fix(ci): resolve Rust dependency update failures

chore(deps): update cargo dependencies
fix(webdav): allow clearing saved configuration
2026-11-03 21:52:11 +08:00 · 2026-11-03 13:19:09 +00:00 · 2026-11-02 05:31:20 +00:00 · 2026-11-02 03:26:36 +08:00
30 changed files with 578 additions and 581 deletions
@@ -150,7 +150,7 @@ dependencies = [
 "objc2-core-foundation",
 "objc2-core-graphics",
 "objc2-foundation",
- "parking_lot",
+ "parking_lot 0.12.5",
 "percent-encoding",
 "windows-sys 0.60.2",
 "wl-clipboard-rs",
@@ -159,9 +159,9 @@ dependencies = [

 [[package]]
 name = "arc-swap"
-version = "1.9.2"
+version = "1.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c049c0be4daef0b145cb3555416b3b8ef5b7888a38aea1a3a155801fe7b0810b"
+checksum = "380962b3d93b99642e50b9febf72c071e97e8b32d86eae9cf4ef582bb960ae6e"
 dependencies = [
 "rustversion",
 ]
@@ -1081,7 +1081,7 @@ checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"

 [[package]]
 name = "clash-verge"
-version = "2.5.10"
+version = "2.5.9"
 dependencies = [
 "aes-gcm",
 "anyhow",
@@ -1118,12 +1118,12 @@ dependencies = [
 "objc2-app-kit",
 "objc2-foundation",
 "open",
- "parking_lot",
+ "parking_lot 0.13.0",
 "percent-encoding",
 "regex",
 "reqwest 0.13.5",
 "reqwest_dav",
- "rfd",
+ "rfd 0.17.2",
 "runas",
 "rustls",
 "scopeguard",
@@ -1176,7 +1176,7 @@ version = "0.1.0"
 dependencies = [
 "anyhow",
 "criterion",
- "parking_lot",
+ "parking_lot 0.13.0",
 "tokio",
 ]

@@ -1199,7 +1199,7 @@ dependencies = [
 "anyhow",
 "flexi_logger",
 "log",
- "parking_lot",
+ "parking_lot 0.13.0",
 "tracing-estuary",
 ]

@@ -1256,8 +1256,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "facfbc410a385e0b0cbca8179dd9e363ed70e8455960bf7545137e90ca753b66"
 dependencies = [
 "crossbeam-utils",
- "lock_api",
- "parking_lot_core",
+ "lock_api 0.4.14",
+ "parking_lot_core 0.9.12",
 "polonius-the-crab",
 ]

@@ -1334,7 +1334,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "117725a109d387c937a1533ce01b450cbde6b88abceea8473c4d7a85853cda3c"
 dependencies = [
 "lazy_static",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]

 [[package]]
@@ -1768,8 +1768,18 @@ version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
 dependencies = [
- "darling_core",
- "darling_macro",
+ "darling_core 0.23.0",
+ "darling_macro 0.23.0",
+]
+
+[[package]]
+name = "darling"
+version = "0.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed17f5901b6630b993ca003def43f2f8ef4014fc13b047b57aad617ff32bc2ec"
+dependencies = [
+ "darling_core 0.24.1",
+ "darling_macro 0.24.1",
 ]

 [[package]]
@@ -1785,17 +1795,41 @@ dependencies = [
 "syn 2.0.119",
 ]

+[[package]]
+name = "darling_core"
+version = "0.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6837e2cf7485aaae18f86181d2f0e9a7ed297a025e220aeabf63fdebd3a2ddff"
+dependencies = [
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 3.0.5",
+]
+
 [[package]]
 name = "darling_macro"
 version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
 dependencies = [
- "darling_core",
+ "darling_core 0.23.0",
 "quote",
 "syn 2.0.119",
 ]

+[[package]]
+name = "darling_macro"
+version = "0.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ac7135c3ef02b2f7833bbeb1be5ba7f966dcde8a87c6b87f65a778d71a02785"
+dependencies = [
+ "darling_core 0.24.1",
+ "quote",
+ "syn 3.0.5",
+]
+
 [[package]]
 name = "dashmap"
 version = "6.2.1"
@@ -1805,9 +1839,9 @@ dependencies = [
 "cfg-if",
 "crossbeam-utils",
 "hashbrown 0.14.5",
- "lock_api",
+ "lock_api 0.4.14",
 "once_cell",
- "parking_lot_core",
+ "parking_lot_core 0.9.12",
 ]

 [[package]]
@@ -2015,7 +2049,7 @@ dependencies = [
 "libc",
 "option-ext",
 "redox_users 0.5.2",
- "windows-sys 0.60.2",
+ "windows-sys 0.59.0",
 ]

 [[package]]
@@ -3344,7 +3378,7 @@ dependencies = [
 "js-sys",
 "log",
 "wasm-bindgen",
- "windows-core 0.61.2",
+ "windows-core 0.62.2",
 ]

 [[package]]
@@ -3858,7 +3892,7 @@ dependencies = [
 "http",
 "httparse",
 "libc",
- "parking_lot",
+ "parking_lot 0.12.5",
 "path-tree",
 "pin-project-lite",
 "rand 0.10.2",
@@ -4019,10 +4053,19 @@ dependencies = [
 ]

 [[package]]
-name = "log"
-version = "0.4.34"
+name = "lock_api"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f9f8bd3e56ce4dfc153cf470fffbfa98c7620958b312ca5c3a4b8d5181fd13c6"
+checksum = "65d91b22da179613dcf4d6ec8349563f52a363f6849e03b00dd0a185ec4a59af"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d15f86d12da44cd8d4ec3c73984537eb7f4cadcb9776a575a0a8a05ca11005c"

 [[package]]
 name = "lru-slab"
@@ -4032,9 +4075,9 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"

 [[package]]
 name = "lzma-rust2"
-version = "0.23.0"
+version = "0.24.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f1c46f3fcd2e888afdb01a07efc071cb21300e07c68d32c3e8b01b5c8cb1fcaa"
+checksum = "490750560fa7851fbbf5d3ab1a8750f09350ed361ed8aed85b1e1e40587812ee"
 dependencies = [
 "sha2 0.11.1",
 ]
@@ -4382,7 +4425,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.59.0",
 ]

 [[package]]
@@ -4764,7 +4807,7 @@ version = "1.21.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
 dependencies = [
- "parking_lot_core",
+ "parking_lot_core 0.9.12",
 ]

 [[package]]
@@ -4787,9 +4830,9 @@ checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"

 [[package]]
 name = "open"
-version = "5.4.4"
+version = "5.4.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa576c76302b7b808eecc68061e67336c47833ef9d22caa74dda10fa9675eebc"
+checksum = "8d8c8b8e725ad26404d6896eb2f064294a0a7b4f1d9120210d85544684c4ca95"
 dependencies = [
 "dunce",
 "is-wsl",
@@ -4859,7 +4902,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
 dependencies = [
 "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.45.0",
 ]

 [[package]]
@@ -4923,8 +4966,18 @@ version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
 dependencies = [
- "lock_api",
- "parking_lot_core",
+ "lock_api 0.4.14",
+ "parking_lot_core 0.9.12",
+]
+
+[[package]]
+name = "parking_lot"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9cf937ca4e1d0b7578784559063422fc39ae7c5a00f02471f2614d5486fd226"
+dependencies = [
+ "lock_api 0.5.0",
+ "parking_lot_core 0.10.0",
 ]

 [[package]]
@@ -4935,7 +4988,19 @@ checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
 dependencies = [
 "cfg-if",
 "libc",
- "redox_syscall",
+ "redox_syscall 0.5.18",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cfff060068cc18aa7815010fcaf80c68c7fb9e85fc7f5c0f9bf142c21d19826"
+dependencies = [
+ "libc",
+ "redox_syscall 0.9.5",
 "smallvec",
 "windows-link 0.2.1",
 ]
@@ -5266,6 +5331,12 @@ dependencies = [
 "windows-sys 0.61.2",
 ]

+[[package]]
+name = "pollster"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f3a9f18d041e6d0e102a0a46750538147e5e8992d3b4873aaafee2520b00ce3"
+
 [[package]]
 name = "polonius-the-crab"
 version = "0.5.0"
@@ -5668,6 +5739,15 @@ dependencies = [
 "bitflags 2.13.2",
 ]

+[[package]]
+name = "redox_syscall"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "580c875845b41ecb1564ad1ae4703044cef774145e3d7a94dc2b3fa7c97868fd"
+dependencies = [
+ "bitflags 2.13.2",
+]
+
 [[package]]
 name = "redox_users"
 version = "0.4.6"
@@ -5887,6 +5967,30 @@ dependencies = [
 "windows-sys 0.60.2",
 ]

+[[package]]
+name = "rfd"
+version = "0.17.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20dafead71c16a34e1ff357ddefc8afc11e7d51d6d2b9fbd07eaa48e3e540220"
+dependencies = [
+ "block2",
+ "dispatch2",
+ "js-sys",
+ "libc",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "percent-encoding",
+ "pollster",
+ "raw-window-handle",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -6028,7 +6132,7 @@ dependencies = [
 "errno",
 "libc",
 "linux-raw-sys 0.4.15",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]

 [[package]]
@@ -6478,7 +6582,7 @@ version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "84d57bc0c8b9a17920c178daa6bb924850d54a9c97ab45194bb8c17ad66bb660"
 dependencies = [
- "darling",
+ "darling 0.23.0",
 "proc-macro2",
 "quote",
 "syn 2.0.119",
@@ -6738,7 +6842,7 @@ dependencies = [
 "objc2-foundation",
 "objc2-quartz-core",
 "raw-window-handle",
- "redox_syscall",
+ "redox_syscall 0.5.18",
 "tracing",
 "wasm-bindgen",
 "web-sys",
@@ -6773,9 +6877,9 @@ dependencies = [

 [[package]]
 name = "specta"
-version = "2.0.0-rc.25"
+version = "2.0.0-rc.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38f9a30cbcbb7011f1da7d73483983bf838af123883e45f2b36ed76328df9c50"
+checksum = "ed155e448f42fc4be7a5cbc12bd43f6c549981f7c32fcba429ff6bc57cc4f30c"
 dependencies = [
 "paste",
 "rustc_version 0.4.1",
@@ -6785,9 +6889,9 @@ dependencies = [

