn 3.0.5",
-]
-
 [[package]]
 name = "dashmap"
 version = "6.2.1"
@@ -1839,9 +1805,9 @@ dependencies = [
 "cfg-if",
 "crossbeam-utils",
 "hashbrown 0.14.5",
- "lock_api 0.4.14",
+ "lock_api",
 "once_cell",
- "parking_lot_core 0.9.12",
+ "parking_lot_core",
 ]

 [[package]]
@@ -2049,7 +2015,7 @@ dependencies = [
 "libc",
 "option-ext",
 "redox_users 0.5.2",
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -3378,7 +3344,7 @@ dependencies = [
 "js-sys",
 "log",
 "wasm-bindgen",
- "windows-core 0.62.2",
+ "windows-core 0.61.2",
 ]

 [[package]]
@@ -3892,7 +3858,7 @@ dependencies = [
 "http",
 "httparse",
 "libc",
- "parking_lot 0.12.5",
+ "parking_lot",
 "path-tree",
 "pin-project-lite",
 "rand 0.10.2",
@@ -4052,20 +4018,11 @@ dependencies = [
 "scopeguard",
 ]

-[[package]]
-name = "lock_api"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "65d91b22da179613dcf4d6ec8349563f52a363f6849e03b00dd0a185ec4a59af"
-dependencies = [
- "scopeguard",
-]
-
 [[package]]
 name = "log"
-version = "0.4.35"
+version = "0.4.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d15f86d12da44cd8d4ec3c73984537eb7f4cadcb9776a575a0a8a05ca11005c"
+checksum = "f9f8bd3e56ce4dfc153cf470fffbfa98c7620958b312ca5c3a4b8d5181fd13c6"

 [[package]]
 name = "lru-slab"
@@ -4075,9 +4032,9 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"

 [[package]]
 name = "lzma-rust2"
-version = "0.24.0"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "490750560fa7851fbbf5d3ab1a8750f09350ed361ed8aed85b1e1e40587812ee"
+checksum = "f1c46f3fcd2e888afdb01a07efc071cb21300e07c68d32c3e8b01b5c8cb1fcaa"
 dependencies = [
 "sha2 0.11.1",
 ]
@@ -4425,7 +4382,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -4807,7 +4764,7 @@ version = "1.21.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
 dependencies = [
- "parking_lot_core 0.9.12",
+ "parking_lot_core",
 ]

 [[package]]
@@ -4830,9 +4787,9 @@ checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"

 [[package]]
 name = "open"
-version = "5.4.5"
+version = "5.4.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d8c8b8e725ad26404d6896eb2f064294a0a7b4f1d9120210d85544684c4ca95"
+checksum = "aa576c76302b7b808eecc68061e67336c47833ef9d22caa74dda10fa9675eebc"
 dependencies = [
 "dunce",
 "is-wsl",
@@ -4902,7 +4859,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
 dependencies = [
 "libc",
- "windows-sys 0.45.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -4966,18 +4923,8 @@ version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
 dependencies = [
- "lock_api 0.4.14",
- "parking_lot_core 0.9.12",
-]
-
-[[package]]
-name = "parking_lot"
-version = "0.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9cf937ca4e1d0b7578784559063422fc39ae7c5a00f02471f2614d5486fd226"
-dependencies = [
- "lock_api 0.5.0",
- "parking_lot_core 0.10.0",
+ "lock_api",
+ "parking_lot_core",
 ]

 [[package]]
@@ -4988,19 +4935,7 @@ checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
 dependencies = [
 "cfg-if",
 "libc",
- "redox_syscall 0.5.18",
- "smallvec",
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "parking_lot_core"
-version = "0.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9cfff060068cc18aa7815010fcaf80c68c7fb9e85fc7f5c0f9bf142c21d19826"
-dependencies = [
- "libc",
- "redox_syscall 0.9.5",
+ "redox_syscall",
 "smallvec",
 "windows-link 0.2.1",
 ]
@@ -5331,12 +5266,6 @@ dependencies = [
 "windows-sys 0.61.2",
 ]

-[[package]]
-name = "pollster"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f3a9f18d041e6d0e102a0a46750538147e5e8992d3b4873aaafee2520b00ce3"
-
 [[package]]
 name = "polonius-the-crab"
 version = "0.5.0"
@@ -5739,15 +5668,6 @@ dependencies = [
 "bitflags 2.13.2",
 ]

-[[package]]
-name = "redox_syscall"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "580c875845b41ecb1564ad1ae4703044cef774145e3d7a94dc2b3fa7c97868fd"
-dependencies = [
- "bitflags 2.13.2",
-]
-
 [[package]]
 name = "redox_users"
 version = "0.4.6"
@@ -5967,30 +5887,6 @@ dependencies = [
 "windows-sys 0.60.2",
 ]

-[[package]]
-name = "rfd"
-version = "0.17.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20dafead71c16a34e1ff357ddefc8afc11e7d51d6d2b9fbd07eaa48e3e540220"
-dependencies = [
- "block2",
- "dispatch2",
- "js-sys",
- "libc",
- "log",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
- "percent-encoding",
- "pollster",
- "raw-window-handle",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
- "windows-sys 0.61.2",
-]
-
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -6132,7 +6028,7 @@ dependencies = [
 "errno",
 "libc",
 "linux-raw-sys 0.4.15",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -6582,7 +6478,7 @@ version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "84d57bc0c8b9a17920c178daa6bb924850d54a9c97ab45194bb8c17ad66bb660"
 dependencies = [
- "darling 0.23.0",
+ "darling",
 "proc-macro2",
 "quote",
 "syn 2.0.119",
@@ -6842,7 +6738,7 @@ dependencies = [
 "objc2-foundation",
 "objc2-quartz-core",
 "raw-window-handle",
- "redox_syscall 0.5.18",
+ "redox_syscall",
 "tracing",
 "wasm-bindgen",
 "web-sys",
@@ -6877,9 +6773,9 @@ dependencies = [

 [[package]]
 name = "specta"
-version = "2.0.0-rc.26"
+version = "2.0.0-rc.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed155e448f42fc4be7a5cbc12bd43f6c549981f7c32fcba429ff6bc57cc4f30c"
+checksum = "38f9a30cbcbb7011f1da7d73483983bf838af123883e45f2b36ed76328df9c50"
 dependencies = [
 "paste",
 "rustc_version 0.4.1",
@@ -6889,9 +6785,9 @@ dependencies = [

 [[package]]
 name = "specta-macros"
-version = "2.0.0-rc.26"
+version = "2.0.0-rc.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b34b2516e16a9ddd3dc4e73cd6454cfe21fe209f8cb5a6f37346fe3774d759b3"
+checksum = "2ce14957ecc2897f1f848b8255b6531d13ddf49cbcf506b7c2c9fb1d005593bb"
 dependencies = [
 "Inflector",
 "proc-macro2",
@@ -6901,9 +6797,9 @@ dependencies = [

 [[package]]
 name = "specta-serde"
-version = "0.0.13"
+version = "0.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4983177ed0eb28235080261953de5f9ebae8a2d107851b5852420bd2ab246245"
+checksum = "ee8a72b755ddb8949fd8f17c5db43f0e8a806ea587d9bc602ee3f73240c00029"
 dependencies = [
 "specta",
 "specta-macros",
@@ -6911,18 +6807,18 @@ dependencies = [

 [[package]]
 name = "specta-typescript"
-version = "0.0.13"
+version = "0.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ecbe75dc1d27b36141b50b02b7c73bed00945710cee6edffa86d296a159a6f9"
+checksum = "639404ee95557f2f8b7e4cb773ffefd45304c7ab8ba21ac83b69051595e083c0"
 dependencies = [
 "specta",
 ]

 [[package]]
 name = "specta-util"
-version = "0.0.13"
+version = "0.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d9bf531215ea70fba8264edecf98f12600462cf359f2038602a47aeda5ecd5b8"
+checksum = "29b1fc02b446f7244a92924fe68c0555921209f1d342990cd1539e9138e69502"
 dependencies = [
 "specta",
 ]
@@ -6952,7 +6848,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
 dependencies = [
 "new_debug_unreachable",
- "parking_lot 0.12.5",
+ "parking_lot",
 "phf_shared 0.13.1",
 "precomputed-hash",
 ]
@@ -7088,9 +6984,9 @@ dependencies = [

 [[package]]
 name = "sysinfo"
-version = "0.40.1"
+version = "0.39.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e8a3edbe0394ce115f3917a00349dd242be09eb5a091ed509eaf67b55cfb8a8"
+checksum = "d2071df9448915b71c4fe6d25deaf1c22f12bd234f01540b77312bb8e41361e6"
 dependencies = [
 "libc",
 "memchr",
@@ -7199,7 +7095,7 @@ dependencies = [
 "objc2-app-kit",
 "objc2-foundation",
 "objc2-ui-kit",
- "parking_lot 0.12.5",
+ "parking_lot",
 "percent-encoding",
 "raw-window-handle",
 "tao-macros",
@@ -7406,7 +7302,7 @@ version = "0.1.0"
 dependencies = [
 "deelevate",
 "libc",
- "parking_lot 0.13.0",
+ "parking_lot",
 "serde",
 "specta",
 "sysinfo",
@@ -7485,7 +7381,7 @@ checksum = "b7461aaacf1901915ea7b9f5cd74f8224a351ed96af0a62c07fce934003cb34b"
 dependencies = [
 "log",
 "raw-window-handle",
- "rfd 0.16.0",
+ "rfd",
 "serde",
 "serde_json",
 "tauri",
@@ -7794,12 +7690,11 @@ dependencies = [

 [[package]]
 name = "tauri-specta"
-version = "2.0.0-rc.26"
+version = "2.0.0-rc.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe71fc209fa4c49f959644f1ae2d70f72d5675bcb3d3ad8518122fa7b330994e"
+checksum = "ee080f36d2ac17ce2f3a82fb53f02d664e8345457de51b56dad3c394dacc41a2"
 dependencies = [
 "heck 0.5.0",
- "paste",
 "serde",
 "serde_json",
 "specta",
@@ -7813,15 +7708,15 @@ dependencies = [

