What's Changed

This is a test release which includes a fix for defguard group not being assigned to the user when istalling DEB/RPM through a GUI tool (Ubuntu App Center etc).
Related issue: #755

Other Changes

• Update repositories on full release/pre-release by @jakub-tldr in #754

Full Changelog: v1.6.3...v1.6.4-test2

This is a patch for the major 1.6 release.

MacOS Desktop Client is undergoing Apple Store review.

What's Changed

Other Changes

• Detailed view fix by @jakub-tldr in #749
• fix Nix package dependencies by @wojcik91 in #747
• Remove state change before Instance removal by @jakub-tldr in #750
• Disable APT repository signing/uploads by @jakub-tldr in #752

Full Changelog: v1.6.2...v1.6.3

This is a patch for the major 1.6 release.

MacOS Desktop Client is undergoing Apple Store review.

What's Changed

• DG CLI Ubuntu 22.04 LTS workflow by @jakub-tldr in #726
• Change create_dir to create_dir_all for default config directory creation by @hnnsly in #730
• Added third party license info by @kchudy in #732
• fix: location traffic toggle by @filipslezaklab in #735
• Remove silly logs from VPN extension by @moubctez in #736
• Bug fixes by @moubctez in #739

New Contributors

• @hnnsly made their first contribution in #730

Full Changelog: v1.6.1...v1.6.2

This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:

🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.

🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.

🪟 Windows Desktop Client has finally an MSI package - with native Wireguard networking based on WireguardNT. Please read the migration docs.

 MacOS Desktop Client introduces native Swift/macOS VPN implementation and is published in Apple macOS Store officially. ⚠️ Migration is required to connect to the currently configured VPN locations. Please read the migration blog post.

🖥️ All desktop Clients now have a new MTU setting available.

🚦 Introducing Client Traffic Policy Selection. This lets administrators define whether VPN clients can choose their routing mode or are forced to use a specific traffic policy, such as routing all traffic through the VPN or only predefined traffic.

⚠️ Make sure your environment is up to date to use all the features mentioned. Verify this in our feature compatibility matrix.