 [[package]]
 name = "specta-macros"
-version = "2.0.0-rc.25"
+version = "2.0.0-rc.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ce14957ecc2897f1f848b8255b6531d13ddf49cbcf506b7c2c9fb1d005593bb"
+checksum = "b34b2516e16a9ddd3dc4e73cd6454cfe21fe209f8cb5a6f37346fe3774d759b3"
 dependencies = [
 "Inflector",
 "proc-macro2",
@@ -6797,9 +6901,9 @@ dependencies = [

 [[package]]
 name = "specta-serde"
-version = "0.0.12"
+version = "0.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ee8a72b755ddb8949fd8f17c5db43f0e8a806ea587d9bc602ee3f73240c00029"
+checksum = "4983177ed0eb28235080261953de5f9ebae8a2d107851b5852420bd2ab246245"
 dependencies = [
 "specta",
 "specta-macros",
@@ -6807,18 +6911,18 @@ dependencies = [

 [[package]]
 name = "specta-typescript"
-version = "0.0.12"
+version = "0.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "639404ee95557f2f8b7e4cb773ffefd45304c7ab8ba21ac83b69051595e083c0"
+checksum = "3ecbe75dc1d27b36141b50b02b7c73bed00945710cee6edffa86d296a159a6f9"
 dependencies = [
 "specta",
 ]

 [[package]]
 name = "specta-util"
-version = "0.0.12"
+version = "0.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29b1fc02b446f7244a92924fe68c0555921209f1d342990cd1539e9138e69502"
+checksum = "d9bf531215ea70fba8264edecf98f12600462cf359f2038602a47aeda5ecd5b8"
 dependencies = [
 "specta",
 ]
@@ -6848,7 +6952,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
 dependencies = [
 "new_debug_unreachable",
- "parking_lot",
+ "parking_lot 0.12.5",
 "phf_shared 0.13.1",
 "precomputed-hash",
 ]
@@ -6984,9 +7088,9 @@ dependencies = [

 [[package]]
 name = "sysinfo"
-version = "0.39.6"
+version = "0.40.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2071df9448915b71c4fe6d25deaf1c22f12bd234f01540b77312bb8e41361e6"
+checksum = "0e8a3edbe0394ce115f3917a00349dd242be09eb5a091ed509eaf67b55cfb8a8"
 dependencies = [
 "libc",
 "memchr",
@@ -7095,7 +7199,7 @@ dependencies = [
 "objc2-app-kit",
 "objc2-foundation",
 "objc2-ui-kit",
- "parking_lot",
+ "parking_lot 0.12.5",
 "percent-encoding",
 "raw-window-handle",
 "tao-macros",
@@ -7302,7 +7406,7 @@ version = "0.1.0"
 dependencies = [
 "deelevate",
 "libc",
- "parking_lot",
+ "parking_lot 0.13.0",
 "serde",
 "specta",
 "sysinfo",
@@ -7381,7 +7485,7 @@ checksum = "b7461aaacf1901915ea7b9f5cd74f8224a351ed96af0a62c07fce934003cb34b"
 dependencies = [
 "log",
 "raw-window-handle",
- "rfd",
+ "rfd 0.16.0",
 "serde",
 "serde_json",
 "tauri",
@@ -7690,11 +7794,12 @@ dependencies = [

 [[package]]
 name = "tauri-specta"
-version = "2.0.0-rc.25"
+version = "2.0.0-rc.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ee080f36d2ac17ce2f3a82fb53f02d664e8345457de51b56dad3c394dacc41a2"
+checksum = "fe71fc209fa4c49f959644f1ae2d70f72d5675bcb3d3ad8518122fa7b330994e"
 dependencies = [
 "heck 0.5.0",
+ "paste",
 "serde",
 "serde_json",
 "specta",
@@ -7708,15 +7813,15 @@ dependencies = [

 [[package]]
 name = "tauri-specta-macros"
-version = "2.0.0-rc.25"
+version = "2.0.0-rc.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a59dfdce06c98d8d211619bea5fdb39486d8a8c558e12b2d2ce255972320012"
+checksum = "dbf5689a1dbf2611e2351b79ba042ca089d0a3ce45274695e79084cd732a5aec"
 dependencies = [
- "darling",
+ "darling 0.24.1",
 "heck 0.5.0",
 "proc-macro2",
 "quote",
- "syn 2.0.119",
+ "syn 3.0.5",
 ]

 [[package]]
@@ -8042,9 +8147,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"

 [[package]]
 name = "tokio"
-version = "1.53.3"
+version = "1.54.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
+checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3"
 dependencies = [
 "bytes",
 "libc",
@@ -8400,7 +8505,7 @@ dependencies = [
 "flexi_logger",
 "log",
 "nu-ansi-term",
- "parking_lot",
+ "parking_lot 0.12.5",
 "tokio",
 "tracing",
 "tracing-log",
@@ -9010,9 +9115,9 @@ dependencies = [

 [[package]]
 name = "webpki-roots"
-version = "1.0.9"
+version = "1.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a"
+checksum = "f5f280bbb2b287bc8e7de7e3852945a0ff50d1bbcb5ed42b6c7a568c546df171"
 dependencies = [
 "rustls-pki-types",
 ]
@@ -9106,7 +9211,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.48.0",
 ]

 [[package]]
@@ -9702,7 +9807,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d6f32a0ff4a9f6f01231eb2059cc85479330739333e0e58cadf03b6af2cca10"
 dependencies = [
 "cfg-if",
- "windows-sys 0.60.2",
+ "windows-sys 0.59.0",
 ]

 [[package]]
@@ -10034,9 +10139,9 @@ dependencies = [

 [[package]]
 name = "zip"
-version = "9.1.3"
+version = "9.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1156b39d142a34b999c2310a50455e0cb3760bf7efad0122f796d813bee26ccb"
+checksum = "eaeb7f16d2605b49aef586996ded29e65642fab7259a3077e537351df6d80426"
 dependencies = [
 "aes",
 "bzip2",
@@ -10047,6 +10152,7 @@ dependencies = [
 "getrandom 0.4.3",
 "hmac",
 "indexmap 2.14.0",
+ "libc",
 "lzma-rust2",
 "memchr",
 "nix",
@@ -63,18 +63,18 @@ tracing = "0.1.44"

 tauri = { version = "2.12.4" }
 tauri-plugin-clipboard-manager = "2.5.0"
-parking_lot = { version = "0.12.5", features = ["hardware-lock-elision"] }
+parking_lot = "0.13.0"
 anyhow = "1.0.104"
 chrono = "0.4.45"
 criterion = { version = "0.8.2", features = ["async_tokio"] }
-tokio = { version = "1.53.3", features = [
+tokio = { version = "1.54.1", features = [
  "rt-multi-thread",
  "macros",
  "time",
  "sync",
 ] }
 flexi_logger = "0.31.10"
-log = "0.4.34"
+log = "0.4.35"
 regex = "1.13.1"
 reqwest = { version = "0.13.5", features = [
  "json",
@@ -1,48 +1,46 @@
-<!-- Release-notes skeleton. Entries accumulate in ./Changelog.md as PRs land;
-     before publishing a release, distill them:
-     - user-visible changes only — no dev tooling, CI fixes, or refactors whose
-       effect is already covered by another entry
-     - describe outcomes, not internals: no internal module names, IPC or
-       protocol details, or implementation mechanics — write what the user
-       observes, not how the code achieves it
-     - one line per theme: merge entries that share a root cause
-     - each entry fits a single readable line (about 60 CJK characters); if it
-       overflows, it is packing multiple themes or detail that belongs in the
-       linked issue/PR — split it or drop the detail
-     - line grammar: open with a verb (修复/新增/优化), with the platform
-       first (Windows/macOS/Linux) when the change is platform-specific;
-       merge sub-symptoms as 主题：症状、症状; full-width punctuation,
-       「」 for UI labels, backticks for config keys and commands
-     - platform entries sit under their platform heading (bold, emoji
-       prefixed, ordered Windows/macOS/Linux, combined for pairs like
-       macOS/Linux) at the end of their section;
-       scripts-workflow/group_platforms.sh regroups, --check verifies
-     HTML comments are stripped by the update dialog's sanitizer and hidden on
-     GitHub, so they never reach users. -->
-## v2.5.10
+## v2.5.9
+
+- **Mihomo(Meta) 内核升级至 v1.19.33**

 <details>
 <summary><strong> 🐞 修复问题 </strong></summary>

- 修复全局模式缺少 `GLOBAL` 策略组，无法单独选择全局出口
- 修复服务模式下，SSH 节点的 `private-key` 使用私钥文件时内核无法启动
- 修复服务模式下，内核更新的 GEO 数据库不会同步回应用目录，导致使用新分类的规则无法通过校验
- 修复订阅的 DNS 配置变化后，「DNS 覆写」实际已关闭但开关仍显示开启且没有提示
+- 修复规则扩展包含空列表项时，「编辑规则」界面报错的问题
+- 修复 重启应用后定时自动备份不执行的问题
+- 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
+- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
+- 修复 首页 网站测速失败后卡片一直显示测试中
+- 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
+- 修复 代理 在全局模式下无法展开节点组
+- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
+- 修复 WebDAV 设置清空后无法保存

-**🖥️ Windows**
+**🍎 macOS**

- Windows：修复安装程序重新安装或覆盖时未提示退出运行中应用，导致卸载报错或覆盖失败
+- macOS：修复 Bigsur 上首页测速和流量图无法显示的问题
+
+**🐧 Linux**
+
+- Linux：修复 deb/rpm 安装包错误包含多余的 `frontend-contract` 可执行文件，导致下游重新打包失败的问题

 </details>

 <details>
 <summary><strong> ✨ 新增功能 </strong></summary>

+- 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
+- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
+- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记

 </details>

 <details>
 <summary><strong> 🚀 优化改进 </strong></summary>

+- 优化「链式代理」：开启前需确认网速影响提示，空面板新增「关闭」按钮
+
+**🖥️ Windows**
+
+- Windows 系统代理默认绕过 `*.local` 域名，访问局域网设备的 `.local` 主机名时不再经过代理

 </details>
@@ -4,7 +4,7 @@ version = "0.1.0"
 edition = "2024"

 [dependencies]
-specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
+specta = { version = "=2.0.0-rc.26", features = ["derive", "function"] }
 clash-verge-logging = { workspace = true }
 chrono = { workspace = true }
 log = { workspace = true }
@@ -5,14 +5,14 @@ edition = "2024"
 rust-version = "1.91"

