Bump github.com/sagernet/sing-box from 1.13.19 to 1.14.0

[dependabot]

Bumps github.com/sagernet/sing-box from 1.13.19 to 1.14.0.

Changelog

Sourced from github.com/sagernet/sing-box's changelog.

1.14.0

Important changes since 1.13:

• iOS and tvOS clients are back on the App Store 1
• Add OpenVPN client and server support 2
• Add OpenConnect client support 3
• Add Snell protocol support 4
• Add L3 forwarding support and bridge outbound 5
• Add network namespace support 6
• Introducing sing-box API service, Dashboard and remote control 7
• Add api command 8
• Add USB/IP services 9
• Add Hysteria Realm service and Hysteria2 NAT traversal support 10
• Add Chrome QUIC fingerprint parroting, BBR profile, hop interval randomization and gecko obfs for Hysteria2 11
• Add evaluate DNS rule action, Response Match Fields and parallel DNS response evaluation 12
• ip_version and query_type now also take effect on internal DNS lookups 13
• Correct undefined rule-set matching semantics 14
• Add optimistic DNS cache 15
• Add DNS query timeout options 16
• Add mDNS DNS server, preferred_by DNS rule item and search domain rule items 17
• Add source_mac_address and source_hostname rule items 18
• Allow customizing TUN DNS mode and hijack interface DNS by default 19
• Add new UDP NAT options 20
• Add sniff support for pre-match 21
• Unify HTTP client 22
• Unify HTTP/2 and QUIC parameters 23
• Refactor ACME support to certificate provider system 24
• Add Cloudflare Origin CA and Tailscale certificate providers 25
• Add TLS spoof 26
• Add Windows and Apple TLS engines and Apple HTTP engine 27
• Add Tailscale SSH server and Taildrop support 28
• Add JSON Schema support 29
• Add multiple tags and initial_path support to rule-sets 30
• Add package_name_regex route, DNS and headless rule item
• Add query_client_subnet and query_dnssec DNS rule items and remove_client_subnet DNS rule action option
• Add cipher, MAC, and key exchange algorithm options for SSH outbound
• Add cloudflared inbound
• Add include_mac_address and exclude_mac_address TUN options
• Add handshake_timeout TLS option
• Add listen_port, accept_search_domain options for Tailscale
• Preserve comments between formatting
• Remove Deprecated Features by agreement
• Introducing sing-box for Desktop for Windows and Linux 31
• Add iOS jailbreak release 32
• Apple/Android/Desktop: Add JSON editor completion, power report, report export encryption and updater improvements
• Add beta, testing and oldstable release tracks for Linux packages and Docker 33
• Drop support for go1.24 34
• Update quic-go to v0.61.0
• Update gVisor to 20260727.0

... (truncated)

Commits

• 0b89958 Bump version
• 65a5075 Update naiveproxy to v150.0.7871.63-2
• 138ba19 Add desktop client dev branch support
• 336cde0 Run tests on oldstable branch
• a48b4cb release: Fetch client main branch explicitly in update_clients.sh
• 05b6802 Fix QUIC congestion control application limited reporting
• a971333 boxdd: Fix log output
• 66beaf5 Test nested groups recursively in URLTest
• dd9cdbc tailscale: Fix endpoint start failure when no route is available
• 384344e Bump version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.