[GlobalTechInfo]

A version bump and nothing else, so the tag can point at exactly what has been merged and tested.

What v1.4.0 contains

Features

• SOCKS5 UDP ASSOCIATE — Telegram, QUIC and UDP DNS on the SOCKS5 port and through REALITY. One ephemeral socket per destination, lifetime tied to the TCP control connection. 64 destinations per association, because the TCP connection limit cannot see them.
• MTProto for Telegram — its own protocol on $MTPROTO_BIND (default :8443), with per-phone secrets generated and managed in the dashboard. Revoking a phone takes effect immediately.
• Live VLESS client management — add, disable and revoke REALITY UUIDs from the dashboard; xray is re-rendered, validated with xray run --test and swapped in place. An add applies in 0.08s.
• Per-IP rate limiting, bandwidth pacing and environment-over-database precedence — the documentation had promised these before the code did them.

Fixes

• Passwords are stored as PBKDF2-HMAC-SHA256 hashes, not verbatim. Accounts created earlier keep working and are rewritten on their next login.
• SQLite pragmas (WAL, busy timeout, foreign keys) were being parsed and then ignored.
• DELETE /api/users/:id leaves no orphaned user_connections rows.

Operations

• backup / restore, with VACUUM INTO snapshots, optional AES-256-GCM encryption, a manifest with checksums, and a PID-file guard against restoring under a running server.
• Build-only Docker CI with xray installed and smoke-tested in the image. Nothing is published; build your own.

Upgrade notes

• No action needed. Existing databases are migrated in place (CREATE TABLE IF NOT EXISTS), and REALITY_CLIENT_IDS set in the environment keeps pinning the client list exactly as before.
• If you use REALITY_CLIENT_IDS, the dashboard will say the list is pinned and refuse edits, rather than accepting changes that would quietly do nothing.
• First start with MTPROTO_ENABLED=true generates one secret and logs it.

Verified before tagging: gofmt and go vet clean, full suite green with and without xray present, -race clean, and the Docker workflow's build-and-smoke job green on the merged feature PRs.

Once this is merged I will tag v1.4.0 and publish the release notes.

Summary by CodeRabbit

• Updates
  • The application now reports version 1.4.0 instead of 1.3.1, including in the version command.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ef02157f-f6dc-4009-96d0-6bf072508e99

📥 Commits

Reviewing files that changed from the base of the PR and between d61d54f and 8792230.

📒 Files selected for processing: 1

• main.go

+-----------------------------------------------------+
| Making Elsa proud by letting it go...to production. |
+-----------------------------------------------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}