What's Changed

• Release 1.5 merger by @wojcik91 in #577
• Fix build and cargo dependencies by @moubctez in #580
• Fixes pentest issue DG25-28 from 2025-09-02 by @j-chmielewski in #578
• Fixes pentest issue DG25-29 from 2025-09-02 by @j-chmielewski in #582
• Merge main into dev after 1.5.1 release by @j-chmielewski in #592
• Create SBOM files by @j-chmielewski in #593
• CI: scan code with trivy by @j-chmielewski in #594
• Fix RPM package by @moubctez in #595
• Periodic sbom regeneration by @j-chmielewski in #599
• Merge SBOM CI pipelines into main by @j-chmielewski in #600
• Merge release/1.5.2 into main by @wojcik91 in #605
• Fix pnpm build by @moubctez in #606
• BoringTun by @moubctez in #597
• share rust toolchain between nix shell & package by @wojcik91 in #610
• Merge main -> dev after 1.5.2 release by @wojcik91 in #609
• new job for building .deb for ubuntu 22.04 /debian 12 by @jakub-tldr in #611
• fix nix setup for boringtun repo by @wojcik91 in #613
• update aur packages workflow by @jakub-tldr in #614
• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• undo unnecessary deletion by @jakub-tldr in #620
• Run AUR workflow only on full release by @jakub-tldr in #619
• APT uploading/signing workflow by @jakub-tldr in #622
• Direct WireGuard management on Windows using wireguard-nt by @j-chmielewski in #626
• client auto-provisioning by @wojcik91 in #627
• Build and sign Defguard client without wireguard binary by @j-chmielewski in #629
• List whole directory by @jakub-tldr in #631
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• refresh tray icon after instance deletion by @jakub-tldr in #639
• OpenID modal refresh by @jakub-tldr in #640
• add Windows provisioning script to MSI installer by @wojcik91 in #625
• Service locations on Windows (Pre-logon, Always-on) by @t-aleksander in #636
• add missing DEB & RPM dependencies by @wojcik91 in #642
• Fix issues related to service locations by @t-aleksander in #643
• Fix issues related to service locations by @t-aleksander in #644
• Add missing sqlx query by @t-aleksander in #646
• Fixes pentest issue DG25-27 from 2025-09-02 by @j-chmielewski in #641
• Add ubuntu 22.04 apt upload pipeline by @jakub-tldr in #645
• Merge main branch into dev before 1.6-alpha release by @j-chmielewski in #649
• Don't log enrollment token by @j-chmielewski in #650
• add admin helper script to generate enrollment tokens by @wojcik91 in #653
• Swift plugin by @moubctez in #630
• Fix Windows build by @moubctez in #655
• fix(CI): build missing service binary for MSI by @wojcik91 in #656
• Basic client version reporting by @t-aleksander in #658
• add admin helper script for generating enrollment tokens in Entra environments by @wojcik91 in #665
• migrate trivyignore format by @wojcik91 in #666
• update helper provisioning scripts to include optional token expiration time by @wojcik91 in #669
• Add global MTU setting by @j-chmielewski in #668
• fix MFA modal error handling by @wojcik91 in #670
• macOS: switch to objc2 by @moubctez in #659
• Workflow: use Tauri action by @moubctez in #673
• Restore MTU by @moubctez in #674
• fix DNS error handling by @wojcik91 in #676
• macOS tunnel statistics by @moubctez in #678
• Fix macOS build after merge by @moubctez in #679
• Implement "force all traffic" enterprise setting by @j-chmielewski in #672
• Cleaner error message by @jakub-tldr in #680
• Fix resolvconf on debian 13 by @t-aleksander in #681
• Sync locations and tunnel with system settings by @moubctez in #684
• Cleanup for Windows by @moubctez in #685
• Backport debian 13 DNS fix by @t-aleksander in #687
• Fix tauri pipelines by @t-aleksander in #688
• Bump version to 1.5.3 by @t-aleksander in #689
• update aur repo to 1.5.2 by @jakub-tldr in #682
• [MacOS] Synchronizing state with system VPN status, logging by @t-aleksander in #694
• Fix "object not found" during disconnect after system settings connect, other small fixes by @t-aleksander in #697
• [MacOS] Trigger MFA if needed when connecting via system settings by @t-aleksander in #700
• macOS: populate Help menu by @moubctez in #704
• use published wireguard-rs by @j-chmielewski in #706
• Silence error on cancelling mobile MFA by @moubctez in #709
• Clean Apple API functions by @moubctez in #711
• Use correct logging filename by @moubctez in #714
• macOS: set MTU on config sync by @moubctez in #715
• fix submodules handling in Nix package by @wojcik91 in #716

Full Changelog: v1.5.1...v1.6.1

⚠️⚠️ This is a pre-release ⚠️⚠️

This is a pre-release addressing issues found in the stable version of Defguard Client related to DNS on Debian 13.

What's Changed

Other Changes

• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• Backport debian 13 DNS fix by @t-aleksander in #687

Full Changelog: v1.5.1...v1.5.3-rc1

⚠️⚠️⚠️⚠️⚠️ This is an alpha release which is not compatible with 1.5.x ⚠️⚠️⚠️⚠️⚠️⚠️

What's Changed

This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:

🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.

🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.

🪟 Windows Desktop Client has finally an MSI package - see the client 1.6 alpha releases with native Wireguard networking based on WireguardNT. Please read the migration docs.

 MacOS Desktop Client introduces native Swift/macOS VPN implementation and will soon be published in Apple macOS Store officially. TestFlight URL: https://testflight.apple.com/join/d4MvaBgw.

🖥️ All desktop Clients now have a new MTU setting available.