 [dependencies]
-specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
+specta = { version = "=2.0.0-rc.26", features = ["derive", "function"] }
 tauri = { workspace = true }
 tauri-plugin-clipboard-manager = { workspace = true }
 parking_lot = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 # sysinfo 0.38.2 conflicts with dark-light
 # see https://github.com/GuillaumeGomez/sysinfo/issues/1623
-sysinfo = { version = "0.39.6", features = ["network", "system"] }
+sysinfo = { version = "0.40.1", features = ["network", "system"] }

 [target.'cfg(not(windows))'.dependencies]
 libc = "0.2.191"
@@ -27,9 +27,9 @@ pub struct SysInfo {
 impl Default for SysInfo {
    #[inline]
    fn default() -> Self {
-        let system_name = System::name().unwrap_or_else(|| "Null".into());
-        let system_version = System::long_os_version().unwrap_or_else(|| "Null".into());
-        let system_kernel_version = System::kernel_version().unwrap_or_else(|| "Null".into());
+        let system_name = System::name().unwrap_or_else(|_| "Null".into());
+        let system_version = System::long_os_version().unwrap_or_else(|_| "Null".into());
+        let system_kernel_version = System::kernel_version().unwrap_or_else(|_| "Null".into());
        let system_arch = System::cpu_arch();
        Self {
            system_name,
@@ -130,9 +130,14 @@ pub fn current_gid() -> u32 {

 #[inline]
 pub fn list_network_interfaces() -> Vec<String> {
-    let mut networks = Networks::new();
+    let Ok(mut networks) = Networks::new() else {
+        return Vec::new();
+    };
    networks.refresh(false);
-    networks.keys().map(|name| name.to_owned()).collect()
+    networks
+        .keys()
+        .map(|name| name.to_string_lossy().into_owned())
+        .collect()
 }

 #[inline]
@@ -1,51 +1,3 @@
-## v2.5.9
-
- **Mihomo(Meta) 内核升级至 v1.19.33**
-
-<details>
-<summary><strong> 🐞 修复问题 </strong></summary>
-
- 修复规则扩展包含空列表项时，「编辑规则」界面报错的问题
- 修复 重启应用后定时自动备份不执行的问题
- 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
- 修复 首页 网站测速失败后卡片一直显示测试中
- 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
- 修复 代理 在全局模式下无法展开节点组
- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
- 修复 WebDAV 设置清空后无法保存
-
-**🍎 macOS**
-
- macOS：修复 Bigsur 上首页测速和流量图无法显示的问题
-
-**🐧 Linux**
-
- Linux：修复 deb/rpm 安装包错误包含多余的 `frontend-contract` 可执行文件，导致下游重新打包失败的问题
-
-</details>
-
-<details>
-<summary><strong> ✨ 新增功能 </strong></summary>
-
- 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记
-
-</details>
-
-<details>
-<summary><strong> 🚀 优化改进 </strong></summary>
-
- 优化「链式代理」：开启前需确认网速影响提示，空面板新增「关闭」按钮
-
-**🖥️ Windows**
-
- Windows 系统代理默认绕过 `*.local` 域名，访问局域网设备的 `.local` 主机名时不再经过代理
-
-</details>
-
-
 ## v2.5.8

 <details>
@@ -1,6 +1,6 @@
 {
  "name": "clash-verge",
-  "version": "2.5.10",
+  "version": "2.5.9",
  "license": "GPL-3.0-only",
  "scripts": {
    "prepare": "husky || true",
@@ -41,10 +41,7 @@ fi

 tmpfile=$(mktemp)
 {
-	node -e '
-		const fs = require("node:fs");
-		process.stdout.write(fs.readFileSync(process.argv[1], "utf8").replace(/<!--[\s\S]*?-->/g, "").trimStart());
-	' "$CHANGELOG"
+	cat "$CHANGELOG"
 	echo
 	echo "" 
 	if [ -f "$HISTORY" ]; then
@@ -134,31 +134,6 @@ function fetchBranches() {
  )
 }

-function discardClosedCandidate(branch, base, prefix) {
-  const candidates = list(
-    `pulls?state=all&base=${base}&head=${repository.split('/')[0]}:${branch}&per_page=100`,
-  )
-  const latest = candidates[0]
-  if (!latest || candidates.some((pr) => pr.state === 'open'))
-    throw new Error(
-      `Branch ${branch} is reserved by an active or unknown candidate.`,
-    )
-  const pr = get(`pulls/${latest.number}`)
-  requireBotPr(pr, base, prefix)
-  if (pr.state !== 'closed' || pr.merged)
-    throw new Error(
-      `Close the unmerged candidate before retrying: ${pr.html_url}`,
-    )
-  updateRefs(pr.base.repo.node_id, [
-    {
-      name: `refs/heads/${branch}`,
-      beforeOid: pr.head.sha,
-      afterOid: '0'.repeat(40),
-    },
-  ])
-  summary(`Released the unused branch from closed PR: ${pr.html_url}`)
-}
-
 function prepare() {
  let refresh
  if (env.GITHUB_EVENT_NAME === 'pull_request_target') {
@@ -236,15 +211,8 @@ function prepare() {
      : last
        ? `${base}-rc.${BigInt(last.match(rcPattern)[4] ?? 0) + 1n}`
        : `${base}-rc`)
-  if (tags.includes(tag)) throw new Error(`Tag ${tag} already exists.`)
-  for (const [prefix, target] of [
-    ['release/', 'dev'],
-    ['publish/', 'main'],
-  ]) {
-    const branch = `${prefix}${tag}`
-    if (refs.includes(`refs/heads/${branch}`) && branch !== refresh?.head.ref)
-      discardClosedCandidate(branch, target, prefix)
-  }
+  if (occupied.includes(tag))
+    throw new Error(`Tag ${tag} already exists or is reserved.`)
  const sha = git('rev-parse', 'HEAD')
  const body = releaseBody(tag, sha, tags, false)
  summary(body)
@@ -485,7 +453,7 @@ function publishPr() {
  validateVersionCommit(tag, sha)
  const branch = `publish/${tag}`
  const existing = list(
-    `pulls?state=open&base=main&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+    `pulls?state=all&base=main&head=${repository.split('/')[0]}:${branch}&per_page=100`,
  )
  if (existing.length) {
    const publication = existing[0]
@@ -599,31 +567,28 @@ function publish() {
    requireApproval(pr, sha)
    const main = git('rev-parse', 'origin/main')
    git('merge-base', '--is-ancestor', main, sha)
-    git(
-      '-c',
-      'user.name=github-actions[bot]',
-      '-c',
-      'user.email=41898282+github-actions[bot]@users.noreply.github.com',
-      'tag',
-      '--annotate',
-      '--no-sign',
-      '--message',
-      marker,
+    const object = api('git/tags', {
      tag,
-      sha,
-    )
-    // GraphQL updateRefs rejects annotated tag objects; Git preserves atomicity.
-    git(
-      'push',
-      '--atomic',
-      `--force-with-lease=refs/heads/main:${main}`,
-      `--force-with-lease=refs/heads/${pr.head.ref}:${sha}`,
-      `--force-with-lease=refs/tags/${tag}:`,
-      'origin',
-      `${sha}:refs/heads/main`,
-      `${sha}:refs/heads/${pr.head.ref}`,
-      `refs/tags/${tag}:refs/tags/${tag}`,
-    )
+      message: marker,
+      object: sha,
+      type: 'commit',
+    })
+    // The tag records run ownership in the same transaction as the fast-forward.
+    updateRefs(pr.base.repo.node_id, [
+      { name: 'refs/heads/main', beforeOid: main, afterOid: sha, force: false },
+      {
+        name: `refs/heads/${pr.head.ref}`,
+        beforeOid: sha,
+        afterOid: sha,
+        force: false,
+      },
+      {
+        name: `refs/tags/${tag}`,
+        beforeOid: '0'.repeat(40),
+        afterOid: object.sha,
+        force: false,
+      },
+    ])
    summary(`Fast-forwarded main and tagged ${tag} at approved commit ${sha}.`)
  }
  releaseOutput(tag, sha)
@@ -652,14 +617,9 @@ function validateTag() {
 function prepareDraft() {
  const tag = env.RELEASE_TAG
  verifyTarget()
-  const result = run('gh', [
-    'api',
-    '--paginate',
-    endpoint('releases?per_page=100'),
-    '--jq',
-    `.[] | select(.tag_name == ${JSON.stringify(tag)}) | {id, draft}`,
-  ])
-  const release = result ? JSON.parse(result) : null
+  const release = list('releases?per_page=100').find(
+    (release) => release.tag_name === tag,
+  )
  if (release && !release.draft)
    throw new Error('This release is already public.')
  const draft =
@@ -1,6 +1,6 @@
 [package]
 name = "clash-verge"
-version = "2.5.10"
+version = "2.5.9"
 description = "clash verge"
 authors = ["zzzgydi", "Tunglies", "wonfen", "MystiPanda"]
 license = "GPL-3.0-only"
@@ -58,8 +58,8 @@ smartstring = { workspace = true, features = ["serde"] }
 bitflags = { workspace = true }
 socket2 = { workspace = true }
 warp = { version = "0.4.3", features = ["server"] }
-open = "5.4.4"
-rfd = { version = "0.16.0", default-features = false, features = ["common-controls-v6"] }
+open = "5.4.5"
+rfd = { version = "0.17.2", default-features = false, features = ["common-controls-v6", "xdg-portal"] }
 dirs = "7.0.0"
 dunce = "1.0.5"
 nanoid = "0.5"
@@ -79,7 +79,7 @@ tauri-plugin-fs = "2.7.1"
 tauri-plugin-process = "2.4.0"
 tauri-plugin-deep-link = "2.6.2"
 tauri-plugin-window-state = "2.5.0"
-zip = "9.1.3"
+zip = "9.2.2"
 flate2 = "1.1.10"
 reqwest_dav = "0.3.3"
 aes-gcm = { version = "0.11.1" }
@@ -98,19 +98,19 @@ tracing = { workspace = true }
 tauri-plugin-devtools = { version = "2.2.2", optional = true }
 tauri-plugin-mihomo = { git = "https://github.com/clash-verge-rev/tauri-plugin-mihomo", rev = "7a03d16f4d39b1bb885b7babe66b9e153e34b615" }
 async-trait = "0.1.92"
-clash_verge_service_ipc = { git = "https://github.com/clash-verge-rev/clash-verge-service-ipc.git", tag = "v2.7.7", version = "2.7.7", features = [
+clash_verge_service_ipc = { git = "https://github.com/clash-verge-rev/clash-verge-service-ipc.git", tag = "v2.7.7", version = "2.7.6", features = [
  "client",
 ] }
-arc-swap = "1.9.2"
+arc-swap = "1.9.3"
 tokio-rustls = "0.26.6"
 rustls = { version = "0.23.46", features = ["ring"] }
-webpki-roots = "1.0.9"
+webpki-roots = "1.0.11"
 dark-light = "3.0.0"
 bytes = "1.12.1"
 tokio-util = { version = "0.7.20", features = ["time"] }
-specta = { version = "=2.0.0-rc.25", features = ["derive", "function", "serde_json"] }
-tauri-specta = { version = "=2.0.0-rc.25", features = ["derive", "typescript"] }
-specta-typescript = "=0.0.12"
+specta = { version = "=2.0.0-rc.26", features = ["derive", "function", "serde_json"] }
+tauri-specta = { version = "=2.0.0-rc.26", features = ["derive", "typescript"] }
+specta-typescript = "=0.0.13"