 [[package]]
 name = "tauri-specta-macros"
-version = "2.0.0-rc.26"
+version = "2.0.0-rc.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dbf5689a1dbf2611e2351b79ba042ca089d0a3ce45274695e79084cd732a5aec"
+checksum = "6a59dfdce06c98d8d211619bea5fdb39486d8a8c558e12b2d2ce255972320012"
 dependencies = [
- "darling 0.24.1",
+ "darling",
 "heck 0.5.0",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 2.0.119",
 ]

 [[package]]
@@ -8147,9 +8042,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"

 [[package]]
 name = "tokio"
-version = "1.54.1"
+version = "1.53.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3"
+checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
 dependencies = [
 "bytes",
 "libc",
@@ -8505,7 +8400,7 @@ dependencies = [
 "flexi_logger",
 "log",
 "nu-ansi-term",
- "parking_lot 0.12.5",
+ "parking_lot",
 "tokio",
 "tracing",
 "tracing-log",
@@ -9115,9 +9010,9 @@ dependencies = [

 [[package]]
 name = "webpki-roots"
-version = "1.0.11"
+version = "1.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f5f280bbb2b287bc8e7de7e3852945a0ff50d1bbcb5ed42b6c7a568c546df171"
+checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a"
 dependencies = [
 "rustls-pki-types",
 ]
@@ -9211,7 +9106,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -9807,7 +9702,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d6f32a0ff4a9f6f01231eb2059cc85479330739333e0e58cadf03b6af2cca10"
 dependencies = [
 "cfg-if",
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -10139,9 +10034,9 @@ dependencies = [

 [[package]]
 name = "zip"
-version = "9.3.0"
+version = "9.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eaeb7f16d2605b49aef586996ded29e65642fab7259a3077e537351df6d80426"
+checksum = "1156b39d142a34b999c2310a50455e0cb3760bf7efad0122f796d813bee26ccb"
 dependencies = [
 "aes",
 "bzip2",
@@ -10152,7 +10047,6 @@ dependencies = [
 "getrandom 0.4.3",
 "hmac",
 "indexmap 2.14.0",
- "libc",
 "lzma-rust2",
 "memchr",
 "nix",
@@ -63,18 +63,18 @@ tracing = "0.1.44"

 tauri = { version = "2.12.4" }
 tauri-plugin-clipboard-manager = "2.5.0"
-parking_lot = "0.13.0"
+parking_lot = { version = "0.12.5", features = ["hardware-lock-elision"] }
 anyhow = "1.0.104"
 chrono = "0.4.45"
 criterion = { version = "0.8.2", features = ["async_tokio"] }
-tokio = { version = "1.54.1", features = [
+tokio = { version = "1.53.3", features = [
  "rt-multi-thread",
  "macros",
  "time",
  "sync",
 ] }
 flexi_logger = "0.31.10"
-log = "0.4.35"
+log = "0.4.34"
 regex = "1.13.1"
 reqwest = { version = "0.13.5", features = [
  "json",
@@ -1,46 +1,48 @@
-## v2.5.9
-
- **Mihomo(Meta) 内核升级至 v1.19.33**
+<!-- Release-notes skeleton. Entries accumulate in ./Changelog.md as PRs land;
+     before publishing a release, distill them:
+     - user-visible changes only — no dev tooling, CI fixes, or refactors whose
+       effect is already covered by another entry
+     - describe outcomes, not internals: no internal module names, IPC or
+       protocol details, or implementation mechanics — write what the user
+       observes, not how the code achieves it
+     - one line per theme: merge entries that share a root cause
+     - each entry fits a single readable line (about 60 CJK characters); if it
+       overflows, it is packing multiple themes or detail that belongs in the
+       linked issue/PR — split it or drop the detail
+     - line grammar: open with a verb (修复/新增/优化), with the platform
+       first (Windows/macOS/Linux) when the change is platform-specific;
+       merge sub-symptoms as 主题：症状、症状; full-width punctuation,
+       「」 for UI labels, backticks for config keys and commands
+     - platform entries sit under their platform heading (bold, emoji
+       prefixed, ordered Windows/macOS/Linux, combined for pairs like
+       macOS/Linux) at the end of their section;
+       scripts-workflow/group_platforms.sh regroups, --check verifies
+     HTML comments are stripped by the update dialog's sanitizer and hidden on
+     GitHub, so they never reach users. -->
+## v2.5.10

 <details>
 <summary><strong> 🐞 修复问题 </strong></summary>

- 修复规则扩展包含空列表项时，「编辑规则」界面报错的问题
- 修复 重启应用后定时自动备份不执行的问题
- 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
- 修复 首页 网站测速失败后卡片一直显示测试中
- 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
- 修复 代理 在全局模式下无法展开节点组
- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
- 修复 WebDAV 设置清空后无法保存
+- 修复全局模式缺少 `GLOBAL` 策略组，无法单独选择全局出口
+- 修复服务模式下，SSH 节点的 `private-key` 使用私钥文件时内核无法启动
+- 修复服务模式下，内核更新的 GEO 数据库不会同步回应用目录，导致使用新分类的规则无法通过校验
+- 修复订阅的 DNS 配置变化后，「DNS 覆写」实际已关闭但开关仍显示开启且没有提示

-**🍎 macOS**
+**🖥️ Windows**

- macOS：修复 Bigsur 上首页测速和流量图无法显示的问题
-
-**🐧 Linux**
-
- Linux：修复 deb/rpm 安装包错误包含多余的 `frontend-contract` 可执行文件，导致下游重新打包失败的问题
+- Windows：修复安装程序重新安装或覆盖时未提示退出运行中应用，导致卸载报错或覆盖失败

 </details>

 <details>
 <summary><strong> ✨ 新增功能 </strong></summary>

- 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记

 </details>

 <details>
 <summary><strong> 🚀 优化改进 </strong></summary>

- 优化「链式代理」：开启前需确认网速影响提示，空面板新增「关闭」按钮
-
-**🖥️ Windows**
-
- Windows 系统代理默认绕过 `*.local` 域名，访问局域网设备的 `.local` 主机名时不再经过代理

 </details>
@@ -4,7 +4,7 @@ version = "0.1.0"
 edition = "2024"

 [dependencies]
-specta = { version = "=2.0.0-rc.26", features = ["derive", "function"] }
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
 clash-verge-logging = { workspace = true }
 chrono = { workspace = true }
 log = { workspace = true }
@@ -5,14 +5,14 @@ edition = "2024"
 rust-version = "1.91"

 [dependencies]
-specta = { version = "=2.0.0-rc.26", features = ["derive", "function"] }
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
 tauri = { workspace = true }
 tauri-plugin-clipboard-manager = { workspace = true }
 parking_lot = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 # sysinfo 0.38.2 conflicts with dark-light
 # see https://github.com/GuillaumeGomez/sysinfo/issues/1623
-sysinfo = { version = "0.40.1", features = ["network", "system"] }
+sysinfo = { version = "0.39.6", features = ["network", "system"] }

 [target.'cfg(not(windows))'.dependencies]
 libc = "0.2.191"
@@ -27,9 +27,9 @@ pub struct SysInfo {
 impl Default for SysInfo {
    #[inline]
    fn default() -> Self {
-        let system_name = System::name().unwrap_or_else(|_| "Null".into());
-        let system_version = System::long_os_version().unwrap_or_else(|_| "Null".into());
-        let system_kernel_version = System::kernel_version().unwrap_or_else(|_| "Null".into());
+        let system_name = System::name().unwrap_or_else(|| "Null".into());
+        let system_version = System::long_os_version().unwrap_or_else(|| "Null".into());
+        let system_kernel_version = System::kernel_version().unwrap_or_else(|| "Null".into());
        let system_arch = System::cpu_arch();
        Self {
            system_name,
@@ -130,14 +130,9 @@ pub fn current_gid() -> u32 {

 #[inline]
 pub fn list_network_interfaces() -> Vec<String> {
-    let Ok(mut networks) = Networks::new() else {
-        return Vec::new();
-    };
+    let mut networks = Networks::new();
    networks.refresh(false);
-    networks
-        .keys()
-        .map(|name| name.to_string_lossy().into_owned())
-        .collect()
+    networks.keys().map(|name| name.to_owned()).collect()
 }

 #[inline]
@@ -1,3 +1,51 @@
+## v2.5.9
+
+- **Mihomo(Meta) 内核升级至 v1.19.33**
+
+<details>
+<summary><strong> 🐞 修复问题 </strong></summary>
+
+- 修复规则扩展包含空列表项时，「编辑规则」界面报错的问题
+- 修复 重启应用后定时自动备份不执行的问题
+- 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
+- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
+- 修复 首页 网站测速失败后卡片一直显示测试中
+- 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
+- 修复 代理 在全局模式下无法展开节点组
+- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
+- 修复 WebDAV 设置清空后无法保存
+
+**🍎 macOS**
+
+- macOS：修复 Bigsur 上首页测速和流量图无法显示的问题
+
+**🐧 Linux**
+
+- Linux：修复 deb/rpm 安装包错误包含多余的 `frontend-contract` 可执行文件，导致下游重新打包失败的问题
+
+</details>
+
+<details>
+<summary><strong> ✨ 新增功能 </strong></summary>
+
+- 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
+- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
+- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记
+
+</details>
+
+<details>
+<summary><strong> 🚀 优化改进 </strong></summary>
+
+- 优化「链式代理」：开启前需确认网速影响提示，空面板新增「关闭」按钮
+
+**🖥️ Windows**
+
+- Windows 系统代理默认绕过 `*.local` 域名，访问局域网设备的 `.local` 主机名时不再经过代理
+
+</details>
+
+
 ## v2.5.8

 <details>
@@ -1,6 +1,6 @@
 {
  "name": "clash-verge",
-  "version": "2.5.9",
+  "version": "2.5.10",
  "license": "GPL-3.0-only",
  "scripts": {
    "prepare": "husky || true",
@@ -41,7 +41,10 @@ fi

 tmpfile=$(mktemp)
 {
-	cat "$CHANGELOG"
+	node -e '
+		const fs = require("node:fs");
+		process.stdout.write(fs.readFileSync(process.argv[1], "utf8").replace(/<!--[\s\S]*?-->/g, "").trimStart());
+	' "$CHANGELOG"
 	echo
 	echo "" 
 	if [ -f "$HISTORY" ]; then
@@ -134,6 +134,31 @@ function fetchBranches() {
  )
 }

