# Changelog ## [1.0.5](https://github.com/fugo101/wireguard-lwip/compare/v1.0.4...v1.0.5) (2026-11-10) ### Bug Fixes * small fixes from the architecture review ([#22](https://github.com/fugo101/wireguard-lwip/issues/22)) ([#30](https://github.com/fugo101/wireguard-lwip/issues/30)) ([5a5575e](https://github.com/fugo101/wireguard-lwip/commit/5a5575e23346855c7f09aaded7b32420d2d48576)) ## [1.0.4](https://github.com/fugo101/wireguard-lwip/compare/v1.0.3...v1.0.4) (2026-11-10) ### Bug Fixes * accept an inner packet only if its source routes back to the sender (GHSA-335q-jvfv-r737) ([b00499a](https://github.com/fugo101/wireguard-lwip/commit/b00499aff0b6b4f6ac7ad9bbc6ddb8e6fcebeddf)) * check replay before endpoint roaming and guard short inner packets (GHSA-mqvf-8p8p-wjqg) ([b00499a](https://github.com/fugo101/wireguard-lwip/commit/b00499aff0b6b4f6ac7ad9bbc6ddb8e6fcebeddf)) * keep a DERP peer on DERP when its session state is reset ([b00499a](https://github.com/fugo101/wireguard-lwip/commit/b00499aff0b6b4f6ac7ad9bbc6ddb8e6fcebeddf)) * merge upstream security fixes (GHSA-7grw-r329-8g8c) ([b00499a](https://github.com/fugo101/wireguard-lwip/commit/b00499aff0b6b4f6ac7ad9bbc6ddb8e6fcebeddf)) * route each packet to its longest-prefix peer (GHSA-xr9h-pc9x-m684) ([b00499a](https://github.com/fugo101/wireguard-lwip/commit/b00499aff0b6b4f6ac7ad9bbc6ddb8e6fcebeddf)) ### Documentation * add CLAUDE.md and agent skills config ([#20](https://github.com/fugo101/wireguard-lwip/issues/20)) ([36e07dc](https://github.com/fugo101/wireguard-lwip/commit/36e07dc4cb5fbd07e3231e4ba364289f652d71d9)) ## [1.0.3](https://github.com/fugo101/wireguard-lwip/compare/v1.0.2...v1.0.3) (2026-08-19) ### Bug Fixes * longest-prefix-match in peer_lookup_by_allowed_ip ([#17](https://github.com/fugo101/wireguard-lwip/issues/17)) ([c0d20de](https://github.com/fugo101/wireguard-lwip/commit/c0d20dea0101660dfd31e9117cce66875c952d47)) ## [1.0.2](https://github.com/fugo101/wireguard-lwip/compare/v1.0.1...v1.0.2) (2026-08-19) ### Bug Fixes * throttle handshake retries + preserve DERP routing for stale endpoints ([#15](https://github.com/fugo101/wireguard-lwip/issues/15)) ([e13cae5](https://github.com/fugo101/wireguard-lwip/commit/e13cae50e246d9642f2a011e4f0641885cd29486)) ## [1.0.1](https://github.com/fugo101/wireguard-lwip/compare/v1.0.0...v1.0.1) (2026-08-18) ### Bug Fixes * use wall-clock time for the WireGuard handshake timestamp ([#13](https://github.com/fugo101/wireguard-lwip/issues/13)) ([dd5e921](https://github.com/fugo101/wireguard-lwip/commit/dd5e921cd57253d8b428c949fe06034f522059bc)) ## 1.0.0 (2026-08-14) ### Features * **esp32:** add ESP-IDF platform port ([#4](https://github.com/fugo101/wireguard-lwip/issues/4)) ([2933dd4](https://github.com/fugo101/wireguard-lwip/commit/2933dd44e9c7429ecff8f328210efee787981d50)) * **platform:** raise WIREGUARD_MAX_PEERS from 1 to 16 ([#1](https://github.com/fugo101/wireguard-lwip/issues/1)) ([b107f9f](https://github.com/fugo101/wireguard-lwip/commit/b107f9f783e9f02bd97b74ec05601ac6d7d4a1a5)) * **wireguard:** add DERP relay and magicsock UDP output API surface ([#2](https://github.com/fugo101/wireguard-lwip/issues/2)) ([3b85a12](https://github.com/fugo101/wireguard-lwip/commit/3b85a1235a8c4c52350d00a5e8a9c9ec7bb31f11)) * **wireguard:** implement DERP relay, magicsock output, dual-stack IP compat, and lwIP thread-safety fixes ([#3](https://github.com/fugo101/wireguard-lwip/issues/3)) ([193aac6](https://github.com/fugo101/wireguard-lwip/commit/193aac6483e08b97493bc2d6e3d368bfb6d719ad)) ### Bug Fixes * check source IP in cryptokey routing, not destination ([ac84f4c](https://github.com/fugo101/wireguard-lwip/commit/ac84f4cb2aa4c2e53682aa8914d7e93d88e25c84)) ### Build * add ESP-IDF component packaging ([88c4dcb](https://github.com/fugo101/wireguard-lwip/commit/88c4dcbb9e9b80ce8db9cf477fde8c569d68e9ef))