Shadowrocket

- feat(protocol): add Sudoku proxy protocol support and optimize data-path forwarding to reduce memory allocations and buffer copying
- feat(dns): support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules
- feat(tailscale): migrate login to TS2021, support subnet routing and exit nodes, and introduce low-power tunnel suspension on demand
- feat(protocol): support Clash SSH/packetaddr subscription imports
- feat(macos): add menu bar routing controls and quick server configurations for macOS
- feat(group): add an independent ping-based auto-sort option for policy groups
- perf(transport): handle KCP backpressure, harden WireGuard/Hysteria packet security, and restore full upload throughput on QUIC transports
- fix(vpn): prevent tunnel startup hangs, preserve local device connectivity, and prevent stale speedtests from resetting VPN states
- fix(dns): route host resolutions and QUIC endpoints through tunnel resolver, and reuse H2 addresses for H3 upgrades
- fix(tailscale): advertise disco keys for direct paths, respect custom DERP TLS verification, and fix battery drain when VPN is disconnected
- fix(rule): fix remote rule set refreshes, preserve quoted rewrite tokens during parsing/export, and guard compiled policy group updates
- fix(system): support WebKit scoped globals and fetch polyfills in scripts, and apply tombstone-based iCloud manifest to prevent configuration rollbacks
- fix(system): prevent WKWebView/JavaScriptCore teardown crashes and limit proxy stream memory growth to prevent OOM

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.