+function discardClosedCandidate(branch, base, prefix) {
+  const candidates = list(
+    `pulls?state=all&base=${base}&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+  )
+  const latest = candidates[0]
+  if (!latest || candidates.some((pr) => pr.state === 'open'))
+    throw new Error(
+      `Branch ${branch} is reserved by an active or unknown candidate.`,
+    )
+  const pr = get(`pulls/${latest.number}`)
+  requireBotPr(pr, base, prefix)
+  if (pr.state !== 'closed' || pr.merged)
+    throw new Error(
+      `Close the unmerged candidate before retrying: ${pr.html_url}`,
+    )
+  updateRefs(pr.base.repo.node_id, [
+    {
+      name: `refs/heads/${branch}`,
+      beforeOid: pr.head.sha,
+      afterOid: '0'.repeat(40),
+    },
+  ])
+  summary(`Released the unused branch from closed PR: ${pr.html_url}`)
+}
+
 function prepare() {
  let refresh
  if (env.GITHUB_EVENT_NAME === 'pull_request_target') {
@@ -211,8 +236,15 @@ function prepare() {
      : last
        ? `${base}-rc.${BigInt(last.match(rcPattern)[4] ?? 0) + 1n}`
        : `${base}-rc`)
-  if (occupied.includes(tag))
-    throw new Error(`Tag ${tag} already exists or is reserved.`)
+  if (tags.includes(tag)) throw new Error(`Tag ${tag} already exists.`)
+  for (const [prefix, target] of [
+    ['release/', 'dev'],
+    ['publish/', 'main'],
+  ]) {
+    const branch = `${prefix}${tag}`
+    if (refs.includes(`refs/heads/${branch}`) && branch !== refresh?.head.ref)
+      discardClosedCandidate(branch, target, prefix)
+  }
  const sha = git('rev-parse', 'HEAD')
  const body = releaseBody(tag, sha, tags, false)
  summary(body)
@@ -453,7 +485,7 @@ function publishPr() {
  validateVersionCommit(tag, sha)
  const branch = `publish/${tag}`
  const existing = list(
-    `pulls?state=all&base=main&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+    `pulls?state=open&base=main&head=${repository.split('/')[0]}:${branch}&per_page=100`,
  )
  if (existing.length) {
    const publication = existing[0]
@@ -567,28 +599,31 @@ function publish() {
    requireApproval(pr, sha)
    const main = git('rev-parse', 'origin/main')
    git('merge-base', '--is-ancestor', main, sha)
-    const object = api('git/tags', {
+    git(
+      '-c',
+      'user.name=github-actions[bot]',
+      '-c',
+      'user.email=41898282+github-actions[bot]@users.noreply.github.com',
+      'tag',
+      '--annotate',
+      '--no-sign',
+      '--message',
+      marker,
      tag,
-      message: marker,
-      object: sha,
-      type: 'commit',
-    })
-    // The tag records run ownership in the same transaction as the fast-forward.
-    updateRefs(pr.base.repo.node_id, [
-      { name: 'refs/heads/main', beforeOid: main, afterOid: sha, force: false },
-      {
-        name: `refs/heads/${pr.head.ref}`,
-        beforeOid: sha,
-        afterOid: sha,
-        force: false,
-      },
-      {
-        name: `refs/tags/${tag}`,
-        beforeOid: '0'.repeat(40),
-        afterOid: object.sha,
-        force: false,
-      },
-    ])
+      sha,
+    )
+    // GraphQL updateRefs rejects annotated tag objects; Git preserves atomicity.
+    git(
+      'push',
+      '--atomic',
+      `--force-with-lease=refs/heads/main:${main}`,
+      `--force-with-lease=refs/heads/${pr.head.ref}:${sha}`,
+      `--force-with-lease=refs/tags/${tag}:`,
+      'origin',
+      `${sha}:refs/heads/main`,
+      `${sha}:refs/heads/${pr.head.ref}`,
+      `refs/tags/${tag}:refs/tags/${tag}`,
+    )
    summary(`Fast-forwarded main and tagged ${tag} at approved commit ${sha}.`)
  }
  releaseOutput(tag, sha)
@@ -617,9 +652,14 @@ function validateTag() {
 function prepareDraft() {
  const tag = env.RELEASE_TAG
  verifyTarget()
-  const release = list('releases?per_page=100').find(
-    (release) => release.tag_name === tag,
-  )
+  const result = run('gh', [
+    'api',
+    '--paginate',
+    endpoint('releases?per_page=100'),
+    '--jq',
+    `.[] | select(.tag_name == ${JSON.stringify(tag)}) | {id, draft}`,
+  ])
+  const release = result ? JSON.parse(result) : null
  if (release && !release.draft)
    throw new Error('This release is already public.')
  const draft =
@@ -1,6 +1,6 @@
 [package]
 name = "clash-verge"
-version = "2.5.9"
+version = "2.5.10"
 description = "clash verge"
 authors = ["zzzgydi", "Tunglies", "wonfen", "MystiPanda"]
 license = "GPL-3.0-only"
@@ -58,8 +58,8 @@ smartstring = { workspace = true, features = ["serde"] }
 bitflags = { workspace = true }
 socket2 = { workspace = true }
 warp = { version = "0.4.3", features = ["server"] }
-open = "5.4.5"
-rfd = { version = "0.17.2", default-features = false, features = ["common-controls-v6", "xdg-portal"] }
+open = "5.4.4"
+rfd = { version = "0.16.0", default-features = false, features = ["common-controls-v6"] }
 dirs = "7.0.0"
 dunce = "1.0.5"
 nanoid = "0.5"
@@ -79,7 +79,7 @@ tauri-plugin-fs = "2.7.1"
 tauri-plugin-process = "2.4.0"
 tauri-plugin-deep-link = "2.6.2"
 tauri-plugin-window-state = "2.5.0"
-zip = "9.2.2"
+zip = "9.1.3"
 flate2 = "1.1.10"
 reqwest_dav = "0.3.3"
 aes-gcm = { version = "0.11.1" }
@@ -98,19 +98,19 @@ tracing = { workspace = true }
 tauri-plugin-devtools = { version = "2.2.2", optional = true }
 tauri-plugin-mihomo = { git = "https://github.com/clash-verge-rev/tauri-plugin-mihomo", rev = "7a03d16f4d39b1bb885b7babe66b9e153e34b615" }
 async-trait = "0.1.92"
-clash_verge_service_ipc = { git = "https://github.com/clash-verge-rev/clash-verge-service-ipc.git", tag = "v2.7.7", version = "2.7.6", features = [
+clash_verge_service_ipc = { git = "https://github.com/clash-verge-rev/clash-verge-service-ipc.git", tag = "v2.7.7", version = "2.7.7", features = [
  "client",
 ] }
-arc-swap = "1.9.3"
+arc-swap = "1.9.2"
 tokio-rustls = "0.26.6"
 rustls = { version = "0.23.46", features = ["ring"] }
-webpki-roots = "1.0.11"
+webpki-roots = "1.0.9"
 dark-light = "3.0.0"
 bytes = "1.12.1"
 tokio-util = { version = "0.7.20", features = ["time"] }
-specta = { version = "=2.0.0-rc.26", features = ["derive", "function", "serde_json"] }
-tauri-specta = { version = "=2.0.0-rc.26", features = ["derive", "typescript"] }
-specta-typescript = "=0.0.13"
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function", "serde_json"] }
+tauri-specta = { version = "=2.0.0-rc.25", features = ["derive", "typescript"] }
+specta-typescript = "=0.0.12"

 [target.'cfg(unix)'.dependencies]
 libc = "0.2.191"
@@ -21,6 +21,7 @@ ManifestDPIAwareness PerMonitorV2
 !include "FileAssociation.nsh"
 !include "Win\COM.nsh"
 !include "Win\Propkey.nsh"
+!include "Win\RestartManager.nsh"
 !include "WinVer.nsh"
 !include "LogicLib.nsh"
 !include "StrFunc.nsh"
@@ -332,6 +333,8 @@ Function PageLeaveReinstall
  ${EndIf}

  reinst_uninstall:
+    !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
+
    HideWindow
    ClearErrors

@@ -368,7 +371,10 @@ Function PageLeaveReinstall
      MessageBox MB_ICONEXCLAMATION "$(unableToUninstall)"
      Abort
    ${EndIf}
+    Return
+
  reinst_done:
+    !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
 FunctionEnd

 ; 5. Choose install directory page
@@ -901,8 +907,7 @@ Section Install

  nsExec::Exec 'netsh int tcp res'

-  !include "Win\RestartManager.nsh"
-  !insertmacro CheckIfAppIsRunning "${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
+  !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
  !insertmacro CheckAllVergeProcesses

  ; Ensure startup folders exist
@@ -1101,7 +1106,7 @@ Section Uninstall
    !insertmacro NSIS_HOOK_PREUNINSTALL
  !endif

-  !insertmacro CheckIfAppIsRunning "${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
+  !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
  !insertmacro CheckAllVergeProcesses
  !insertmacro RemoveVergeService

@@ -205,7 +205,6 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {
        logging!(info, Type::Config, "Config regenerated successfully");
    }

-    logging_error!(Type::Config, Config::sync_dns_override().await);
    handle::Handle::refresh_clash();
    Ok(())
 }
@@ -191,10 +191,6 @@ pub async fn delete_profile(index: std::string::String) -> CmdResult {
    drop(config_update_guard);
    drop(profile_write_guard);

-    if should_update {
-        logging_error!(Type::Config, Config::sync_dns_override().await);
-    }
-
    if let Err(e) = Tray::global().update_tooltip().await {
        logging!(warn, Type::Cmd, "异步更新托盘提示失败: {e:#}");
    }
@@ -264,7 +260,6 @@ async fn handle_success(current_value: Option<&String>) -> CmdResult<ValidationO
        handle::Handle::notify_profile_changed(current);
    }

