v0.74.7

anthropics/anthropic-tokenizer-typescriptv0.74.7Jul 17, 2026by lixmal

AI Summary

This release focuses on improving connection reliability, security, and Windows compatibility with several client-side improvements including QUIC handling, security fixes, and configuration changes.

Key Highlights

Concurrent QUIC connection handling to prevent handshake head-of-line blocking
Security improvements including flag injection prevention and SSH config sanitization
Windows-specific fixes for gVisor TCP RACK loss detection
Improved token validation with renamed function
SOCKS5 proxy bound to localhost by default

New Features

Concurrent QUIC connection handling
Flag injection prevention in getent input
SSH config sanitization for peer FQDN/hostname
Disabled gVisor TCP RACK loss detection on Windows
Renamed isValidAccessToken to reflect audience-only check
SOCKS5 proxy binding to 127.0.0.1 by default
IP fragment evaluation against firewall ACLs

Full Release Notes

## What's Changed
* [relay] Handle QUIC connections concurrently to prevent handshake head-of-line blocking by @lixmal in https://github.com/netbirdio/netbird/pull/6784
* [client] Reject leading hyphen in getent input to prevent flag injection by @lixmal in https://github.com/netbirdio/netbird/pull/6787
* [client] Sanitize peer FQDN/hostname in generated SSH config by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6805
* [client] Disable gVisor TCP RACK loss detection on Windows by @lixmal in https://github.com/netbirdio/netbird/pull/6808
* [client] Rename isValidAccessToken to reflect audience-only check by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6806
* [client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6812
* [client] Evaluate IP fragments against firewall ACLs by @lixmal in https://github.com/netbirdio/netbird/pull/6781


**Full Changelog**: https://github.com/netbirdio/netbird/compare/v0.74.6...v0.74.7