 [target.'cfg(unix)'.dependencies]
 libc = "0.2.191"
@@ -21,7 +21,6 @@ ManifestDPIAwareness PerMonitorV2
 !include "FileAssociation.nsh"
 !include "Win\COM.nsh"
 !include "Win\Propkey.nsh"
-!include "Win\RestartManager.nsh"
 !include "WinVer.nsh"
 !include "LogicLib.nsh"
 !include "StrFunc.nsh"
@@ -333,8 +332,6 @@ Function PageLeaveReinstall
  ${EndIf}

  reinst_uninstall:
-    !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
-
    HideWindow
    ClearErrors

@@ -371,10 +368,7 @@ Function PageLeaveReinstall
      MessageBox MB_ICONEXCLAMATION "$(unableToUninstall)"
      Abort
    ${EndIf}
-    Return
-
  reinst_done:
-    !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
 FunctionEnd

 ; 5. Choose install directory page
@@ -907,7 +901,8 @@ Section Install

  nsExec::Exec 'netsh int tcp res'

-  !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
+  !include "Win\RestartManager.nsh"
+  !insertmacro CheckIfAppIsRunning "${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
  !insertmacro CheckAllVergeProcesses

  ; Ensure startup folders exist
@@ -1106,7 +1101,7 @@ Section Uninstall
    !insertmacro NSIS_HOOK_PREUNINSTALL
  !endif

-  !insertmacro CheckIfAppIsRunning "$INSTDIR\${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
+  !insertmacro CheckIfAppIsRunning "${MAINBINARYNAME}.exe" "${PRODUCTNAME}"
  !insertmacro CheckAllVergeProcesses
  !insertmacro RemoveVergeService

@@ -205,6 +205,7 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {
        logging!(info, Type::Config, "Config regenerated successfully");
    }

+    logging_error!(Type::Config, Config::sync_dns_override().await);
    handle::Handle::refresh_clash();
    Ok(())
 }
@@ -191,6 +191,10 @@ pub async fn delete_profile(index: std::string::String) -> CmdResult {
    drop(config_update_guard);
    drop(profile_write_guard);

+    if should_update {
+        logging_error!(Type::Config, Config::sync_dns_override().await);
+    }
+
    if let Err(e) = Tray::global().update_tooltip().await {
        logging!(warn, Type::Cmd, "异步更新托盘提示失败: {e:#}");
    }
@@ -260,6 +264,7 @@ async fn handle_success(current_value: Option<&String>) -> CmdResult<ValidationO
        handle::Handle::notify_profile_changed(current);
    }

+    logging_error!(Type::Config, Config::sync_dns_override().await);
    Ok(ValidationOutcome::Valid)
 }

@@ -10,7 +10,7 @@ use crate::{
    },
    utils::dirs,
 };
-use clash_verge_logging::{Type, logging};
+use clash_verge_logging::{Type, logging, logging_error};
 use smartstring::alias::String;
 use tokio::fs;

@@ -168,6 +168,7 @@ async fn handle_saved_profile_file(
    );
    match CoreManager::global().update_config_forced().await {
        Ok(outcome) if outcome.is_valid() => {
+            logging_error!(Type::Config, Config::sync_dns_override().await);
            handle::Handle::refresh_clash();
            Ok(ValidationOutcome::Valid)
        }
@@ -435,10 +435,6 @@ impl CoreManager {
                {
                    anyhow::bail!("Sidecar did not become ready");
                }
-                // A Sidecar that was already running never loaded this generation.
-                if matches!(*mode, RunningMode::NotRunning) {
-                    Config::runtime().await.apply();
-                }
                tracing::Span::current().record("readiness_generation", self.current_core_readiness_generation());
                self.apply_proxy_after_start().await
            }
@@ -496,7 +492,6 @@ impl CoreManager {
                {
                    anyhow::bail!("Sidecar did not become ready after service uninstall");
                }
-                Config::runtime().await.apply();
                tracing::Span::current().record("readiness_generation", self.current_core_readiness_generation());
                self.apply_proxy_after_start().await
            },
@@ -5,7 +5,7 @@ mod state;

 use anyhow::Result;
 use arc_swap::{ArcSwap, ArcSwapOption};
-use clash_verge_logging::{LogRing, Type, logging, logging_error};
+use clash_verge_logging::{LogRing, Type, logging};
 use std::{
    fmt,
    sync::{
@@ -274,10 +274,6 @@ impl CoreManager {

    pub(crate) fn finish_config_update(&self) {
        self.config_update_in_progress.store(false, Ordering::Release);
-        // Spawned because the caller may still hold the config write lock this waits for.
-        crate::process::AsyncHandler::spawn(|| async {
-            logging_error!(Type::Config, crate::config::Config::sync_dns_override().await);
-        });
    }

    #[tracing::instrument(skip_all, level = "info", fields(retries = 0))]
@@ -4,7 +4,7 @@ use clash_verge_service_ipc::{RemoteProvider, RuntimeAsset, RuntimeBundle};
 use serde_yaml_ng::{Mapping, Value};
 use sha2::{Digest as _, Sha256};
 use std::collections::{BTreeMap, HashSet};
-use std::path::{Component, Path, PathBuf, Prefix};
+use std::path::{Component, Path, PathBuf};

 pub(crate) const GEO_ASSETS: &[&str] = &[
    "Country.mmdb",
@@ -165,7 +165,6 @@ fn collect_runtime_parts(mut config: Value, config_root: &Path) -> Result<Runtim
        &mut assets,
        &mut remote_providers,
    )?;
-    collect_ssh_private_keys(&mut config, &config_root, &mut destinations, &mut assets);
    for filename in GEO_ASSETS {
        let source = config_root.join(filename);
        if source.is_file() && destinations.insert((*filename).to_string()) {
@@ -271,75 +270,6 @@ fn collect_provider_assets(
    Ok(())
 }

-/// Stages file-based ssh keys, which mihomo resolves against the core home directory.
-fn collect_ssh_private_keys(
-    config: &mut Value,
-    config_root: &Path,
-    destinations: &mut HashSet<String>,
-    assets: &mut Vec<RuntimeAsset>,
-) {
-    let Some(config) = config.as_mapping_mut() else {
-        return;
-    };
-    // mihomo parses `payload` for every provider type, eagerly as fallback proxies for file and http.
-    let mut proxy_lists = Vec::new();
-    for (key, value) in config.iter_mut() {
-        match key.as_str() {
-            Some("proxies") => proxy_lists.extend(value.as_sequence_mut()),
-            Some("proxy-providers") => proxy_lists.extend(
-                value
-                    .as_mapping_mut()
-                    .into_iter()
-                    .flat_map(Mapping::values_mut)
-                    .filter_map(|provider| provider.get_mut("payload").and_then(Value::as_sequence_mut)),
-            ),
-            _ => {}
-        }
-    }
-
-    for proxy in proxy_lists.into_iter().flatten().filter_map(Value::as_mapping_mut) {
-        if proxy.get("type").and_then(Value::as_str) != Some("ssh") {
-            continue;
-        }
-        // mihomo reads any value containing "PRIVATE KEY" as inline key material.
-        let Some(raw_path) = proxy
-            .get("private-key")
-            .and_then(Value::as_str)
-            .filter(|key| !key.is_empty() && !key.contains("PRIVATE KEY") && is_local_path(key))
-        else {
-            continue;
-        };
-        let Some(source) = local_provider_source(config_root, raw_path)
-            .ok()
-            .filter(|source| source.is_file())
-        else {
-            let name = proxy.get("name").and_then(Value::as_str).unwrap_or_default();
-            logging!(
-                warn,
-                Type::Config,
-                "ssh proxy {name:?} private key is unavailable below the config root; leaving it to the core"
-            );
-            continue;
-        };
-        // A root-level alias keeps the user's path away from service name rules and mihomo's inline-key test.
-        let source = source.to_string_lossy().into_owned();
-        let destination = allocate_provider_destination("ssh-private-key", &source, destinations);
-        assets.push(RuntimeAsset {
-            source,
-            destination: destination.clone(),
-        });
-        proxy.insert(Value::String("private-key".to_owned()), Value::String(destination));
-    }
-}
-
-/// Resolving a UNC or device path would authenticate to its server, so those stay with the core.
-fn is_local_path(raw_path: &str) -> bool {
-    match Path::new(raw_path).components().next() {
-        Some(Component::Prefix(prefix)) => matches!(prefix.kind(), Prefix::Disk(_) | Prefix::VerbatimDisk(_)),
-        _ => true,
-    }
-}
-
 fn local_provider_source(config_root: &Path, raw_path: &str) -> Result<PathBuf> {
    let path = Path::new(raw_path);
    let source = if path.is_absolute() {
@@ -13,7 +13,7 @@ use crate::{
            CORE_REJECTED_PREFIX, OwnerRecoveryReason, OwnerSample, OwnerStep, OwnerWatch, PendingAction, RUN_STATE,
            ReadyWaitError, RunState, RunStateEnv, RunStateStore, ServiceHealth,
        },
-        runtime_bundle::{GEO_ASSETS, RemoteProviderRef, collect_runtime_bundle, remote_providers_of},
+        runtime_bundle::{RemoteProviderRef, collect_runtime_bundle, remote_providers_of},
        tray::Tray,
    },
    process::AsyncHandler,
@@ -101,7 +101,6 @@ struct ActiveServiceSession {
    proof: OwnerSessionProof,
    supports_runtime_staging: bool,
    supports_runtime_file_read: bool,
-    supports_runtime_geo_read: bool,
 }

 fn generate_service_session_token() -> Result<String> {
@@ -133,13 +132,6 @@ pub(crate) fn active_service_supports_runtime_file_read() -> bool {
        .is_some_and(|session| session.supports_runtime_file_read)
 }

