Skip to content

Prepare v1.1.0 release #186

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gasbytes merged 1 commit into from
Oct 2, 2026
Merged

Prepare v1.1.0 release #186

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,27 @@
# Changelog

## v1.1.0 2026-10-02

- New ports: AMD/Xilinx (ZCU102, Versal VMK180, Zynq-7000), NXP QorIQ (FMan, ENETC, eTSEC, QUICC UCC), PIC32MZ, RealTek AmebaPro2, NXP LPC54S018M, STM32C5A3, STM32F437/F439, Pico 2 W, Zephyr; wolfHAL as a submodule under `lib/`; big-endian host support.
- TFTP client and server.
- Multicast UDP sockets with IGMP.
- Raw and AF_PACKET sockets.
- VLAN 802.1Q tagging and filtering.
- Multi-interface routing and forwarding: static route table, martian and strict-RPF source checks.
- Loopback interface.
- wolfSupplicant: clean-room WPA/WPA2/WPA3 supplicant with WPA3-SAE interop; wired 802.1X EAP-TLS demo on STM32H563.
- MACsec 802.1AE (SecY) with wolfMKA control plane.
- wolfGuard: key rotation, cookie expiry, source policy enforcement.
- TCP: RFC 9293 acceptability and RST handling, pre-accept and late-accept fixes, PAWS in TIME_WAIT/LAST_ACK, MSS floor, 64 s RTO cap, retransmit in teardown states.
- DHCP: RFC 4331 DAD before lease bind, exponential retransmit backoff, jittered T1/T2, server-ID validation.
- DNS response validation per RFC 1035; IGMP query responses deferred per RFC 3376.
- Security hardening: ARP guardrails (DAD, anti-poisoning, rate limiting), IPsec ESP replay window and SA persistence, TFTP and HTTP hardening, raw socket receive enforcement.
- New APIs: wolfIP_sock_abort(), IP_TOS setsockopt, SO_RCVTIMEO; FreeRTOS ISR-safe wake and deadline-based sleep.
Comment thread
danielinux marked this conversation as resolved.
- Compile-out options for the DHCP client and zero-UDP builds.
- Docs: porting guide, how-to guides (TLS, HTTP, wolfGuard, DHCP/DNS, IPsec ESP, TFTP, advanced IPv4), lwIP migration guide with Japanese translation, CONTRIBUTING.md.
- wolfIP_poll refactor
- Fixed ESP anti-replay window issue (CWE-354). Reported by: Matan Radomski.

## v1.0 2026-03-31

Initial public wolfIP release.
Expand Down
Loading