-    logging_error!(Type::Config, Config::sync_dns_override().await);
    Ok(ValidationOutcome::Valid)
 }

@@ -10,7 +10,7 @@ use crate::{
    },
    utils::dirs,
 };
-use clash_verge_logging::{Type, logging, logging_error};
+use clash_verge_logging::{Type, logging};
 use smartstring::alias::String;
 use tokio::fs;

@@ -168,7 +168,6 @@ async fn handle_saved_profile_file(
    );
    match CoreManager::global().update_config_forced().await {
        Ok(outcome) if outcome.is_valid() => {
-            logging_error!(Type::Config, Config::sync_dns_override().await);
            handle::Handle::refresh_clash();
            Ok(ValidationOutcome::Valid)
        }
@@ -435,6 +435,10 @@ impl CoreManager {
                {
                    anyhow::bail!("Sidecar did not become ready");
                }
+                // A Sidecar that was already running never loaded this generation.
+                if matches!(*mode, RunningMode::NotRunning) {
+                    Config::runtime().await.apply();
+                }
                tracing::Span::current().record("readiness_generation", self.current_core_readiness_generation());
                self.apply_proxy_after_start().await
            }
@@ -492,6 +496,7 @@ impl CoreManager {
                {
                    anyhow::bail!("Sidecar did not become ready after service uninstall");
                }
+                Config::runtime().await.apply();
                tracing::Span::current().record("readiness_generation", self.current_core_readiness_generation());
                self.apply_proxy_after_start().await
            },
@@ -5,7 +5,7 @@ mod state;

 use anyhow::Result;
 use arc_swap::{ArcSwap, ArcSwapOption};
-use clash_verge_logging::{LogRing, Type, logging};
+use clash_verge_logging::{LogRing, Type, logging, logging_error};
 use std::{
    fmt,
    sync::{
@@ -274,6 +274,10 @@ impl CoreManager {

    pub(crate) fn finish_config_update(&self) {
        self.config_update_in_progress.store(false, Ordering::Release);
+        // Spawned because the caller may still hold the config write lock this waits for.
+        crate::process::AsyncHandler::spawn(|| async {
+            logging_error!(Type::Config, crate::config::Config::sync_dns_override().await);
+        });
    }

    #[tracing::instrument(skip_all, level = "info", fields(retries = 0))]
@@ -4,7 +4,7 @@ use clash_verge_service_ipc::{RemoteProvider, RuntimeAsset, RuntimeBundle};
 use serde_yaml_ng::{Mapping, Value};
 use sha2::{Digest as _, Sha256};
 use std::collections::{BTreeMap, HashSet};
-use std::path::{Component, Path, PathBuf};
+use std::path::{Component, Path, PathBuf, Prefix};

 pub(crate) const GEO_ASSETS: &[&str] = &[
    "Country.mmdb",
@@ -165,6 +165,7 @@ fn collect_runtime_parts(mut config: Value, config_root: &Path) -> Result<Runtim
        &mut assets,
        &mut remote_providers,
    )?;
+    collect_ssh_private_keys(&mut config, &config_root, &mut destinations, &mut assets);
    for filename in GEO_ASSETS {
        let source = config_root.join(filename);
        if source.is_file() && destinations.insert((*filename).to_string()) {
@@ -270,6 +271,75 @@ fn collect_provider_assets(
    Ok(())
 }

+/// Stages file-based ssh keys, which mihomo resolves against the core home directory.
+fn collect_ssh_private_keys(
+    config: &mut Value,
+    config_root: &Path,
+    destinations: &mut HashSet<String>,
+    assets: &mut Vec<RuntimeAsset>,
+) {
+    let Some(config) = config.as_mapping_mut() else {
+        return;
+    };
+    // mihomo parses `payload` for every provider type, eagerly as fallback proxies for file and http.
+    let mut proxy_lists = Vec::new();
+    for (key, value) in config.iter_mut() {
+        match key.as_str() {
+            Some("proxies") => proxy_lists.extend(value.as_sequence_mut()),
+            Some("proxy-providers") => proxy_lists.extend(
+                value
+                    .as_mapping_mut()
+                    .into_iter()
+                    .flat_map(Mapping::values_mut)
+                    .filter_map(|provider| provider.get_mut("payload").and_then(Value::as_sequence_mut)),
+            ),
+            _ => {}
+        }
+    }
+
+    for proxy in proxy_lists.into_iter().flatten().filter_map(Value::as_mapping_mut) {
+        if proxy.get("type").and_then(Value::as_str) != Some("ssh") {
+            continue;
+        }
+        // mihomo reads any value containing "PRIVATE KEY" as inline key material.
+        let Some(raw_path) = proxy
+            .get("private-key")
+            .and_then(Value::as_str)
+            .filter(|key| !key.is_empty() && !key.contains("PRIVATE KEY") && is_local_path(key))
+        else {
+            continue;
+        };
+        let Some(source) = local_provider_source(config_root, raw_path)
+            .ok()
+            .filter(|source| source.is_file())
+        else {
+            let name = proxy.get("name").and_then(Value::as_str).unwrap_or_default();
+            logging!(
+                warn,
+                Type::Config,
+                "ssh proxy {name:?} private key is unavailable below the config root; leaving it to the core"
+            );
+            continue;
+        };
+        // A root-level alias keeps the user's path away from service name rules and mihomo's inline-key test.
+        let source = source.to_string_lossy().into_owned();
+        let destination = allocate_provider_destination("ssh-private-key", &source, destinations);
+        assets.push(RuntimeAsset {
+            source,
+            destination: destination.clone(),
+        });
+        proxy.insert(Value::String("private-key".to_owned()), Value::String(destination));
+    }
+}
+
+/// Resolving a UNC or device path would authenticate to its server, so those stay with the core.
+fn is_local_path(raw_path: &str) -> bool {
+    match Path::new(raw_path).components().next() {
+        Some(Component::Prefix(prefix)) => matches!(prefix.kind(), Prefix::Disk(_) | Prefix::VerbatimDisk(_)),
+        _ => true,
+    }
+}
+
 fn local_provider_source(config_root: &Path, raw_path: &str) -> Result<PathBuf> {
    let path = Path::new(raw_path);
    let source = if path.is_absolute() {
@@ -13,7 +13,7 @@ use crate::{
            CORE_REJECTED_PREFIX, OwnerRecoveryReason, OwnerSample, OwnerStep, OwnerWatch, PendingAction, RUN_STATE,
            ReadyWaitError, RunState, RunStateEnv, RunStateStore, ServiceHealth,
        },
-        runtime_bundle::{RemoteProviderRef, collect_runtime_bundle, remote_providers_of},
+        runtime_bundle::{GEO_ASSETS, RemoteProviderRef, collect_runtime_bundle, remote_providers_of},
        tray::Tray,
    },
    process::AsyncHandler,
@@ -101,6 +101,7 @@ struct ActiveServiceSession {
    proof: OwnerSessionProof,
    supports_runtime_staging: bool,
    supports_runtime_file_read: bool,
+    supports_runtime_geo_read: bool,
 }

 fn generate_service_session_token() -> Result<String> {
@@ -132,6 +133,13 @@ pub(crate) fn active_service_supports_runtime_file_read() -> bool {
        .is_some_and(|session| session.supports_runtime_file_read)
 }

+fn active_service_supports_runtime_geo_read() -> bool {
+    ACTIVE_SERVICE_SESSION
+        .lock()
+        .as_ref()
+        .is_some_and(|session| session.supports_runtime_geo_read)
+}
+
 pub(crate) fn clear_active_service_session() {
    ACTIVE_SERVICE_SESSION.lock().take();
 }
@@ -140,6 +148,7 @@ pub(crate) fn clear_active_service_session() {
 struct ServiceCapabilities {
    runtime_staging: bool,
    runtime_file_read: bool,
+    runtime_geo_read: bool,
 }

 impl ServiceCapabilities {
@@ -147,6 +156,7 @@ impl ServiceCapabilities {
        Self {
            runtime_staging: info.supports_runtime_staging(),
            runtime_file_read: info.supports_runtime_file_read(),
+            runtime_geo_read: info.supports_runtime_geo_read(),
        }
    }
 }
@@ -956,6 +966,7 @@ pub(super) async fn start_with_existing_service(config_file: &Path) -> Result<()
        },
        supports_runtime_staging: capabilities.runtime_staging,
        supports_runtime_file_read: capabilities.runtime_file_read,
+        supports_runtime_geo_read: capabilities.runtime_geo_read,
    });

    // PAC follows the Running Mode; the caller opens it via `core_started(Service)`.
@@ -1206,6 +1217,62 @@ async fn sync_runtime_providers_by_service() -> Result<ProviderSync> {
    Ok(outcome)
 }

+/// Pulls geo databases the service core rewrote, because validation reads the app dir.
+pub(crate) async fn sync_runtime_geo_by_service() {
+    if !active_service_supports_runtime_geo_read() {
+        return;
+    }
+    let (Ok(credentials), Ok(session), Ok(app_dir)) = (
+        current_owner_credentials(),
+        active_service_session(),
+        dirs::app_home_dir(),
+    ) else {
+        return;
+    };
+    for asset in GEO_ASSETS {
+        if let Err(error) = sync_runtime_geo(&credentials, &session, asset, &app_dir.join(asset)).await {
+            logging!(warn, Type::Service, "failed to sync geo database {asset}: {error:#}");
+        }
+    }
+}
+
+async fn sync_runtime_geo(
+    credentials: &OwnerCredentials,
+    session: &OwnerSessionProof,
+    asset: &str,
+    target: &Path,
+) -> Result<()> {
+    let Ok(local) = tokio::fs::metadata(target).await else {
+        return Ok(());
+    };
+    let Some((Some(_), _, Some(runtime_mtime_ns))) = read_chunk(credentials, session, asset, u64::MAX).await? else {
+        return Ok(());
+    };
+    // A newer local file is a change the next staging still has to copy into the runtime.
+    if UNIX_EPOCH + Duration::from_nanos(runtime_mtime_ns) <= local.modified()? {
+        return Ok(());
+    }
+    let (temp, file) = create_sync_temp(target).await?;
+    let result = async {
+        if let Fetch::Complete {
+            mtime_ns: Some(mtime_ns),
+            ..
+        } = fetch_runtime_file(credentials, session, asset, file).await?
+        {
+            // Matching the runtime copy's time lets the service skip copying these bytes straight back.
+            std::fs::File::options()
+                .write(true)
+                .open(&temp)?
+                .set_modified(UNIX_EPOCH + Duration::from_nanos(mtime_ns))?;
+            tokio::fs::rename(&temp, target).await?;
+        }
+        anyhow::Ok(())
+    }
+    .await;
+    remove_temp(&temp).await;
+    result
+}
+
 // The on-disk YAML may describe a rejected apply; use the committed runtime.
 fn applied_remote_providers(runtime: &Draft<IRuntime>, app_dir: &Path) -> Result<Vec<RemoteProviderRef>> {
    let applied = runtime.data_arc();
@@ -324,6 +324,7 @@ impl CoreConfigValidator {
            return Self::validate_file_syntax_outcome(config_path).await;
        }