-fn active_service_supports_runtime_geo_read() -> bool {
-    ACTIVE_SERVICE_SESSION
-        .lock()
-        .as_ref()
-        .is_some_and(|session| session.supports_runtime_geo_read)
-}
-
 pub(crate) fn clear_active_service_session() {
    ACTIVE_SERVICE_SESSION.lock().take();
 }
@@ -148,7 +140,6 @@ pub(crate) fn clear_active_service_session() {
 struct ServiceCapabilities {
    runtime_staging: bool,
    runtime_file_read: bool,
-    runtime_geo_read: bool,
 }

 impl ServiceCapabilities {
@@ -156,7 +147,6 @@ impl ServiceCapabilities {
        Self {
            runtime_staging: info.supports_runtime_staging(),
            runtime_file_read: info.supports_runtime_file_read(),
-            runtime_geo_read: info.supports_runtime_geo_read(),
        }
    }
 }
@@ -966,7 +956,6 @@ pub(super) async fn start_with_existing_service(config_file: &Path) -> Result<()
        },
        supports_runtime_staging: capabilities.runtime_staging,
        supports_runtime_file_read: capabilities.runtime_file_read,
-        supports_runtime_geo_read: capabilities.runtime_geo_read,
    });

    // PAC follows the Running Mode; the caller opens it via `core_started(Service)`.
@@ -1217,62 +1206,6 @@ async fn sync_runtime_providers_by_service() -> Result<ProviderSync> {
    Ok(outcome)
 }

-/// Pulls geo databases the service core rewrote, because validation reads the app dir.
-pub(crate) async fn sync_runtime_geo_by_service() {
-    if !active_service_supports_runtime_geo_read() {
-        return;
-    }
-    let (Ok(credentials), Ok(session), Ok(app_dir)) = (
-        current_owner_credentials(),
-        active_service_session(),
-        dirs::app_home_dir(),
-    ) else {
-        return;
-    };
-    for asset in GEO_ASSETS {
-        if let Err(error) = sync_runtime_geo(&credentials, &session, asset, &app_dir.join(asset)).await {
-            logging!(warn, Type::Service, "failed to sync geo database {asset}: {error:#}");
-        }
-    }
-}
-
-async fn sync_runtime_geo(
-    credentials: &OwnerCredentials,
-    session: &OwnerSessionProof,
-    asset: &str,
-    target: &Path,
-) -> Result<()> {
-    let Ok(local) = tokio::fs::metadata(target).await else {
-        return Ok(());
-    };
-    let Some((Some(_), _, Some(runtime_mtime_ns))) = read_chunk(credentials, session, asset, u64::MAX).await? else {
-        return Ok(());
-    };
-    // A newer local file is a change the next staging still has to copy into the runtime.
-    if UNIX_EPOCH + Duration::from_nanos(runtime_mtime_ns) <= local.modified()? {
-        return Ok(());
-    }
-    let (temp, file) = create_sync_temp(target).await?;
-    let result = async {
-        if let Fetch::Complete {
-            mtime_ns: Some(mtime_ns),
-            ..
-        } = fetch_runtime_file(credentials, session, asset, file).await?
-        {
-            // Matching the runtime copy's time lets the service skip copying these bytes straight back.
-            std::fs::File::options()
-                .write(true)
-                .open(&temp)?
-                .set_modified(UNIX_EPOCH + Duration::from_nanos(mtime_ns))?;
-            tokio::fs::rename(&temp, target).await?;
-        }
-        anyhow::Ok(())
-    }
-    .await;
-    remove_temp(&temp).await;
-    result
-}
-
 // The on-disk YAML may describe a rejected apply; use the committed runtime.
 fn applied_remote_providers(runtime: &Draft<IRuntime>, app_dir: &Path) -> Result<Vec<RemoteProviderRef>> {
    let applied = runtime.data_arc();
@@ -324,7 +324,6 @@ impl CoreConfigValidator {
            return Self::validate_file_syntax_outcome(config_path).await;
        }

-        crate::core::service::sync_runtime_geo_by_service().await;
        let is_script = match Self::is_script_file(config_path).await {
            Ok(result) => result,
            Err(err) => {
@@ -426,8 +425,6 @@ impl CoreConfigValidator {
        }
        logging!(info, Type::Validate, "生成临时配置文件用于验证");

-        // The test run reads the app dir, which never sees updates made by a service core.
-        crate::core::service::sync_runtime_geo_by_service().await;
        let fingerprint = validation_fingerprint(yaml).await;
        if *LAST_VALIDATED.lock() == Some(fingerprint) {
            logging!(info, Type::Validate, "配置与上次通过验证的字节一致，跳过内核检查");
@@ -9,7 +9,7 @@ use crate::{
 };
 use anyhow::{Result, anyhow};
 use chrono::Utc;
-use clash_verge_logging::{Type, logging};
+use clash_verge_logging::{Type, logging, logging_error};
 use reqwest_dav::list_cmd::ListFile;
 use serde::Serialize;
 use smartstring::alias::String;
@@ -88,6 +88,7 @@ async fn finalize_restored_verge_config(
            return Err(err);
        }
    }
+    logging_error!(Type::Config, Config::sync_dns_override().await);
    Ok(())
 }

@@ -7,7 +7,7 @@ use crate::{
    utils::help::{mask_err, mask_url},
 };
 use anyhow::{Result, bail};
-use clash_verge_logging::{Type, logging};
+use clash_verge_logging::{Type, logging, logging_error};
 use smartstring::alias::String;

 /// Toggle proxy profile
@@ -217,7 +217,10 @@ pub async fn update_profile(uid: &String, option: Option<&PrfOption>, is_mannual
    if should_refresh {
        logging!(debug, Type::Config, "[订阅更新] 更新内核配置");
        match CoreManager::global().update_config_with_force(is_mannual_trigger).await {
-            Ok(outcome) if outcome.is_valid() => announce(Refresh::Clash),
+            Ok(outcome) if outcome.is_valid() => {
+                logging_error!(Type::Config, Config::sync_dns_override().await);
+                announce(Refresh::Clash);
+            }
            Ok(outcome @ (ValidationOutcome::Skipped { .. } | ValidationOutcome::Busy)) if !is_mannual_trigger => {
                logging!(info, Type::Config, "[订阅更新] 本次配置刷新已跳过: {}", outcome);
            }
@@ -244,5 +247,9 @@ pub async fn update_profile(uid: &String, option: Option<&PrfOption>, is_mannual

 /// 增强配置
 pub async fn enhance_profiles() -> Result<ValidationOutcome> {
-    CoreManager::global().update_config_forced().await
+    let outcome = CoreManager::global().update_config_forced().await?;
+    if outcome.is_valid() {
+        logging_error!(Type::Config, Config::sync_dns_override().await);
+    }
+    Ok(outcome)
 }
@@ -316,7 +316,6 @@ pub async fn hide() {
    {
        let _ = window.hide();
    }
-    handle::Handle::global().set_activation_policy_accessory();
 }

 #[cfg(test)]
@@ -289,9 +289,6 @@ pub fn run() -> std::process::ExitCode {
        }

        pub fn handle_window_close(api: &tauri::WindowEvent) {
-            #[cfg(target_os = "macos")]
-            handle::Handle::global().set_activation_policy_accessory();
-
            if core::handle::Handle::global().is_exiting() {
                return;
            }
@@ -1,5 +1,5 @@
 {
-  "version": "2.5.10",
+  "version": "2.5.9",
  "$schema": "../node_modules/@tauri-apps/cli/config.schema.json",
  "bundle": {
    "active": true,
@@ -206,20 +206,17 @@ export const useRenderList = (
    verge?.default_latency_timeout,
  ])

-  const renderGroups = useMemo(() => {
-    if (!proxyView) return []
-    if (mode === 'rule') return proxyView.groups
-    const global = proxyView.global ? [proxyView.global] : []
-    return mode === 'global' ? [...global, ...proxyView.groups] : global
-  }, [mode, proxyView])
-
  // Every group this list draws, so a test settling in any of them re-sorts that group.
  const renderedGroupNames = useMemo(() => {
    if (!proxyView) return []
    if (isChainMode)
      return selectedGroup ? [selectedGroup] : [CHAIN_DELAY_GROUP]
-    return renderGroups.map(({ name }) => name)
-  }, [isChainMode, proxyView, renderGroups, selectedGroup])
+    return mode === 'rule' || mode === 'global'
+      ? proxyView.groups.map(({ name }) => name)
+      : proxyView.global
+        ? [proxyView.global.name]
+        : []
+  }, [isChainMode, mode, proxyView, selectedGroup])
  const groupDelays = useGroupsDelays(renderedGroupNames)

  const groupCacheRef = useRef<Map<string, GroupCache>>(new Map())
@@ -261,7 +258,13 @@ export const useRenderList = (
    }

    const useRule = mode === 'rule' || mode === 'global'
+    const renderGroups = useRule
+      ? proxyView.groups
+      : proxyView.global === null
+        ? []
+        : [proxyView.global]
    const cache = groupCacheRef.current
+    let anyChanged = false

    const retList = renderGroups.flatMap((group) => {
      const headState = headStates[group.name] || DEFAULT_STATE
@@ -278,6 +281,7 @@ export const useRenderList = (
        return cached.items
      }

+      anyChanged = true
      const ret: IRenderItem[] = [
        {
          type: 0,
@@ -346,10 +350,7 @@ export const useRenderList = (
    const filtered = !useRule
      ? retList.slice(1)
      : retList.filter((item) => !item.group.hidden)
-    if (
-      prevListRef.current.length === filtered.length &&
-      filtered.every((item, index) => item === prevListRef.current[index])
-    ) {
+    if (!anyChanged && prevListRef.current.length === filtered.length) {
      return prevListRef.current
    }
    prevListRef.current = filtered
@@ -363,7 +364,6 @@ export const useRenderList = (
    latencyTimeout,
    mode,
    proxyView,
-    renderGroups,
    selectedGroup,
  ])

