v1.1.0

⛰️ Features

• (iroh) Add metrics for relay connections (#4477) - (fc1fc21)
• (iroh-relay, iroh) Inform clients when they are rate-limited and warn log in iroh (#4455) - (e68dbda)

🐛 Bug Fixes

• (iroh) Keep answering priority messages during relay reconnect backoff delay (#4444) - (0458319)
• (iroh) Route net_report HTTP probes through the configured proxy (#4463) - (de24dae)
• (iroh) Drain relay tasks with join_next instead of join_all (#4460) - (09a0aca)
• (iroh-dns-server) Enable TCP keepalive on HTTP listeners (#4462) - (735958f)
• Bind iroh-dns-server to both IPv4 and IPv6 (#4432) - (bbc82b6)
• [breaking] Fix serialization of CustomAddr so that the data serializes the same as a Vec (#4465) - (4706ec9)
• Use random mapped addrs instead of a counter. (#4469) - (a05c9c4)

🚜 Refactor

• Don't send SNI (#4473) - (6d7f68c)

📚 Documentation

• Explain read_to_end termination (#4391) - (94835be)

🧪 Testing

• (iroh) Update patchbay to 0.7.0 (#4445) - (7d8c9bf)
• (iroh) Disable flaky patchbay test for now (#4449) - (d27d430)
• (iroh) Add patchbay tests for relay connectivity (#4434) - (8455111)

⚙️ Miscellaneous Tasks

• ()* Update noq and net-tools dependencies (#4487) - (1960e73)
• (ci) Pin sccache to 0.16 on windows due to cli len limit (#4456) - (0438766)
• (iroh-dns-server) Replace mainline with n0-mainline and update lru (#4470) - (82eed32)
• (secruity) Hardening + lock files + dependabot cooldown (#4480) - (89ed3bf)
• Run daily flaky CI even 2h earlier (#4431) - (e080db7)

v1.0.3

1.0.3 - 2026-07-20

🐛 Bug Fixes

• (ci) Move android test back to self hosted nodes (#4413) - (5e994a7)
• (iroh) Error when connecting with an empty ALPN (#4427) - (cc876c7)
• Add pkarr resolver to n0 preset (#4412) - (3e1e4b7)
• Remove vergen use from build.rs files (#4426) - (1795b93)

🚜 Refactor

• (iroh) Reduce warn logs (#4378) - (9f951b2)

📚 Documentation

• (iroh-relay) System deps and build command (#4385) - (403af3c)

⚙️ Miscellaneous Tasks

• (ci) Make sure android cleans up after itself (#4421) - (c717c70)
• Bump crossbeam-epoch for invalid pointer dereference (#4402) - (908ddf5)
• Fixes for clippy from rust 1.97 (#4404) - (8b097b2)
• Update semver checks for 1.0 stability (#4401) - (5817271)
• Allow GA releases of curve25519-dalek and ed25519-dalek (#4416) - (57fb5c2)
• Bump cfg_aliases (#4422) - (4e0a820)
• Run daily jobs earlier & run patchbay in merge queue (#4425) - (b8c5759)
• Update to noq 1.1.0 - (e84fe96)

v1.0.2

⛰️ Features

• (iroh-relay) Allow updating the per-client rate limit live (#4381) - (c23446c)

🐛 Bug Fixes

• (iroh) Receive transport lanes fairness counter issue (#4384) - (8e7819a)
• (iroh-dns-server) DNS write benchmark measurement (#4382) - (9541a6d)
• (iroh-relay) Improve relay protocol proptests & properly handle invalid messages (#4389) - (22cac74)

🧪 Testing

• (iroh) Regression test for transient Windows recv errors (#4348) - (d2a075f)

⚙️ Miscellaneous Tasks

• Add release configuration for generating the changelog - (ead46e5)
• Remove extensive breaking changes instructions (#4380) - (82b0792)

v1.0.1

🐛 Bug Fixes

• (docs) Fix keep-alive docs (#4352) - (255a939)
• (iroh) Add missing item for backwards compatibility (#4346) - (3b6dbd6)
• (logging) Do not use span levels higher than info (#4375) - (fbfffe6)
• (tests) Longer timeout to avoid flakyness (#4376) - (e8fd487)

🚜 Refactor

• (iroh-dns) Use fallback nameservers if no JNI context is initialized (#4371) - (4c8e1a1)