+        crate::core::service::sync_runtime_geo_by_service().await;
        let is_script = match Self::is_script_file(config_path).await {
            Ok(result) => result,
            Err(err) => {
@@ -425,6 +426,8 @@ impl CoreConfigValidator {
        }
        logging!(info, Type::Validate, "生成临时配置文件用于验证");

+        // The test run reads the app dir, which never sees updates made by a service core.
+        crate::core::service::sync_runtime_geo_by_service().await;
        let fingerprint = validation_fingerprint(yaml).await;
        if *LAST_VALIDATED.lock() == Some(fingerprint) {
            logging!(info, Type::Validate, "配置与上次通过验证的字节一致，跳过内核检查");
@@ -9,7 +9,7 @@ use crate::{
 };
 use anyhow::{Result, anyhow};
 use chrono::Utc;
-use clash_verge_logging::{Type, logging, logging_error};
+use clash_verge_logging::{Type, logging};
 use reqwest_dav::list_cmd::ListFile;
 use serde::Serialize;
 use smartstring::alias::String;
@@ -88,7 +88,6 @@ async fn finalize_restored_verge_config(
            return Err(err);
        }
    }
-    logging_error!(Type::Config, Config::sync_dns_override().await);
    Ok(())
 }

@@ -7,7 +7,7 @@ use crate::{
    utils::help::{mask_err, mask_url},
 };
 use anyhow::{Result, bail};
-use clash_verge_logging::{Type, logging, logging_error};
+use clash_verge_logging::{Type, logging};
 use smartstring::alias::String;

 /// Toggle proxy profile
@@ -217,10 +217,7 @@ pub async fn update_profile(uid: &String, option: Option<&PrfOption>, is_mannual
    if should_refresh {
        logging!(debug, Type::Config, "[订阅更新] 更新内核配置");
        match CoreManager::global().update_config_with_force(is_mannual_trigger).await {
-            Ok(outcome) if outcome.is_valid() => {
-                logging_error!(Type::Config, Config::sync_dns_override().await);
-                announce(Refresh::Clash);
-            }
+            Ok(outcome) if outcome.is_valid() => announce(Refresh::Clash),
            Ok(outcome @ (ValidationOutcome::Skipped { .. } | ValidationOutcome::Busy)) if !is_mannual_trigger => {
                logging!(info, Type::Config, "[订阅更新] 本次配置刷新已跳过: {}", outcome);
            }
@@ -247,9 +244,5 @@ pub async fn update_profile(uid: &String, option: Option<&PrfOption>, is_mannual

 /// 增强配置
 pub async fn enhance_profiles() -> Result<ValidationOutcome> {
-    let outcome = CoreManager::global().update_config_forced().await?;
-    if outcome.is_valid() {
-        logging_error!(Type::Config, Config::sync_dns_override().await);
-    }
-    Ok(outcome)
+    CoreManager::global().update_config_forced().await
 }
@@ -316,6 +316,7 @@ pub async fn hide() {
    {
        let _ = window.hide();
    }
+    handle::Handle::global().set_activation_policy_accessory();
 }

 #[cfg(test)]
@@ -289,6 +289,9 @@ pub fn run() -> std::process::ExitCode {
        }

        pub fn handle_window_close(api: &tauri::WindowEvent) {
+            #[cfg(target_os = "macos")]
+            handle::Handle::global().set_activation_policy_accessory();
+
            if core::handle::Handle::global().is_exiting() {
                return;
            }
@@ -1,5 +1,5 @@
 {
-  "version": "2.5.9",
+  "version": "2.5.10",
  "$schema": "../node_modules/@tauri-apps/cli/config.schema.json",
  "bundle": {
    "active": true,
@@ -206,17 +206,20 @@ export const useRenderList = (
    verge?.default_latency_timeout,
  ])

+  const renderGroups = useMemo(() => {
+    if (!proxyView) return []
+    if (mode === 'rule') return proxyView.groups
+    const global = proxyView.global ? [proxyView.global] : []
+    return mode === 'global' ? [...global, ...proxyView.groups] : global
+  }, [mode, proxyView])
+
  // Every group this list draws, so a test settling in any of them re-sorts that group.
  const renderedGroupNames = useMemo(() => {
    if (!proxyView) return []
    if (isChainMode)
      return selectedGroup ? [selectedGroup] : [CHAIN_DELAY_GROUP]
-    return mode === 'rule' || mode === 'global'
-      ? proxyView.groups.map(({ name }) => name)
-      : proxyView.global
-        ? [proxyView.global.name]
-        : []
-  }, [isChainMode, mode, proxyView, selectedGroup])
+    return renderGroups.map(({ name }) => name)
+  }, [isChainMode, proxyView, renderGroups, selectedGroup])
  const groupDelays = useGroupsDelays(renderedGroupNames)

  const groupCacheRef = useRef<Map<string, GroupCache>>(new Map())
@@ -258,13 +261,7 @@ export const useRenderList = (
    }

    const useRule = mode === 'rule' || mode === 'global'
-    const renderGroups = useRule
-      ? proxyView.groups
-      : proxyView.global === null
-        ? []
-        : [proxyView.global]
    const cache = groupCacheRef.current
-    let anyChanged = false

    const retList = renderGroups.flatMap((group) => {
      const headState = headStates[group.name] || DEFAULT_STATE
@@ -281,7 +278,6 @@ export const useRenderList = (
        return cached.items
      }

-      anyChanged = true
      const ret: IRenderItem[] = [
        {
          type: 0,
@@ -350,7 +346,10 @@ export const useRenderList = (
    const filtered = !useRule
      ? retList.slice(1)
      : retList.filter((item) => !item.group.hidden)
-    if (!anyChanged && prevListRef.current.length === filtered.length) {
+    if (
+      prevListRef.current.length === filtered.length &&
+      filtered.every((item, index) => item === prevListRef.current[index])
+    ) {
      return prevListRef.current
    }
    prevListRef.current = filtered
@@ -364,6 +363,7 @@ export const useRenderList = (
    latencyTimeout,
    mode,
    proxyView,
+    renderGroups,
    selectedGroup,
  ])

@@ -7,10 +7,6 @@ import { useTranslation } from 'react-i18next'

 import { BaseDialog } from '@/components/base'
 import { useVerge } from '@/hooks/use-verge'
-import type {
-  IVergeTestItem_Deserialize,
-  IVergeTestItem_Serialize,
-} from '@/services/bindings'
 import { showNotice } from '@/services/notice-service'

 interface Props {
@@ -31,7 +27,7 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(
    const [loading, setLoading] = useState(false)
    const { verge, patchVerge } = useVerge()
    const testList = verge?.test_list ?? []
-    const { control, ...formIns } = useForm<IVergeTestItem_Deserialize>({
+    const { control, ...formIns } = useForm<IVergeTestItem>({
      defaultValues: {
        name: '',
        icon: '',
@@ -41,16 +37,11 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(

    const patchTestList = async (
      uid: string,
-      patch: Partial<IVergeTestItem_Deserialize>,
+      patch: Partial<IVergeTestItem>,
    ) => {
      const newList = testList.map((x) => {
        if (x.uid === uid) {
-          return {
-            uid: x.uid,
-            name: patch.name === undefined ? x.name : patch.name,
-            icon: patch.icon === undefined ? x.icon : patch.icon,
-            url: patch.url === undefined ? x.url : patch.url,
-          }
+          return { ...x, ...patch }
        }
        return x
      })
@@ -86,12 +77,7 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(