@@ -7,6 +7,10 @@ import { useTranslation } from 'react-i18next'

 import { BaseDialog } from '@/components/base'
 import { useVerge } from '@/hooks/use-verge'
+import type {
+  IVergeTestItem_Deserialize,
+  IVergeTestItem_Serialize,
+} from '@/services/bindings'
 import { showNotice } from '@/services/notice-service'

 interface Props {
@@ -27,7 +31,7 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(
    const [loading, setLoading] = useState(false)
    const { verge, patchVerge } = useVerge()
    const testList = verge?.test_list ?? []
-    const { control, ...formIns } = useForm<IVergeTestItem>({
+    const { control, ...formIns } = useForm<IVergeTestItem_Deserialize>({
      defaultValues: {
        name: '',
        icon: '',
@@ -37,11 +41,16 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(

    const patchTestList = async (
      uid: string,
-      patch: Partial<IVergeTestItem>,
+      patch: Partial<IVergeTestItem_Deserialize>,
    ) => {
      const newList = testList.map((x) => {
        if (x.uid === uid) {
-          return { ...x, ...patch }
+          return {
+            uid: x.uid,
+            name: patch.name === undefined ? x.name : patch.name,
+            icon: patch.icon === undefined ? x.icon : patch.icon,
+            url: patch.url === undefined ? x.url : patch.url,
+          }
        }
        return x
      })
@@ -77,7 +86,12 @@ export const TestViewer = forwardRef<TestViewerRef, Props>(

          if (openType === 'new') {
            const uid = nanoid()
-            const item = { ...form, uid }
+            const item: IVergeTestItem_Serialize = {
+              uid,
+              name: form.name ?? null,
+              icon: form.icon ?? null,
+              url: form.url ?? null,
+            }
            const newList = [...testList, item]
            await patchVerge({ test_list: newList })
            onChange(uid)
@@ -23,19 +23,22 @@ export const commands = {
    __TAURI_INVOKE<string[]>('get_network_interfaces'),
  getSystemHostname: () => __TAURI_INVOKE<string>('get_system_hostname'),
  restartApp: () => __TAURI_INVOKE<null>('restart_app'),
-  installUpdate: (version: string, onEvent: Channel<DownloadEvent>) =>
-    __TAURI_INVOKE<boolean>('install_update', { version, onEvent }),
+  installUpdate: (
+    version: string,
+    onEvent: Channel<DownloadEvent_Deserialize>,
+  ) => __TAURI_INVOKE<boolean>('install_update', { version, onEvent }),
  cancelUpdateDownload: () => __TAURI_INVOKE<void>('cancel_update_download'),
  restartCore: () => __TAURI_INVOKE<null>('restart_core'),
  /**  Replaces the managed core binary atomically instead of letting mihomo overwrite itself. */
  upgradeClashCore: (force: boolean) =>
    __TAURI_INVOKE<CoreUpgradeReport>('upgrade_clash_core', { force }),
  /**  Returns one coherent core/service snapshot instead of independently refreshed state. */
-  getRuntimeState: () => __TAURI_INVOKE<RunStateView>('get_runtime_state'),
+  getRuntimeState: () =>
+    __TAURI_INVOKE<RunStateView_Serialize>('get_runtime_state'),
  getPendingFailures: () =>
    __TAURI_INVOKE<PendingFailure[]>('get_pending_failures'),
  getSidecarFailure: () =>
-    __TAURI_INVOKE<SidecarFailureSnapshot>('get_sidecar_failure'),
+    __TAURI_INVOKE<SidecarFailureSnapshot_Serialize>('get_sidecar_failure'),
  entryLightweightMode: () => __TAURI_INVOKE<null>('entry_lightweight_mode'),
  installService: () =>
    __TAURI_INVOKE<ServiceInstallOutcome>('install_service'),
@@ -45,7 +48,7 @@ export const commands = {
  repairService: () => __TAURI_INVOKE<ServiceInstallOutcome>('repair_service'),
  continueWithSidecar: () => __TAURI_INVOKE<null>('continue_with_sidecar'),
  syncRuntimeProviders: () => __TAURI_INVOKE<void>('sync_runtime_providers'),
-  getClashInfo: () => __TAURI_INVOKE<ClashInfo>('get_clash_info'),
+  getClashInfo: () => __TAURI_INVOKE<ClashInfo_Serialize>('get_clash_info'),
  patchClashConfig: (payload: YamlMapping) =>
    __TAURI_INVOKE<null>('patch_clash_config', { payload }),
  patchClashMode: (payload: string) =>
@@ -53,16 +56,11 @@ export const commands = {
  /**  Reads the saved mode without depending on strict mihomo `/configs` deserialization. */
  getClashMode: () => __TAURI_INVOKE<string | null>('get_clash_mode'),
  changeClashCore: (clashCore: string) =>
-    __TAURI_INVOKE<{
-      /**  Stable frontend identifier, when classified. */
-      code?: string | null
-      /**  Human-readable diagnostic detail. */
-      detail: string
-      /**  Requested operation when known by the command. */
-      operation?: FailedOperation | null
-    } | null>('change_clash_core', { clashCore }),
+    __TAURI_INVOKE<CommandFailure_Serialize | null>('change_clash_core', {
+      clashCore,
+    }),
  getRuntimeConfig: () =>
-    __TAURI_INVOKE<{ [key in string]: JsonValue } | null>('get_runtime_config'),
+    __TAURI_INVOKE<YamlMapping | null>('get_runtime_config'),
  getProxyView: () => __TAURI_INVOKE<ProxyViewV1_Serialize>('get_proxy_view'),
  getRuntimeYaml: () => __TAURI_INVOKE<string>('get_runtime_yaml'),
  getRuntimeLogs: () => __TAURI_INVOKE<RuntimeLogs>('get_runtime_logs'),
@@ -70,7 +68,7 @@ export const commands = {
    __TAURI_INVOKE<string>('get_runtime_proxy_chain_config', {
      proxyChainExitNode,
    }),
-  updateProxyChainConfigInRuntime: (proxyChainConfig: JsonValue | null) =>
+  updateProxyChainConfigInRuntime: (proxyChainConfig: YamlValue | null) =>
    __TAURI_INVOKE<ValidationOutcome>('update_proxy_chain_config_in_runtime', {
      proxyChainConfig,
    }),
@@ -100,18 +98,11 @@ export const commands = {
  takeDnsOverrideNotice: () =>
    __TAURI_INVOKE<boolean>('take_dns_override_notice'),
  takeServiceFallbackNotice: () =>
-    __TAURI_INVOKE<
-      | { kind: 'unavailable' }
-      | { kind: 'coreRejected'; reason: string }
-      | { kind: 'notAutoStarted' }
-      | null
-    >('take_service_fallback_notice'),
+    __TAURI_INVOKE<ServiceFallbackNotice | null>(
+      'take_service_fallback_notice',
+    ),
  getCoreStartupError: () =>
-    __TAURI_INVOKE<
-      | { kind: 'startFailed'; detail: string }
-      | { kind: 'serviceCoreStopped'; detail: string }
-      | null
-    >('get_core_startup_error'),
+    __TAURI_INVOKE<CoreFailure | null>('get_core_startup_error'),
  takeServiceRepairNotice: () =>
    __TAURI_INVOKE<boolean>('take_service_repair_notice'),
  takeServiceOwnerNotice: () =>
@@ -137,10 +128,12 @@ export const commands = {
  openDevtools: () => __TAURI_INVOKE<void>('open_devtools'),
  exitApp: () => __TAURI_INVOKE<void>('exit_app'),
  getNetworkInterfacesInfo: () =>
-    __TAURI_INVOKE<NetworkInterfaceView[]>('get_network_interfaces_info'),
+    __TAURI_INVOKE<NetworkInterfaceView_Serialize[]>(
+      'get_network_interfaces_info',
+    ),
  getProfiles: () => __TAURI_INVOKE<IProfiles_Serialize>('get_profiles'),
  enhanceProfiles: () => __TAURI_INVOKE<ValidationOutcome>('enhance_profiles'),
-  patchProfilesConfig: (profiles: ProfileSelection) =>
+  patchProfilesConfig: (profiles: ProfileSelection_Deserialize) =>
    __TAURI_INVOKE<ValidationOutcome>('patch_profiles_config', { profiles }),
  viewProfile: (index: string) =>
    __TAURI_INVOKE<null>('view_profile', { index }),
@@ -148,52 +141,12 @@ export const commands = {
    __TAURI_INVOKE<null>('patch_profile', { index, profile }),
  createProfile: (item: ProfileCreate_Deserialize, fileData: string | null) =>
    __TAURI_INVOKE<null>('create_profile', { item, fileData }),
-  importProfile: (
-    url: string,
-    option: {
-      user_agent?: string | null
-      with_proxy?: boolean | null
-      self_proxy?: boolean | null
-      update_interval?: number | null
-      /**
-       *  HTTP request timeout in seconds
-       *  default is 60 seconds
-       */
-      timeout_seconds?: number | null
-      /**  default is `false` */
-      danger_accept_invalid_certs?: boolean | null
-      allow_auto_update?: boolean | null
-      merge?: string | null
-      script?: string | null
-      rules?: string | null
-      proxies?: string | null
-      groups?: string | null
-    } | null,
-  ) => __TAURI_INVOKE<null>('import_profile', { url, option }),
+  importProfile: (url: string, option: PrfOption_Deserialize | null) =>
+    __TAURI_INVOKE<null>('import_profile', { url, option }),
  reorderProfile: (activeId: string, overId: string) =>
    __TAURI_INVOKE<null>('reorder_profile', { activeId, overId }),
-  updateProfile: (
-    index: string,
-    option: {
-      user_agent?: string | null
-      with_proxy?: boolean | null
-      self_proxy?: boolean | null
-      update_interval?: number | null
-      /**
-       *  HTTP request timeout in seconds
-       *  default is 60 seconds
-       */
-      timeout_seconds?: number | null
-      /**  default is `false` */
-      danger_accept_invalid_certs?: boolean | null
-      allow_auto_update?: boolean | null
-      merge?: string | null
-      script?: string | null
-      rules?: string | null
-      proxies?: string | null
-      groups?: string | null
-    } | null,
-  ) => __TAURI_INVOKE<null>('update_profile', { index, option }),
+  updateProfile: (index: string, option: PrfOption_Deserialize | null) =>
+    __TAURI_INVOKE<null>('update_profile', { index, option }),
  deleteProfile: (index: string) =>
    __TAURI_INVOKE<null>('delete_profile', { index }),
  readProfileFile: (index: string) =>
@@ -221,11 +174,14 @@ export const commands = {
    __TAURI_INVOKE<null>('delete_webdav_backup', { filename }),
  restoreWebdavBackup: (filename: string) =>
    __TAURI_INVOKE<null>('restore_webdav_backup', { filename }),
-  getUnlockItems: () => __TAURI_INVOKE<UnlockItem[]>('get_unlock_items'),
-  checkMediaUnlock: (onComplete: Channel<UnlockItem>) =>
-    __TAURI_INVOKE<UnlockItem[]>('check_media_unlock', { onComplete }),
+  getUnlockItems: () =>
+    __TAURI_INVOKE<UnlockItem_Serialize[]>('get_unlock_items'),
+  checkMediaUnlock: (onComplete: Channel<UnlockItem_Deserialize>) =>
+    __TAURI_INVOKE<UnlockItem_Serialize[]>('check_media_unlock', {
+      onComplete,
+    }),
  checkMediaUnlockItem: (name: string) =>
-    __TAURI_INVOKE<UnlockItem>('check_media_unlock_item', { name }),
+    __TAURI_INVOKE<UnlockItem_Serialize>('check_media_unlock_item', { name }),
 }