📚 Documentation

• (iroh) Improve description of QUIC streams (#4368) - (16ce16e)
• (iroh-dns-server) Fix link to production config file (#4353) - (777169a)
• (portmapping) Add more context around portmapping config in docs (#4351) - (4c1194d)
• Update license links to HTTPS (#4365) - (80548ce)

🧪 Testing

• (iroh) Test holepunching with 16 interfaces (#4336) - (ff2f101)

⚙️ Miscellaneous Tasks

• (ci) Route Windows jobs to Blacksmith overflow (#4357) - (75d1f72)
• Update PR template to also ask for humans (#4367) - (b4ec78e)
• Fix semver package list (#4370) - (328ec77)
• Update deps to noq 1.0.1 and net-tools 0.19.1 (#4379) - (3b422bb)

v1.0.0 - Dial keys, not IPs

⛰️ Features

• (iroh-relay) [breaking] Allow setting a custom ServerCertVerifier and rename CaRootsConfig to CaTlsConfig (#4300) - (b1e91e3)
• (iroh-relay) Add Bearer token access control without an external service (#4326) - (400264e)
• (iroh-relay) Allow multiple hostnames with Let's encrypt TLS (#4337) - (9afd2bc)
• Allow configuring NetReport (#4020) - (6406e07)
• Update relay urls to 1.0 stable (#4341) - (8e25ecb)
• [breaking] Update to 1.0 dependencies (#4343) - (b193191)

🐛 Bug Fixes

• (iroh) Correctly abandon paths when new are opened with worse RTT (#4296) - (295a715)
• (iroh) Don't kill noq endpoint on first transport recv error (#4314) - (0a5ce75)
• (iroh) Add global address validation token store (#4317) - (ba81a72)
• (iroh) Add missing export for unstable-custom-transport and improve docs (#4335) - (5791244)
• (iroh-dns) Use portable_atomic::AtomicU64 for 32-bit targets (#4320) - (1903740)
• (iroh-relay) Connect IPv4 and IPv6 concurrently (happy eyeballs) (#4299) - (bab6a43)
• Fix condition for retry warning. (#4307) - (64b9316)

🚜 Refactor

• (iroh) Use n0_future::MaybeFuture instead of own version (#4310) - (07f1d1a)
• (iroh) Minor cleanups to reqwest setup (#4311) - (3cbc1a6)
• (iroh) Improve tracing logs (#4313) - (9a79782)
• (iroh) Don't log at warn level if the address lookup isn't configured. (#4318) - (94f4b2f)
• (iroh) Gate net_report API behind unstable-net-report feature (#4338) - (7e95ae7)

📚 Documentation

• (iroh) Improve readme (#4329) - (710d03a)
• General cleanup and fixes (#4328) - (01e74bc)

🧪 Testing

• Mark a patchbay test as flaky (#4322) - (a24e6a7)

⚙️ Miscellaneous Tasks

• (iroh) Update to latest noq main (#4333) - (2f41f40)
• Update check-external-types (#4323) - (95111f0)
• Update the issue templates a little (#4340) - (a134dd8)
• Use install-action instead of binstall directly (#4342) - (0e7e976)

Deps

• Update ed25519-dalek and curve25519-dalek (#4324) - (33a92f1)

v1.0.0-rc.1 - The last one

⛰️ Features

• (iroh) [breaking] Configurable path selection (#4232) - (70751de)
• (iroh) Noq patch to support holepunching when server is behind a hard NAT (#4254) - (b8a5968)
• (iroh-relay) Expose Bucket rate-limit primitive (#4242) - (f8cd43c)
• [breaking] Update to noq@1.0.0-rc.1 (#4287) - (502b579)

🐛 Bug Fixes

• (ci) Force non-PIE crt1.o for static musl release builds (#4258) - (ec7b9e3)
• (iroh) Don't stop the RemoteStateActor if there are pending ResolveRemote requests (#4271) - (b229f57)
• (iroh) Fix race condition in the remote map that can lead to double-spawned RemoteStateActors (#4272) - (720829e)
• (iroh) Shut down faster by skipping the draining period on Endpoint::close (#4270) - (c617573)
• (iroh) Do not close abandoned paths on all connections (#4284) - (4eea244)

🚜 Refactor

• (base) Expose SignatureParsingError (#4285) - (f8b066c)
• (iroh) Pass strong connection to RemoteStateActor (#4267) - (d5e4395)
• (iroh) Split RemoteStateActor struct into connections and state (#4268) - (86123dd)
• (iroh) [breaking] Use FourTuple for selected path (#4273) - (14bae03)
• (iroh) [breaking] Use FourTuple in send paths (#4281) - (77e6c31)
• (iroh-relay) [breaking] Replace AccessConfig enum with AccessControl trait and allow to track connections (#4276) - (107e37e)