          if (openType === 'new') {
            const uid = nanoid()
-            const item: IVergeTestItem_Serialize = {
-              uid,
-              name: form.name ?? null,
-              icon: form.icon ?? null,
-              url: form.url ?? null,
-            }
+            const item = { ...form, uid }
            const newList = [...testList, item]
            await patchVerge({ test_list: newList })
            onChange(uid)
@@ -23,22 +23,19 @@ export const commands = {
    __TAURI_INVOKE<string[]>('get_network_interfaces'),
  getSystemHostname: () => __TAURI_INVOKE<string>('get_system_hostname'),
  restartApp: () => __TAURI_INVOKE<null>('restart_app'),
-  installUpdate: (
-    version: string,
-    onEvent: Channel<DownloadEvent_Deserialize>,
-  ) => __TAURI_INVOKE<boolean>('install_update', { version, onEvent }),
+  installUpdate: (version: string, onEvent: Channel<DownloadEvent>) =>
+    __TAURI_INVOKE<boolean>('install_update', { version, onEvent }),
  cancelUpdateDownload: () => __TAURI_INVOKE<void>('cancel_update_download'),
  restartCore: () => __TAURI_INVOKE<null>('restart_core'),
  /**  Replaces the managed core binary atomically instead of letting mihomo overwrite itself. */
  upgradeClashCore: (force: boolean) =>
    __TAURI_INVOKE<CoreUpgradeReport>('upgrade_clash_core', { force }),
  /**  Returns one coherent core/service snapshot instead of independently refreshed state. */
-  getRuntimeState: () =>
-    __TAURI_INVOKE<RunStateView_Serialize>('get_runtime_state'),
+  getRuntimeState: () => __TAURI_INVOKE<RunStateView>('get_runtime_state'),
  getPendingFailures: () =>
    __TAURI_INVOKE<PendingFailure[]>('get_pending_failures'),
  getSidecarFailure: () =>
-    __TAURI_INVOKE<SidecarFailureSnapshot_Serialize>('get_sidecar_failure'),
+    __TAURI_INVOKE<SidecarFailureSnapshot>('get_sidecar_failure'),
  entryLightweightMode: () => __TAURI_INVOKE<null>('entry_lightweight_mode'),
  installService: () =>
    __TAURI_INVOKE<ServiceInstallOutcome>('install_service'),
@@ -48,7 +45,7 @@ export const commands = {
  repairService: () => __TAURI_INVOKE<ServiceInstallOutcome>('repair_service'),
  continueWithSidecar: () => __TAURI_INVOKE<null>('continue_with_sidecar'),
  syncRuntimeProviders: () => __TAURI_INVOKE<void>('sync_runtime_providers'),
-  getClashInfo: () => __TAURI_INVOKE<ClashInfo_Serialize>('get_clash_info'),
+  getClashInfo: () => __TAURI_INVOKE<ClashInfo>('get_clash_info'),
  patchClashConfig: (payload: YamlMapping) =>
    __TAURI_INVOKE<null>('patch_clash_config', { payload }),
  patchClashMode: (payload: string) =>
@@ -56,11 +53,16 @@ export const commands = {
  /**  Reads the saved mode without depending on strict mihomo `/configs` deserialization. */
  getClashMode: () => __TAURI_INVOKE<string | null>('get_clash_mode'),
  changeClashCore: (clashCore: string) =>
-    __TAURI_INVOKE<CommandFailure_Serialize | null>('change_clash_core', {
-      clashCore,
-    }),
+    __TAURI_INVOKE<{
+      /**  Stable frontend identifier, when classified. */
+      code?: string | null
+      /**  Human-readable diagnostic detail. */
+      detail: string
+      /**  Requested operation when known by the command. */
+      operation?: FailedOperation | null
+    } | null>('change_clash_core', { clashCore }),
  getRuntimeConfig: () =>
-    __TAURI_INVOKE<YamlMapping | null>('get_runtime_config'),
+    __TAURI_INVOKE<{ [key in string]: JsonValue } | null>('get_runtime_config'),
  getProxyView: () => __TAURI_INVOKE<ProxyViewV1_Serialize>('get_proxy_view'),
  getRuntimeYaml: () => __TAURI_INVOKE<string>('get_runtime_yaml'),
  getRuntimeLogs: () => __TAURI_INVOKE<RuntimeLogs>('get_runtime_logs'),
@@ -68,7 +70,7 @@ export const commands = {
    __TAURI_INVOKE<string>('get_runtime_proxy_chain_config', {
      proxyChainExitNode,
    }),
-  updateProxyChainConfigInRuntime: (proxyChainConfig: YamlValue | null) =>
+  updateProxyChainConfigInRuntime: (proxyChainConfig: JsonValue | null) =>
    __TAURI_INVOKE<ValidationOutcome>('update_proxy_chain_config_in_runtime', {
      proxyChainConfig,
    }),
@@ -98,11 +100,18 @@ export const commands = {
  takeDnsOverrideNotice: () =>
    __TAURI_INVOKE<boolean>('take_dns_override_notice'),
  takeServiceFallbackNotice: () =>
-    __TAURI_INVOKE<ServiceFallbackNotice | null>(
-      'take_service_fallback_notice',
-    ),
+    __TAURI_INVOKE<
+      | { kind: 'unavailable' }
+      | { kind: 'coreRejected'; reason: string }
+      | { kind: 'notAutoStarted' }
+      | null
+    >('take_service_fallback_notice'),
  getCoreStartupError: () =>
-    __TAURI_INVOKE<CoreFailure | null>('get_core_startup_error'),
+    __TAURI_INVOKE<
+      | { kind: 'startFailed'; detail: string }
+      | { kind: 'serviceCoreStopped'; detail: string }
+      | null
+    >('get_core_startup_error'),
  takeServiceRepairNotice: () =>
    __TAURI_INVOKE<boolean>('take_service_repair_notice'),
  takeServiceOwnerNotice: () =>
@@ -128,12 +137,10 @@ export const commands = {
  openDevtools: () => __TAURI_INVOKE<void>('open_devtools'),
  exitApp: () => __TAURI_INVOKE<void>('exit_app'),
  getNetworkInterfacesInfo: () =>
-    __TAURI_INVOKE<NetworkInterfaceView_Serialize[]>(
-      'get_network_interfaces_info',
-    ),
+    __TAURI_INVOKE<NetworkInterfaceView[]>('get_network_interfaces_info'),
  getProfiles: () => __TAURI_INVOKE<IProfiles_Serialize>('get_profiles'),
  enhanceProfiles: () => __TAURI_INVOKE<ValidationOutcome>('enhance_profiles'),
-  patchProfilesConfig: (profiles: ProfileSelection_Deserialize) =>
+  patchProfilesConfig: (profiles: ProfileSelection) =>
    __TAURI_INVOKE<ValidationOutcome>('patch_profiles_config', { profiles }),
  viewProfile: (index: string) =>
    __TAURI_INVOKE<null>('view_profile', { index }),
@@ -141,12 +148,52 @@ export const commands = {
    __TAURI_INVOKE<null>('patch_profile', { index, profile }),
  createProfile: (item: ProfileCreate_Deserialize, fileData: string | null) =>
    __TAURI_INVOKE<null>('create_profile', { item, fileData }),
-  importProfile: (url: string, option: PrfOption_Deserialize | null) =>
-    __TAURI_INVOKE<null>('import_profile', { url, option }),
+  importProfile: (
+    url: string,
+    option: {
+      user_agent?: string | null
+      with_proxy?: boolean | null
+      self_proxy?: boolean | null
+      update_interval?: number | null
+      /**
+       *  HTTP request timeout in seconds
+       *  default is 60 seconds
+       */
+      timeout_seconds?: number | null
+      /**  default is `false` */
+      danger_accept_invalid_certs?: boolean | null
+      allow_auto_update?: boolean | null
+      merge?: string | null
+      script?: string | null
+      rules?: string | null
+      proxies?: string | null
+      groups?: string | null
+    } | null,
+  ) => __TAURI_INVOKE<null>('import_profile', { url, option }),
  reorderProfile: (activeId: string, overId: string) =>
    __TAURI_INVOKE<null>('reorder_profile', { activeId, overId }),
-  updateProfile: (index: string, option: PrfOption_Deserialize | null) =>
-    __TAURI_INVOKE<null>('update_profile', { index, option }),
+  updateProfile: (
+    index: string,
+    option: {
+      user_agent?: string | null
+      with_proxy?: boolean | null
+      self_proxy?: boolean | null
+      update_interval?: number | null
+      /**
+       *  HTTP request timeout in seconds
+       *  default is 60 seconds
+       */
+      timeout_seconds?: number | null
+      /**  default is `false` */
+      danger_accept_invalid_certs?: boolean | null
+      allow_auto_update?: boolean | null
+      merge?: string | null
+      script?: string | null
+      rules?: string | null
+      proxies?: string | null
+      groups?: string | null
+    } | null,
+  ) => __TAURI_INVOKE<null>('update_profile', { index, option }),
  deleteProfile: (index: string) =>
    __TAURI_INVOKE<null>('delete_profile', { index }),
  readProfileFile: (index: string) =>
@@ -174,14 +221,11 @@ export const commands = {
    __TAURI_INVOKE<null>('delete_webdav_backup', { filename }),
  restoreWebdavBackup: (filename: string) =>
    __TAURI_INVOKE<null>('restore_webdav_backup', { filename }),
-  getUnlockItems: () =>
-    __TAURI_INVOKE<UnlockItem_Serialize[]>('get_unlock_items'),
-  checkMediaUnlock: (onComplete: Channel<UnlockItem_Deserialize>) =>
-    __TAURI_INVOKE<UnlockItem_Serialize[]>('check_media_unlock', {
-      onComplete,
-    }),
+  getUnlockItems: () => __TAURI_INVOKE<UnlockItem[]>('get_unlock_items'),
+  checkMediaUnlock: (onComplete: Channel<UnlockItem>) =>
+    __TAURI_INVOKE<UnlockItem[]>('check_media_unlock', { onComplete }),
  checkMediaUnlockItem: (name: string) =>
-    __TAURI_INVOKE<UnlockItem_Serialize>('check_media_unlock_item', { name }),
+    __TAURI_INVOKE<UnlockItem>('check_media_unlock_item', { name }),
 }

 /* Types */
@@ -190,20 +234,7 @@ export type AutoProxy = {
  url: string
 }

-export type ClashInfo = ClashInfo_Serialize | ClashInfo_Deserialize
-
-export type ClashInfo_Deserialize = {
-  /**  clash core port */
-  mixed_port: number
-  socks_port: number
-  port: number
-  /**  same as `external-controller` */
-  server: string
-  /**  clash secret */
-  secret?: string | null
-}
-
-export type ClashInfo_Serialize = {
+export type ClashInfo = {
  /**  clash core port */
  mixed_port: number
  socks_port: number
@@ -222,21 +253,21 @@ export type CommandFailure =
 /**  Structured command failure returned to the frontend. */
 export type CommandFailure_Deserialize = {
  /**  Stable frontend identifier, when classified. */
-  code?: string | null
+  code: string | null
  /**  Human-readable diagnostic detail. */
  detail: string
  /**  Requested operation when known by the command. */
-  operation?: FailedOperation | null
+  operation: FailedOperation | null
 }

 /**  Structured command failure returned to the frontend. */
 export type CommandFailure_Serialize = {
  /**  Stable frontend identifier, when classified. */
-  code?: string
+  code?: string | null
  /**  Human-readable diagnostic detail. */
  detail: string
  /**  Requested operation when known by the command. */
-  operation?: FailedOperation
+  operation?: FailedOperation | null
 }

 /**  Why the Core is not running, kept until a Core starts again. */
@@ -259,26 +290,7 @@ export type DnsOverrideOutcome =
  | { status: 'confirmation_required'; source: string }