 /* Types */
@@ -234,7 +190,20 @@ export type AutoProxy = {
  url: string
 }

-export type ClashInfo = {
+export type ClashInfo = ClashInfo_Serialize | ClashInfo_Deserialize
+
+export type ClashInfo_Deserialize = {
+  /**  clash core port */
+  mixed_port: number
+  socks_port: number
+  port: number
+  /**  same as `external-controller` */
+  server: string
+  /**  clash secret */
+  secret?: string | null
+}
+
+export type ClashInfo_Serialize = {
  /**  clash core port */
  mixed_port: number
  socks_port: number
@@ -252,16 +221,6 @@ export type CommandFailure =

 /**  Structured command failure returned to the frontend. */
 export type CommandFailure_Deserialize = {
-  /**  Stable frontend identifier, when classified. */
-  code: string | null
-  /**  Human-readable diagnostic detail. */
-  detail: string
-  /**  Requested operation when known by the command. */
-  operation: FailedOperation | null
-}
-
-/**  Structured command failure returned to the frontend. */
-export type CommandFailure_Serialize = {
  /**  Stable frontend identifier, when classified. */
  code?: string | null
  /**  Human-readable diagnostic detail. */
@@ -270,6 +229,16 @@ export type CommandFailure_Serialize = {
  operation?: FailedOperation | null
 }

+/**  Structured command failure returned to the frontend. */
+export type CommandFailure_Serialize = {
+  /**  Stable frontend identifier, when classified. */
+  code?: string
+  /**  Human-readable diagnostic detail. */
+  detail: string
+  /**  Requested operation when known by the command. */
+  operation?: FailedOperation
+}
+
 /**  Why the Core is not running, kept until a Core starts again. */
 export type CoreFailure =
  | { kind: 'startFailed'; detail: string }
@@ -290,7 +259,26 @@ export type DnsOverrideOutcome =
  | { status: 'confirmation_required'; source: string }

 /**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
-export type DownloadEvent =
+export type DownloadEvent = DownloadEvent_Serialize | DownloadEvent_Deserialize
+
+/**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
+export type DownloadEvent_Deserialize =
+  | {
+      event: 'Started'
+      data: {
+        contentLength?: number | null
+      }
+    }
+  | {
+      event: 'Progress'
+      data: {
+        chunkLength: number
+      }
+    }
+  | { event: 'Finished' }
+
+/**  Same wire shape as the updater plugin's JS `DownloadEvent`. */
+export type DownloadEvent_Serialize =
  | {
      event: 'Started'
      data: {
@@ -330,14 +318,27 @@ export type IProfiles_Serialize = {
 /**  ### `verge.yaml` schema */
 export type IVerge = IVerge_Serialize | IVerge_Deserialize

-export type IVergeTestItem = {
+export type IVergeTestItem =
+  | IVergeTestItem_Serialize
+  | IVergeTestItem_Deserialize
+
+export type IVergeTestItem_Deserialize = {
  uid?: string | null
  name?: string | null
  icon?: string | null
  url?: string | null
 }

-export type IVergeTheme = {
+export type IVergeTestItem_Serialize = {
+  uid: string | null
+  name: string | null
+  icon: string | null
+  url: string | null
+}
+
+export type IVergeTheme = IVergeTheme_Serialize | IVergeTheme_Deserialize
+
+export type IVergeTheme_Deserialize = {
  primary_color?: string | null
  secondary_color?: string | null
  primary_text?: string | null
@@ -350,6 +351,19 @@ export type IVergeTheme = {
  css_injection?: string | null
 }

+export type IVergeTheme_Serialize = {
+  primary_color: string | null
+  secondary_color: string | null
+  primary_text: string | null
+  secondary_text: string | null
+  info_color: string | null
+  error_color: string | null
+  warning_color: string | null
+  success_color: string | null
+  font_family: string | null
+  css_injection: string | null
+}
+
 /**  ### `verge.yaml` schema */
 export type IVerge_Deserialize = {
  /**  silent | error | warn | info | debug | trace */
@@ -392,7 +406,7 @@ export type IVerge_Deserialize = {
  proxy_auto_config?: boolean | null
  pac_file_content?: string | null
  proxy_host?: string | null
-  theme_setting?: IVergeTheme | null
+  theme_setting?: IVergeTheme_Deserialize | null
  web_ui_list?: string[] | null
  clash_core?: string | null
  /**  format: {func},{key} */
@@ -408,7 +422,7 @@ export type IVerge_Deserialize = {
  auto_delay_detection_interval_minutes?: number | null
  enable_builtin_enhanced?: boolean | null
  proxy_layout_column?: number | null
-  test_list?: IVergeTestItem[] | null
+  test_list?: IVergeTestItem_Deserialize[] | null
  /**  0: 不清理; 1: 1天；2: 7天; 3: 30天; 4: 90天 */
  auto_log_clean?: number | null
  enable_auto_backup_schedule?: boolean | null
@@ -457,13 +471,13 @@ export type IVerge_Serialize = {
  traffic_graph: boolean | null
  /**  show memory info (only for Clash Meta) */
  enable_memory_usage: boolean | null
-  enable_group_icon?: boolean | null
+  enable_group_icon?: boolean
  pause_render_traffic_stats_on_blur: boolean | null
-  common_tray_icon?: boolean | null
-  menu_icon?: string | null
-  menu_order?: string[] | null
-  proxy_group_tools_position?: string | null
-  notice_position?: string | null
+  common_tray_icon?: boolean
+  menu_icon?: string
+  menu_order?: string[]
+  proxy_group_tools_position?: string
+  notice_position?: string
  collapse_navbar: boolean | null
  sysproxy_tray_icon: boolean | null
  tun_tray_icon: boolean | null
@@ -482,11 +496,11 @@ export type IVerge_Serialize = {
  proxy_auto_config: boolean | null
  pac_file_content: string | null
  proxy_host: string | null
-  theme_setting: IVergeTheme | null
+  theme_setting: IVergeTheme_Serialize | null
  web_ui_list: string[] | null
-  clash_core?: string | null
+  clash_core?: string
  /**  format: {func},{key} */
-  hotkeys?: string[] | null
+  hotkeys?: string[]
  enable_global_hotkey: boolean | null
  home_cards: JsonValue | null
  auto_close_connection: boolean | null
@@ -498,7 +512,7 @@ export type IVerge_Serialize = {
  auto_delay_detection_interval_minutes: number | null
  enable_builtin_enhanced: boolean | null
  proxy_layout_column: number | null
-  test_list: IVergeTestItem[] | null
+  test_list: IVergeTestItem_Serialize[] | null
  /**  0: 不清理; 1: 1天；2: 7天; 3: 30天; 4: 90天 */
  auto_log_clean: number | null
  enable_auto_backup_schedule: boolean | null
@@ -510,10 +524,10 @@ export type IVerge_Serialize = {
  verge_socks_enabled: boolean | null
  verge_port: number | null
  verge_http_enabled: boolean | null
-  webdav_url?: string | null
-  webdav_username?: string | null
-  webdav_password?: string | null
-  tray_proxy_groups_display_mode?: string | null
+  webdav_url?: string
+  webdav_username?: string
+  webdav_password?: string
+  tray_proxy_groups_display_mode?: string
  tray_inline_outbound_modes: boolean | null
  enable_auto_light_weight_mode: boolean | null
  /**  自动进入轻量模式的延迟（分钟） */
@@ -573,7 +587,17 @@ export type LocalBackupFile = {
  content_length: number
 }

-export type NetworkInterfaceView = {
+export type NetworkInterfaceView =
+  | NetworkInterfaceView_Serialize
+  | NetworkInterfaceView_Deserialize
+
+export type NetworkInterfaceView_Deserialize = {
+  name: string
+  addr: InterfaceAddress[]
+  mac_addr?: string | null
+}
+
+export type NetworkInterfaceView_Serialize = {
  name: string
  addr: InterfaceAddress[]
  mac_addr: string | null
@@ -632,7 +656,20 @@ export type PendingFailure = {
  sequence: number
 }