Other Changes

• Release 1.5 merger by @wojcik91 in #577
• Fix build and cargo dependencies by @moubctez in #580
• Fixes pentest issue DG25-28 from 2025-09-02 by @j-chmielewski in #578
• Fixes pentest issue DG25-29 from 2025-09-02 by @j-chmielewski in #582
• Merge main into dev after 1.5.1 release by @j-chmielewski in #592
• Create SBOM files by @j-chmielewski in #593
• CI: scan code with trivy by @j-chmielewski in #594
• Fix RPM package by @moubctez in #595
• Periodic sbom regeneration by @j-chmielewski in #599
• Merge SBOM CI pipelines into main by @j-chmielewski in #600
• Merge release/1.5.2 into main by @wojcik91 in #605
• Fix pnpm build by @moubctez in #606
• BoringTun by @moubctez in #597
• share rust toolchain between nix shell & package by @wojcik91 in #610
• Merge main -> dev after 1.5.2 release by @wojcik91 in #609
• new job for building .deb for ubuntu 22.04 /debian 12 by @jakub-tldr in #611
• fix nix setup for boringtun repo by @wojcik91 in #613
• update aur packages workflow by @jakub-tldr in #614
• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• undo unnecessary deletion by @jakub-tldr in #620
• Run AUR workflow only on full release by @jakub-tldr in #619
• APT uploading/signing workflow by @jakub-tldr in #622
• Direct WireGuard management on Windows using wireguard-nt by @j-chmielewski in #626
• client auto-provisioning by @wojcik91 in #627
• Build and sign Defguard client without wireguard binary by @j-chmielewski in #629
• List whole directory by @jakub-tldr in #631
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• refresh tray icon after instance deletion by @jakub-tldr in #639
• OpenID modal refresh by @jakub-tldr in #640
• add Windows provisioning script to MSI installer by @wojcik91 in #625
• Service locations on Windows (Pre-logon, Always-on) by @t-aleksander in #636
• add missing DEB & RPM dependencies by @wojcik91 in #642
• Fix issues related to service locations by @t-aleksander in #643
• Fix issues related to service locations by @t-aleksander in #644
• Add missing sqlx query by @t-aleksander in #646
• Fixes pentest issue DG25-27 from 2025-09-02 by @j-chmielewski in #641
• Add ubuntu 22.04 apt upload pipeline by @jakub-tldr in #645
• Merge main branch into dev before 1.6-alpha release by @j-chmielewski in #649
• Don't log enrollment token by @j-chmielewski in #650
• add admin helper script to generate enrollment tokens by @wojcik91 in #653
• Swift plugin by @moubctez in #630
• Basic client version reporting by @t-aleksander in #658
• add admin helper script for generating enrollment tokens in Entra environments by @wojcik91 in #665
• update helper provisioning scripts to include optional token expiration time by @wojcik91 in #669
• Add global MTU setting by @j-chmielewski in #668
• fix MFA modal error handling by @wojcik91 in #670
• macOS: switch to objc2 by @moubctez in #659
• Workflow: use Tauri action by @moubctez in #673
• Restore MTU by @moubctez in #674
• fix DNS error handling by @wojcik91 in #676
• macOS tunnel statistics by @moubctez in #678
• Fix macOS build after merge by @moubctez in #679
• Implement "force all traffic" enterprise setting by @j-chmielewski in #672
• Cleaner error message by @jakub-tldr in #680
• Fix resolvconf on debian 13 by @t-aleksander in #681
• Sync locations and tunnel with system settings by @moubctez in #684
• Cleanup for Windows by @moubctez in #685

Full Changelog: v1.5.2...v1.6.0-alpha5

⚠️⚠️⚠️⚠️⚠️ This is an alpha release which is not compatible with 1.5.x ⚠️⚠️⚠️⚠️⚠️⚠️

What's Changed

This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:

🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.

🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.

🪟 Windows Desktop Client has finally an MSI package - see the client 1.6 alpha releases with native Wireguard networking based on WireguardNT. Please read the migration docs.