 /**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
-export type DownloadEvent = DownloadEvent_Serialize | DownloadEvent_Deserialize
-
-/**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
-export type DownloadEvent_Deserialize =
-  | {
-      event: 'Started'
-      data: {
-        contentLength?: number | null
-      }
-    }
-  | {
-      event: 'Progress'
-      data: {
-        chunkLength: number
-      }
-    }
-  | { event: 'Finished' }
-
-/**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
-export type DownloadEvent_Serialize =
+export type DownloadEvent =
  | {
      event: 'Started'
      data: {
@@ -318,27 +330,14 @@ export type IProfiles_Serialize = {
 /**  ### `verge.yaml` schema */
 export type IVerge = IVerge_Serialize | IVerge_Deserialize

-export type IVergeTestItem =
-  | IVergeTestItem_Serialize
-  | IVergeTestItem_Deserialize
-
-export type IVergeTestItem_Deserialize = {
+export type IVergeTestItem = {
  uid?: string | null
  name?: string | null
  icon?: string | null
  url?: string | null
 }

-export type IVergeTestItem_Serialize = {
-  uid: string | null
-  name: string | null
-  icon: string | null
-  url: string | null
-}
-
-export type IVergeTheme = IVergeTheme_Serialize | IVergeTheme_Deserialize
-
-export type IVergeTheme_Deserialize = {
+export type IVergeTheme = {
  primary_color?: string | null
  secondary_color?: string | null
  primary_text?: string | null
@@ -351,19 +350,6 @@ export type IVergeTheme_Deserialize = {
  css_injection?: string | null
 }

-export type IVergeTheme_Serialize = {
-  primary_color: string | null
-  secondary_color: string | null
-  primary_text: string | null
-  secondary_text: string | null
-  info_color: string | null
-  error_color: string | null
-  warning_color: string | null
-  success_color: string | null
-  font_family: string | null
-  css_injection: string | null
-}
-
 /**  ### `verge.yaml` schema */
 export type IVerge_Deserialize = {
  /**  silent | error | warn | info | debug | trace */
@@ -406,7 +392,7 @@ export type IVerge_Deserialize = {
  proxy_auto_config?: boolean | null
  pac_file_content?: string | null
  proxy_host?: string | null
-  theme_setting?: IVergeTheme_Deserialize | null
+  theme_setting?: IVergeTheme | null
  web_ui_list?: string[] | null
  clash_core?: string | null
  /**  format: {func},{key} */
@@ -422,7 +408,7 @@ export type IVerge_Deserialize = {
  auto_delay_detection_interval_minutes?: number | null
  enable_builtin_enhanced?: boolean | null
  proxy_layout_column?: number | null
-  test_list?: IVergeTestItem_Deserialize[] | null
+  test_list?: IVergeTestItem[] | null
  /**  0: 不清理; 1: 1天；2: 7天; 3: 30天; 4: 90天 */
  auto_log_clean?: number | null
  enable_auto_backup_schedule?: boolean | null
@@ -471,13 +457,13 @@ export type IVerge_Serialize = {
  traffic_graph: boolean | null
  /**  show memory info (only for Clash Meta) */
  enable_memory_usage: boolean | null
-  enable_group_icon?: boolean
+  enable_group_icon?: boolean | null
  pause_render_traffic_stats_on_blur: boolean | null
-  common_tray_icon?: boolean
-  menu_icon?: string
-  menu_order?: string[]
-  proxy_group_tools_position?: string
-  notice_position?: string
+  common_tray_icon?: boolean | null
+  menu_icon?: string | null
+  menu_order?: string[] | null
+  proxy_group_tools_position?: string | null
+  notice_position?: string | null
  collapse_navbar: boolean | null
  sysproxy_tray_icon: boolean | null
  tun_tray_icon: boolean | null
@@ -496,11 +482,11 @@ export type IVerge_Serialize = {
  proxy_auto_config: boolean | null
  pac_file_content: string | null
  proxy_host: string | null
-  theme_setting: IVergeTheme_Serialize | null
+  theme_setting: IVergeTheme | null
  web_ui_list: string[] | null
-  clash_core?: string
+  clash_core?: string | null
  /**  format: {func},{key} */
-  hotkeys?: string[]
+  hotkeys?: string[] | null
  enable_global_hotkey: boolean | null
  home_cards: JsonValue | null
  auto_close_connection: boolean | null
@@ -512,7 +498,7 @@ export type IVerge_Serialize = {
  auto_delay_detection_interval_minutes: number | null
  enable_builtin_enhanced: boolean | null
  proxy_layout_column: number | null
-  test_list: IVergeTestItem_Serialize[] | null
+  test_list: IVergeTestItem[] | null
  /**  0: 不清理; 1: 1天；2: 7天; 3: 30天; 4: 90天 */
  auto_log_clean: number | null
  enable_auto_backup_schedule: boolean | null
@@ -524,10 +510,10 @@ export type IVerge_Serialize = {
  verge_socks_enabled: boolean | null
  verge_port: number | null
  verge_http_enabled: boolean | null
-  webdav_url?: string
-  webdav_username?: string
-  webdav_password?: string
-  tray_proxy_groups_display_mode?: string
+  webdav_url?: string | null
+  webdav_username?: string | null
+  webdav_password?: string | null
+  tray_proxy_groups_display_mode?: string | null
  tray_inline_outbound_modes: boolean | null
  enable_auto_light_weight_mode: boolean | null
  /**  自动进入轻量模式的延迟（分钟） */
@@ -587,17 +573,7 @@ export type LocalBackupFile = {
  content_length: number
 }

-export type NetworkInterfaceView =
-  | NetworkInterfaceView_Serialize
-  | NetworkInterfaceView_Deserialize
-
-export type NetworkInterfaceView_Deserialize = {
-  name: string
-  addr: InterfaceAddress[]
-  mac_addr?: string | null
-}
-
-export type NetworkInterfaceView_Serialize = {
+export type NetworkInterfaceView = {
  name: string
  addr: InterfaceAddress[]
  mac_addr: string | null
@@ -656,20 +632,7 @@ export type PendingFailure = {
  sequence: number
 }

-export type PlatformVergeFields =
-  | PlatformVergeFields_Serialize
-  | PlatformVergeFields_Deserialize
-
-export type PlatformVergeFields_Deserialize = {
-  tray_icon?: string | null
-  verge_redir_port?: number | null
-  verge_redir_enabled?: boolean | null
-  verge_tproxy_port?: number | null
-  verge_tproxy_enabled?: boolean | null
-  enable_tray_speed?: boolean | null
-}
-
-export type PlatformVergeFields_Serialize = {
+export type PlatformVergeFields = {
  tray_icon?: string | null
  verge_redir_port?: number | null
  verge_redir_enabled?: boolean | null
@@ -695,7 +658,7 @@ export type PrfItem_Deserialize = {
  file?: string | null
  desc?: string | null
  url?: string | null
-  selected?: PrfSelected_Deserialize[] | null
+  selected?: PrfSelected[] | null
  extra?: PrfExtra | null
  updated?: number | null
  option?: PrfOption_Deserialize | null
@@ -708,13 +671,13 @@ export type PrfItem_Serialize = {
  type: string | null
  name: string | null
  file: string | null
-  desc?: string
-  url?: string
-  selected?: PrfSelected_Serialize[]
-  extra?: PrfExtra
+  desc?: string | null
+  url?: string | null
+  selected?: PrfSelected[] | null
+  extra?: PrfExtra | null
  updated: number | null
-  option?: PrfOption_Serialize
-  home?: string
+  option?: PrfOption_Serialize | null
+  home?: string | null
 }

 export type PrfOption = PrfOption_Serialize | PrfOption_Deserialize
@@ -740,18 +703,18 @@ export type PrfOption_Deserialize = {
 }

 export type PrfOption_Serialize = {
-  user_agent?: string
-  with_proxy?: boolean
-  self_proxy?: boolean
-  update_interval?: number
+  user_agent?: string | null
+  with_proxy?: boolean | null
+  self_proxy?: boolean | null
+  update_interval?: number | null
  /**
   *  HTTP request timeout in seconds
   *  default is 60 seconds
   */
-  timeout_seconds?: number
+  timeout_seconds?: number | null
  /**  default is `false` */
-  danger_accept_invalid_certs?: boolean
-  allow_auto_update?: boolean
+  danger_accept_invalid_certs?: boolean | null
+  allow_auto_update?: boolean | null
  merge: string | null
  script: string | null
  rules: string | null
@@ -759,18 +722,11 @@ export type PrfOption_Serialize = {
  groups: string | null
 }

-export type PrfSelected = PrfSelected_Serialize | PrfSelected_Deserialize
-
-export type PrfSelected_Deserialize = {
+export type PrfSelected = {
  name?: string | null
  now?: string | null
 }

-export type PrfSelected_Serialize = {
-  name: string | null
-  now: string | null
-}
-
 export type ProfileCreate = ProfileCreate_Serialize | ProfileCreate_Deserialize

 export type ProfileCreate_Deserialize = {
@@ -800,7 +756,7 @@ export type ProfileDnsSettings_Deserialize = {

 export type ProfileDnsSettings_Serialize = {
  enabled: boolean
-  confirmation?: string
+  confirmation?: string | null
 }

 export type ProfilePatch = ProfilePatch_Serialize | ProfilePatch_Deserialize
@@ -811,7 +767,7 @@ export type ProfilePatch_Deserialize = {
  desc?: string | null
  file?: string | null
  url?: string | null
-  selected?: PrfSelected_Deserialize[] | null
+  selected?: PrfSelected[] | null
  extra?: PrfExtra | null
  updated?: number | null
  option?: PrfOption_Deserialize | null
@@ -823,24 +779,16 @@ export type ProfilePatch_Serialize = {
  desc: string | null
  file: string | null
  url: string | null
-  selected: PrfSelected_Serialize[] | null
+  selected: PrfSelected[] | null
  extra: PrfExtra | null
  updated: number | null
  option: PrfOption_Serialize | null
 }

-export type ProfileSelection =
-  | ProfileSelection_Serialize
-  | ProfileSelection_Deserialize
-
-export type ProfileSelection_Deserialize = {
+export type ProfileSelection = {
  current?: string | null
 }

