This release brings full parity with upstream s-ui v1.5.3, an update notice on the dashboard, a six-language management script, and a round of dependency updates. No database migration is required.

Features

• Update-available notice on the dashboard. The server card shows an amber chip when a newer 2s-ui release is out, linking straight to the release page. The check runs in your browser against the GitHub API (no server egress), is cached for 24 hours, and stays silent when GitHub is unreachable.
• Optional Clash default groups (upstream #1155): a new setting skips injecting the default Proxy/Auto proxy-groups so fully custom configs stay untouched, and a case-insensitive all entry inside a custom proxy-group expands to every generated proxy tag. Both toggles live in Settings → Subscription → Clash.
• Management script in six languages: s-ui.sh now speaks English, 简体中文, 繁體中文, Русский, فارسی and Tiếng Việt — same coverage as the panel. The language menu always lists languages by their native names so anyone can find their way back.

Fixes

• Timezones no longer depend on OS data (upstream #1166): the timezone database is embedded in the binary; the installer and Docker image no longer need the OS tzdata package.
• Share-link certificate pin key follows each protocol's convention (upstream #1093 follow-up): pinSHA256 on Hysteria/Hysteria2 links, pcs on Xray-based protocols — matching what the client apps actually parse.
• Dev-only: the dashboard demo data (API mock) works again when the backend isn't running behind the Vite proxy.

Dependencies

• golang.org/x/crypto 0.53.0 — ships a batch of SSH security fixes (ssh/agent constraint handling, @revoked known-hosts keys, channel-handling DoS issues) relevant to the embedded sing-box SSH outbound. bcrypt, used for panel passwords, is unchanged.
• gopsutil 4.26.6 (system-stats bugfixes) and certmagic 0.25.4 (memory-leak and handshake-waiter fixes on the ACME path).
• CI: actions/checkout v7 and actions/cache v6.