 MacOS Desktop Client introduces native Swift/macOS VPN implementation and will soon be published in Apple macOS Store officially. TestFlight URL: https://testflight.apple.com/join/d4MvaBgw.

🖥️ All desktop Clients now have a new MTU setting available.

• Basic client version reporting by @t-aleksander in #658
• add admin helper script for generating enrollment tokens in Entra environments by @wojcik91 in #665
• update helper provisioning scripts to include optional token expiration time by @wojcik91 in #669
• Add global MTU setting by @j-chmielewski in #668

Full Changelog: v1.6.0-alpha3...v1.6.0-alpha4

⚠️⚠️⚠️⚠️⚠️ This is an alpha that will break current client ⚠️⚠️⚠️⚠️⚠️

What's Changed

Other Changes

• Release 1.5 merger by @wojcik91 in #577
• Fix build and cargo dependencies by @moubctez in #580
• Fixes pentest issue DG25-28 from 2025-09-02 by @j-chmielewski in #578
• Fixes pentest issue DG25-29 from 2025-09-02 by @j-chmielewski in #582
• Merge main into dev after 1.5.1 release by @j-chmielewski in #592
• Create SBOM files by @j-chmielewski in #593
• CI: scan code with trivy by @j-chmielewski in #594
• Fix RPM package by @moubctez in #595
• Periodic sbom regeneration by @j-chmielewski in #599
• Merge SBOM CI pipelines into main by @j-chmielewski in #600
• Merge release/1.5.2 into main by @wojcik91 in #605
• Fix pnpm build by @moubctez in #606
• BoringTun by @moubctez in #597
• share rust toolchain between nix shell & package by @wojcik91 in #610
• Merge main -> dev after 1.5.2 release by @wojcik91 in #609
• new job for building .deb for ubuntu 22.04 /debian 12 by @jakub-tldr in #611
• fix nix setup for boringtun repo by @wojcik91 in #613
• update aur packages workflow by @jakub-tldr in #614
• Setup ctrl+q keyboard shortcut by @j-chmielewski in #618
• undo unnecessary deletion by @jakub-tldr in #620
• Run AUR workflow only on full release by @jakub-tldr in #619
• APT uploading/signing workflow by @jakub-tldr in #622
• Direct WireGuard management on Windows using wireguard-nt by @j-chmielewski in #626
• client auto-provisioning by @wojcik91 in #627
• Build and sign Defguard client without wireguard binary by @j-chmielewski in #629
• List whole directory by @jakub-tldr in #631
• Fix ctrl+q keyboard shortcut by @j-chmielewski in #632
• refresh tray icon after instance deletion by @jakub-tldr in #639
• OpenID modal refresh by @jakub-tldr in #640
• add Windows provisioning script to MSI installer by @wojcik91 in #625
• Service locations on Windows (Pre-logon, Always-on) by @t-aleksander in #636
• add missing DEB & RPM dependencies by @wojcik91 in #642
• Fix issues related to service locations by @t-aleksander in #643
• Fix issues related to service locations by @t-aleksander in #644
• Add missing sqlx query by @t-aleksander in #646
• Fixes pentest issue DG25-27 from 2025-09-02 by @j-chmielewski in #641
• Add ubuntu 22.04 apt upload pipeline by @jakub-tldr in #645
• Merge main branch into dev before 1.6-alpha release by @j-chmielewski in #649
• Don't log enrollment token by @j-chmielewski in #650
• add admin helper script to generate enrollment tokens by @wojcik91 in #653
• Swift plugin by @moubctez in #630

New Contributors

• @jakub-tldr made their first contribution in #611

Full Changelog: v1.5.1...v1.6.0-alpha3

⚠️⚠️⚠️⚠️⚠️ This is a TEST build with fixes for dual-stack statistics ⚠️⚠️⚠️⚠️⚠️

⚠️⚠️⚠️⚠️⚠️ This is a TEST build of Windows MSI with new Wireguard low level communication for windows client ⚠️⚠️⚠️⚠️⚠️