-export type ProfileSelection_Serialize = {
-  current: string | null
-}
-
 export type ProfileUpdatePayload = {
  uid: string
 }
@@ -860,11 +808,11 @@ export type ProxyGroupView =
 export type ProxyGroupView_Deserialize = {
  name: string
  type: string
-  now?: string | null
-  fixed?: string | null
-  hidden?: boolean | null
-  icon?: string | null
-  testUrl?: string | null
+  now: string | null
+  fixed: string | null
+  hidden: boolean | null
+  icon: string | null
+  testUrl: string | null
  history: DelayHistory[]
  members: ProxyMemberRef[]
 } & ProxyCapabilities
@@ -872,11 +820,11 @@ export type ProxyGroupView_Deserialize = {
 export type ProxyGroupView_Serialize = {
  name: string
  type: string
-  now?: string
-  fixed?: string
-  hidden?: boolean
-  icon?: string
-  testUrl?: string
+  now?: string | null
+  fixed?: string | null
+  hidden?: boolean | null
+  icon?: string | null
+  testUrl?: string | null
  history: DelayHistory[]
  members: ProxyMemberRef[]
 } & ProxyCapabilities
@@ -902,10 +850,10 @@ export type ProxyNodeView_Deserialize = {
  name: string
  type: string
  history: DelayHistory[]
-  id?: string | null
-  hidden?: boolean | null
-  icon?: string | null
-  testUrl?: string | null
+  id: string | null
+  hidden: boolean | null
+  icon: string | null
+  testUrl: string | null
  source: ProxyNodeSource
 } & ProxyCapabilities

@@ -914,10 +862,10 @@ export type ProxyNodeView_Serialize = {
  name: string
  type: string
  history: DelayHistory[]
-  id?: string
-  hidden?: boolean
-  icon?: string
-  testUrl?: string
+  id?: string | null
+  hidden?: boolean | null
+  icon?: string | null
+  testUrl?: string | null
  source: ProxyNodeSource
 } & ProxyCapabilities

@@ -938,16 +886,16 @@ export type ProxyProviderView =
 export type ProxyProviderView_Deserialize = {
  name: string
  vehicleType: ProxyProviderVehicleType
-  updatedAt?: string | null
-  subscriptionInfo?: ProxySubscriptionInfo | null
+  updatedAt: string | null
+  subscriptionInfo: ProxySubscriptionInfo | null
  proxyRecordIds: string[]
 }

 export type ProxyProviderView_Serialize = {
  name: string
  vehicleType: ProxyProviderVehicleType
-  updatedAt?: string
-  subscriptionInfo?: ProxySubscriptionInfo
+  updatedAt?: string | null
+  subscriptionInfo?: ProxySubscriptionInfo | null
  proxyRecordIds: string[]
 }

@@ -968,8 +916,8 @@ export type ProxyViewV1_Deserialize = {
  schemaVersion: number
  orderSource: ProxyViewOrderSource
  providerState: ProxyViewProviderState
-  global?: ProxyGroupView_Deserialize | null
-  direct?: string | null
+  global: ProxyGroupView_Deserialize | null
+  direct: string | null
  groups: ProxyGroupView_Deserialize[]
  records: { [key in string]: ProxyNodeView_Deserialize }
  standalone: string[]
@@ -988,22 +936,7 @@ export type ProxyViewV1_Serialize = {
  providers: ProxyProviderView_Serialize[]
 }

-export type RunStateView = RunStateView_Serialize | RunStateView_Deserialize
-
-export type RunStateView_Deserialize = {
-  mode: RunningMode
-  service: ServiceHealthKind
-  serviceUnavailableReason?: string | null
-  pendingAction?: PendingAction | null
-  sidecarAllowed: boolean
-  isAdmin: boolean
-  opInFlight: boolean
-  serviceUsable: boolean
-  tunCapable: boolean
-  serviceNeedsAttention: boolean
-}
-
-export type RunStateView_Serialize = {
+export type RunStateView = {
  mode: RunningMode
  service: ServiceHealthKind
  serviceUnavailableReason: string | null
@@ -1042,18 +975,7 @@ export type ServiceInstallOutcome =
  | { status: 'sidecar'; reason: string }

 /**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
-export type SidecarFailureSnapshot =
-  | SidecarFailureSnapshot_Serialize
-  | SidecarFailureSnapshot_Deserialize
-
-/**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
-export type SidecarFailureSnapshot_Deserialize = {
-  revision: number
-  detail?: string | null
-}
-
-/**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
-export type SidecarFailureSnapshot_Serialize = {
+export type SidecarFailureSnapshot = {
  revision: number
  detail: string | null
 }
@@ -1074,16 +996,7 @@ export type ToggleableProxyPort = {
  port: number
 }

-export type UnlockItem = UnlockItem_Serialize | UnlockItem_Deserialize
-
-export type UnlockItem_Deserialize = {
-  name: string
-  status: string
-  region?: string | null
-  check_time?: string | null
-}
-
-export type UnlockItem_Serialize = {
+export type UnlockItem = {
  name: string
  status: string
  region: string | null
@@ -1109,11 +1022,7 @@ export type ValidationOutcome =

 export type ValidationSkipReason = 'exiting' | 'debounced'

-export type VergeEventPayloads =
-  | VergeEventPayloads_Serialize
-  | VergeEventPayloads_Deserialize
-
-export type VergeEventPayloads_Deserialize = {
+export type VergeEventPayloads = {
  'verge://refresh-clash-config': null
  'verge://refresh-verge-config': null
  'verge://refresh-profiles': null
@@ -1123,21 +1032,7 @@ export type VergeEventPayloads_Deserialize = {
  'verge://timer-updated': string
  'profile-update-started': ProfileUpdatePayload
  'profile-update-completed': ProfileUpdatePayload
-  'verge://run-state-changed': RunStateView_Deserialize
-  'verge://pending-failures-changed': null
-}
-
-export type VergeEventPayloads_Serialize = {
-  'verge://refresh-clash-config': null
-  'verge://refresh-verge-config': null
-  'verge://refresh-profiles': null
-  'verge://refresh-proxy-config': null
-  'verge://notice-message': [NoticeStatus, string]
-  'profile-changed': string
-  'verge://timer-updated': string
-  'profile-update-started': ProfileUpdatePayload
-  'profile-update-completed': ProfileUpdatePayload
-  'verge://run-state-changed': RunStateView_Serialize
+  'verge://run-state-changed': RunStateView
  'verge://pending-failures-changed': null
 }

@@ -19,7 +19,7 @@ import type {

 export type {
  RunningMode,
-  RunStateView_Serialize as RunState,
+  RunStateView as RunState,
  FailedOperation,
  PendingFailure,
  SidecarFailureSnapshot,
@@ -1,4 +1 @@
-export type {
-  NoticeStatus,
-  VergeEventPayloads_Serialize as VergeEventPayloads,
-} from './bindings'
+export type { NoticeStatus, VergeEventPayloads } from './bindings'
Author	SHA1	Message	Date
github-actions[bot]andgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	c83f7ad529	Release: v2.5.10 (#8533 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-11-03 17:23:02 +08:00
Tunglies	55bb74c36d	fix: changelog	2026-11-03 17:19:17 +08:00
wonfen	5b7e876ab0	refactor(service): simplify DNS override sync and runtime asset staging	2026-11-03 09:34:16 +08:00
wonfen	bcbb5e3a58	fix(dns): save the DNS override decision on every runtime replacement Refs #8431	2026-11-03 09:34:16 +08:00
wonfen	726b2b362f	fix(service): sync core-updated geo databases before validation	2026-11-03 09:34:15 +08:00
wonfen	a038e01cd5	fix(service): stage file-based ssh private keys for the service core The service core runs with its own home directory, so relative and absolute private-key paths no longer resolved. Stage them as runtime assets under an opaque name; UNC and device paths are left to the core. Refs #8445, #8229	2026-11-03 09:34:15 +08:00
❤是纱雾酱哟～	f149604eb6	fix(installer): prompt to terminate running instance before uninstall or overwrite (#8519 ) * fix(installer): prompt to terminate running instance before uninstall or overwrite * fix(installer): detect running application instance during installation * docs(changelog): add changelog entry for windows installer fix Add release note entry for detecting running instances before reinstalling or overwriting in the Windows installer. Assisted-by: VSCode Copilot SDK (Gemini 3.8 Flash) Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> --------- Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com>	2026-11-02 17:59:59 +00:00
Tunglies	ebd78ae9ff	revert(macos): restore Dock hiding when closing the window This reverts commit `12f842d038`. Restore the Accessory activation policy when closing the main window or using Cmd+W so the Dock icon disappears again. Keeping the Regular policy avoided menu bar jitter but caused the Dock visibility regression in #8513. Hiding the application before switching to Accessory did not reliably eliminate the jitter. An isolated Tao 0.37.2 checkout with a native muda menu reproduced it on macOS 27.2 without CVR or WebView. The responsible layer remains undetermined and needs separate investigation. The menu bar jitter reported in #8319 can still occur; this revert restores Dock behavior and does not claim to fix that issue. Closes #8513	2026-11-03 00:55:35 +08:00
Tunglies	3027e2b87f	fix(proxies): restore GLOBAL selection in global mode Show the GLOBAL group before configured groups so the global exit can be selected without changing a shared policy group. Use the displayed groups for delay subscriptions and verify row identity before reusing the list. Close #8516	2026-11-02 22:25:35 +08:00
github-actions[bot]andgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	a0e57c5962	Dev: v2.5.10 (#8511 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-11-02 10:47:51 +00:00
Tunglies	de15283ef6	fix(release): omit comments when archiving changelog	2026-11-02 18:22:34 +08:00
Tunglies	3f39c2ceca	fix(release): filter draft lookup before buffering output	2026-11-02 17:36:27 +08:00
github-actions[bot]andgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	160bb4fe8e	Release: v2.5.9 (#8508 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-11-02 17:26:28 +08:00
Tunglies	a5b22fa512	fix(webdav): allow clearing saved configuration Close #8495	2026-11-02 17:24:13 +08:00