📚 Documentation

• (iroh) Update tls- feature names (#4263) - (9246b7f)

🧪 Testing

• (iroh) Fix racy connection shutdown (#4243) - (a470146)

⚙️ Miscellaneous Tasks

• Improve check-external-types setup (#4250) - (a7d896b)

Deps

• (noq) Update noq and adjust for api change (#4283) - (49c5d54)
• Update to noq main for PathEvent::Established (#4248) - (54ea953)

v1.0.0-rc.0

⛰️ Features

• (iroh) [breaking] Replace Incoming::local_ip with Incoming::local_addr (#4182) - (5dc7160)
• (iroh) [breaking] Update QNT config defaults & update to latest noq main (#4213) - (00f961b)
• (iroh, iroh-relay) [breaking] Support setting auth tokens for relays (#4205) - (1dc6fe8)
• (iroh-base) Impl From<&[u8; 32]> for SecretKey (#4181) - (80dfb19)
• (iroh-relay) [breaking] Pass a ClientRequest to AccessConfig and let the client set query params (#4207) - (7bee17b)
• (metrics) Add cache metrics to dns-server (#3800) - (eb67669)
• [breaking] Update to 1.0.0-rc.0 deps (#4237) - (20350e9)

🐛 Bug Fixes

• (iroh) Don't abort connection attempts when an empty EndpointAddr is added concurrently (#4177) - (a1fa579)
• (iroh) [breaking] Remove noq Written reexport (#4236) - (7d3e485)
• (iroh-dns) Document how to use iroh on Android and run tests in Android emulator (#4183) - (54e4a29)
• Protect against division by zero in process_datagram (#4178) - (db1b335)

🚜 Refactor

• (iroh) [breaking] Replace ConnectionInfo with WeakConnectionHandle (#4189) - (9bfc8da)
• (iroh) [breaking] Make Source private and trim its variants (#4227) - (927addf)
• (iroh) Express IPv6 ULA constants in hex (#4225) - (cb8775c)
• (iroh) Adapt for noq::Closed return type of Connection::closed (#4229) - (217ec7c)
• (iroh) [breaking] Remove portmapper metrics from public API (#4235) - (7955bea)
• (iroh) Apply path status for path selection (#4233) - (63ed351)
• (iroh) [breaking] Improve feature-gating for unstable-custom-transports (#4228) - (f246242)
• (iroh) [breaking] Redesign path observation API (#4188) - (3e82de5)
• (iroh-dns-server) [breaking] Reduce public API surface, improve docs, cleanup visibilities (#4160) - (4ed44b7)
• (iroh-relay) [breaking] Do not depend on tokio-rustls-acme in public API (#4166) - (5a984c6)
• (iroh-relay) Make MaybeTlsStream public again (#4193) - (89ad5d8)
• (iroh-relay) [breaking] Make AccessConfig non-exhaustive (#4190) - (d636e54)
• Prefer release assert for locations where a bounds check follows (#4214) - (eb588ec)
• Prefer loop over zip (#4215) - (c953d9b)
• [breaking] Mark more items as non-exhaustive (#4226) - (eebb60f)
• Remove obsolete fn transport_bias from endpoint builder. (#4234) - (dd418df)

📚 Documentation

• Add post quantum key exchange examples (#4196) - (872d8ee)

🧪 Testing

• (iroh-relay) Integration tests for embedding the relay (#4206) - (88c9eed)

⚙️ Miscellaneous Tasks

• (ci) Fix sccache for netsim (#4176) - (4f22f1a)
• (ci) Fix musl/gnu build setup (#4184) - (e95ac06)
• (ci) Make sccache fail gracefully (#4208) - (a187130)
• (ci) Enforce external type allow-list in public API (#4204) - (3e0c25f)
• (ci) Fix docker releases and musl linking (#4230) - (5f578da)
• Fixup relative deps - (1d0ff85)

Deps

• Pin pkcs8 and der (#4197) - (36c5c6d)

v0.98.2

🐛 Bug Fixes

• (iroh) Don't abort connection attempts when an empty EndpointAddr is added concurrently (#4177) - (60f6f09)
• Protect against division by zero in process_datagram (#4178) - (70cec3d)