-export type PlatformVergeFields = {
+export type PlatformVergeFields =
+  | PlatformVergeFields_Serialize
+  | PlatformVergeFields_Deserialize
+
+export type PlatformVergeFields_Deserialize = {
+  tray_icon?: string | null
+  verge_redir_port?: number | null
+  verge_redir_enabled?: boolean | null
+  verge_tproxy_port?: number | null
+  verge_tproxy_enabled?: boolean | null
+  enable_tray_speed?: boolean | null
+}
+
+export type PlatformVergeFields_Serialize = {
  tray_icon?: string | null
  verge_redir_port?: number | null
  verge_redir_enabled?: boolean | null
@@ -658,7 +695,7 @@ export type PrfItem_Deserialize = {
  file?: string | null
  desc?: string | null
  url?: string | null
-  selected?: PrfSelected[] | null
+  selected?: PrfSelected_Deserialize[] | null
  extra?: PrfExtra | null
  updated?: number | null
  option?: PrfOption_Deserialize | null
@@ -671,13 +708,13 @@ export type PrfItem_Serialize = {
  type: string | null
  name: string | null
  file: string | null
-  desc?: string | null
-  url?: string | null
-  selected?: PrfSelected[] | null
-  extra?: PrfExtra | null
+  desc?: string
+  url?: string
+  selected?: PrfSelected_Serialize[]
+  extra?: PrfExtra
  updated: number | null
-  option?: PrfOption_Serialize | null
-  home?: string | null
+  option?: PrfOption_Serialize
+  home?: string
 }

 export type PrfOption = PrfOption_Serialize | PrfOption_Deserialize
@@ -703,18 +740,18 @@ export type PrfOption_Deserialize = {
 }

 export type PrfOption_Serialize = {
-  user_agent?: string | null
-  with_proxy?: boolean | null
-  self_proxy?: boolean | null
-  update_interval?: number | null
+  user_agent?: string
+  with_proxy?: boolean
+  self_proxy?: boolean
+  update_interval?: number
  /**
   *  HTTP request timeout in seconds
   *  default is 60 seconds
   */
-  timeout_seconds?: number | null
+  timeout_seconds?: number
  /**  default is `false` */
-  danger_accept_invalid_certs?: boolean | null
-  allow_auto_update?: boolean | null
+  danger_accept_invalid_certs?: boolean
+  allow_auto_update?: boolean
  merge: string | null
  script: string | null
  rules: string | null
@@ -722,11 +759,18 @@ export type PrfOption_Serialize = {
  groups: string | null
 }

-export type PrfSelected = {
+export type PrfSelected = PrfSelected_Serialize | PrfSelected_Deserialize
+
+export type PrfSelected_Deserialize = {
  name?: string | null
  now?: string | null
 }

+export type PrfSelected_Serialize = {
+  name: string | null
+  now: string | null
+}
+
 export type ProfileCreate = ProfileCreate_Serialize | ProfileCreate_Deserialize

 export type ProfileCreate_Deserialize = {
@@ -756,7 +800,7 @@ export type ProfileDnsSettings_Deserialize = {

 export type ProfileDnsSettings_Serialize = {
  enabled: boolean
-  confirmation?: string | null
+  confirmation?: string
 }

 export type ProfilePatch = ProfilePatch_Serialize | ProfilePatch_Deserialize
@@ -767,7 +811,7 @@ export type ProfilePatch_Deserialize = {
  desc?: string | null
  file?: string | null
  url?: string | null
-  selected?: PrfSelected[] | null
+  selected?: PrfSelected_Deserialize[] | null
  extra?: PrfExtra | null
  updated?: number | null
  option?: PrfOption_Deserialize | null
@@ -779,16 +823,24 @@ export type ProfilePatch_Serialize = {
  desc: string | null
  file: string | null
  url: string | null
-  selected: PrfSelected[] | null
+  selected: PrfSelected_Serialize[] | null
  extra: PrfExtra | null
  updated: number | null
  option: PrfOption_Serialize | null
 }

-export type ProfileSelection = {
+export type ProfileSelection =
+  | ProfileSelection_Serialize
+  | ProfileSelection_Deserialize
+
+export type ProfileSelection_Deserialize = {
  current?: string | null
 }

+export type ProfileSelection_Serialize = {
+  current: string | null
+}
+
 export type ProfileUpdatePayload = {
  uid: string
 }
@@ -808,11 +860,11 @@ export type ProxyGroupView =
 export type ProxyGroupView_Deserialize = {
  name: string
  type: string
-  now: string | null
-  fixed: string | null
-  hidden: boolean | null
-  icon: string | null
-  testUrl: string | null
+  now?: string | null
+  fixed?: string | null
+  hidden?: boolean | null
+  icon?: string | null
+  testUrl?: string | null
  history: DelayHistory[]
  members: ProxyMemberRef[]
 } & ProxyCapabilities
@@ -820,11 +872,11 @@ export type ProxyGroupView_Deserialize = {
 export type ProxyGroupView_Serialize = {
  name: string
  type: string
-  now?: string | null
-  fixed?: string | null
-  hidden?: boolean | null
-  icon?: string | null
-  testUrl?: string | null
+  now?: string
+  fixed?: string
+  hidden?: boolean
+  icon?: string
+  testUrl?: string
  history: DelayHistory[]
  members: ProxyMemberRef[]
 } & ProxyCapabilities
@@ -850,10 +902,10 @@ export type ProxyNodeView_Deserialize = {
  name: string
  type: string
  history: DelayHistory[]
-  id: string | null
-  hidden: boolean | null
-  icon: string | null
-  testUrl: string | null
+  id?: string | null
+  hidden?: boolean | null
+  icon?: string | null
+  testUrl?: string | null
  source: ProxyNodeSource
 } & ProxyCapabilities

@@ -862,10 +914,10 @@ export type ProxyNodeView_Serialize = {
  name: string
  type: string
  history: DelayHistory[]
-  id?: string | null
-  hidden?: boolean | null
-  icon?: string | null
-  testUrl?: string | null
+  id?: string
+  hidden?: boolean
+  icon?: string
+  testUrl?: string
  source: ProxyNodeSource
 } & ProxyCapabilities

@@ -886,16 +938,16 @@ export type ProxyProviderView =
 export type ProxyProviderView_Deserialize = {
  name: string
  vehicleType: ProxyProviderVehicleType
-  updatedAt: string | null
-  subscriptionInfo: ProxySubscriptionInfo | null
+  updatedAt?: string | null
+  subscriptionInfo?: ProxySubscriptionInfo | null
  proxyRecordIds: string[]
 }

 export type ProxyProviderView_Serialize = {
  name: string
  vehicleType: ProxyProviderVehicleType
-  updatedAt?: string | null
-  subscriptionInfo?: ProxySubscriptionInfo | null
+  updatedAt?: string
+  subscriptionInfo?: ProxySubscriptionInfo
  proxyRecordIds: string[]
 }

@@ -916,8 +968,8 @@ export type ProxyViewV1_Deserialize = {
  schemaVersion: number
  orderSource: ProxyViewOrderSource
  providerState: ProxyViewProviderState
-  global: ProxyGroupView_Deserialize | null
-  direct: string | null
+  global?: ProxyGroupView_Deserialize | null
+  direct?: string | null
  groups: ProxyGroupView_Deserialize[]
  records: { [key in string]: ProxyNodeView_Deserialize }
  standalone: string[]
@@ -936,7 +988,22 @@ export type ProxyViewV1_Serialize = {
  providers: ProxyProviderView_Serialize[]
 }

-export type RunStateView = {
+export type RunStateView = RunStateView_Serialize | RunStateView_Deserialize
+
+export type RunStateView_Deserialize = {
+  mode: RunningMode
+  service: ServiceHealthKind
+  serviceUnavailableReason?: string | null
+  pendingAction?: PendingAction | null
+  sidecarAllowed: boolean
+  isAdmin: boolean
+  opInFlight: boolean
+  serviceUsable: boolean
+  tunCapable: boolean
+  serviceNeedsAttention: boolean
+}
+
+export type RunStateView_Serialize = {
  mode: RunningMode
  service: ServiceHealthKind
  serviceUnavailableReason: string | null
@@ -975,7 +1042,18 @@ export type ServiceInstallOutcome =
  | { status: 'sidecar'; reason: string }

 /**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
-export type SidecarFailureSnapshot = {
+export type SidecarFailureSnapshot =
+  | SidecarFailureSnapshot_Serialize
+  | SidecarFailureSnapshot_Deserialize
+
+/**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
+export type SidecarFailureSnapshot_Deserialize = {
+  revision: number
+  detail?: string | null
+}
+
+/**  A removal has a revision too, so a delayed read cannot restore a resolved failure. */
+export type SidecarFailureSnapshot_Serialize = {
  revision: number
  detail: string | null
 }
@@ -996,7 +1074,16 @@ export type ToggleableProxyPort = {
  port: number
 }

-export type UnlockItem = {
+export type UnlockItem = UnlockItem_Serialize | UnlockItem_Deserialize
+
+export type UnlockItem_Deserialize = {
+  name: string
+  status: string
+  region?: string | null
+  check_time?: string | null
+}
+
+export type UnlockItem_Serialize = {
  name: string
  status: string
  region: string | null
@@ -1022,7 +1109,11 @@ export type ValidationOutcome =

 export type ValidationSkipReason = 'exiting' | 'debounced'

-export type VergeEventPayloads = {
+export type VergeEventPayloads =
+  | VergeEventPayloads_Serialize
+  | VergeEventPayloads_Deserialize
+
+export type VergeEventPayloads_Deserialize = {
  'verge://refresh-clash-config': null
  'verge://refresh-verge-config': null
  'verge://refresh-profiles': null
@@ -1032,7 +1123,21 @@ export type VergeEventPayloads = {
  'verge://timer-updated': string
  'profile-update-started': ProfileUpdatePayload
  'profile-update-completed': ProfileUpdatePayload
-  'verge://run-state-changed': RunStateView
+  'verge://run-state-changed': RunStateView_Deserialize
+  'verge://pending-failures-changed': null
+}
+
+export type VergeEventPayloads_Serialize = {
+  'verge://refresh-clash-config': null
+  'verge://refresh-verge-config': null
+  'verge://refresh-profiles': null
+  'verge://refresh-proxy-config': null
+  'verge://notice-message': [NoticeStatus, string]
+  'profile-changed': string
+  'verge://timer-updated': string
+  'profile-update-started': ProfileUpdatePayload
+  'profile-update-completed': ProfileUpdatePayload
+  'verge://run-state-changed': RunStateView_Serialize
  'verge://pending-failures-changed': null
 }

@@ -19,7 +19,7 @@ import type {

 export type {
  RunningMode,
-  RunStateView as RunState,
+  RunStateView_Serialize as RunState,
  FailedOperation,
  PendingFailure,
  SidecarFailureSnapshot,
@@ -1 +1,4 @@
-export type { NoticeStatus, VergeEventPayloads } from './bindings'
+export type {
+  NoticeStatus,
+  VergeEventPayloads_Serialize as VergeEventPayloads,
+} from './bindings'
Author	SHA1	Message	Date
copilot-swe-agent[bot]	765ef50ac7	fix(ci): resolve Rust dependency update failures	2026-11-03 13:19:09 +00:00
renovate[bot]	d8e5e58f8f	chore(deps): update cargo dependencies	2026-11-02 05:31:20 +00:00
Tunglies	067a9f7cad	fix(webdav): allow clearing saved configuration Close #8495	2026-11-02 03:26:36 +08:00