Deps

• Pin pkcs8 and der (#4197) - (8c1461b)
• Bump rustls-webpki from 0.103.12 to 0.103.13 - (4baa9b1)

v0.98.1

chore: Release iroh-dns-server version 0.98.1

v0.98.0

⛰️ Features

• (iroh) Avoid allocations in AddrFilter (#4018) - (d26cbd2)
• (iroh) Pluggable crypto backends (#3992) - (387c2e4)
• (iroh) Add ability to configure external addrs (#4098) - (372aab9)
• (iroh) Do not advertise deprecated IPv6 addrs (#4106) - (b2b1d46)
• (iroh-relay) Expose more metrics on the relay server (#4085) - (ee844a6)
• Expose the new fn decrypt on noq. (#4002) - (197d8db)
• Update noq and net-tools to latest (#4088) - (159a5cf)
• Rate limiting in router (#3951) - (ea7a634)
• Update relay protocol to iroh-relay-v2, add new Health frame, test protocol update mechanism (#3955) - (0a22d76)
• Update to noq@0.18 (#4121) - (72e4538)
• Vendor pkarr implementation (#4026) - (3ab6222)

🐛 Bug Fixes

• (ci) Install cmake and nasm for aws-lc-sys on Windows (#4032) - (405de1d)
• (iroh) [breaking] Faster relay health check after network change (#4041) - (b11b0eb)
• (iroh) Endpoint::online should only return once connected to a relay (#4115) - (3424c6d)
• (iroh) [breaking] Don't stop address lookup when one service errors (#4126) - (321443d)
• (iroh) Don't falsely report home relay as connected on change (#4136) - (1b04d34)
• (iroh-relay) Send EndpointGone message to the right peers (#4079) - (6be4b3c)
• (iroh-relay) Treat frames not allowed in a protocol version as error (#4127) - (1c92a39)
• Improve holepunching after network changes (#3928) - (cc21f51)
• Poll for default route with exponential backoff after network change (#4039) - (dc01a77)
• Modify test_ip_wins_over_custom so it is a noop if no ip transport is… (#4048) - (b141e02)
• Increase path idle timeouts and configure relay paths (#4038) - (eba6afc)
• Handle wine properly (#3902) - (8bf7002)
• Set default crypto provider for iroh-relay binary (#4087) - (2433645)

🚜 Refactor

• (iroh) [breaking] Improve address lookup registry (#4130) - (481c870)
• (iroh, iroh-relay) [breaking] Mark public types as non_exhaustive (#4107) - (86d3ac6)
• (iroh-base) [breaking] Don't expose third-party error types in iroh-base (#4073) - (d803dfe)
• (iroh-base) [breaking] Rename CustomAddr::as_vec to CustomAddr::to_vec and improve docs (#4074) - (3077f17)
• (iroh-base) [breaking] Change SecretKey::generate to not take an Rng arg (#4075) - (36781ad)
• (iroh-relay) [breaking] Proper timeouts on relay connections (#4083) - (79bb0e4)
• Use latest noq api (#4057) - (8af8370)
• Remove needless alloc in relay server (#4084) - (40b50a1)
• Move to_z32/from_z32 into iroh-base and remove EndpointIdExt trait (#4133) - (382bf36)

🧪 Testing

• (iroh) Add patchbay test matrix for switching uplinks (#4095) - (d72f1cb)
• (iroh) Add more patchbay tests and improve existing tests (#4118) - (f5ec24a)
• (iroh) Improve patchbay NAT matrix (#4135) - (2ad657a)
• Fix ip_wins_over_custom flakiness (#4047) - (174b58b)
• Add patchbay tests (#3986) - (2ab1240)
• Improve patchbay test setup (#4078) - (9b01751)
• Minor patchbay test improvements (#4091) - (0cc2441)

⚙️ Miscellaneous Tasks

• (ci) Move more CI jobs to self hosted runners (#4072) - (54442c3)
• (iroh) Update hickory to 0.26.0-beta.4 and use exact-version deps for prereleased crates (#4117) - (f829593)
• (iroh-bench) Allow configuring the number of worker threads for each endpoint in iroh-bench (#4063) - (065b448)
• Update to netwatch@0.16 and portmapper@0.16 (#4128) - (24efedf)
• Fix changelog generation - (08c6454)

Deps

• (iroh) Update patchbay to 0.5 (#4097) - (811a062)
• Bump noq and net-tools (#4113) - ([184e378](https:...