[ZT] WARP GA 2025.5.893.0 (cloudflare#23337)

* raw release notes

* edit Windows notes

* fix casing

* edit macOS notes

* edit Linux notes

* SAN attribute

Author: ranbel

src/content/warp-releases/linux/beta/2025.5.735.1.yaml

@@ -12,7 +12,7 @@ releaseNotes: >-
 
   - Improvement to gracefully handle changes made by MDM while WARP is not running.
 
-  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and ethernet networks.
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
 version: 2025.5.735.1
 releaseDate: 2025-06-05T19:47:54.412Z
 packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.5.735.1

src/content/warp-releases/linux/ga/2025.5.893.0.yaml

@@ -0,0 +1,18 @@
+releaseNotes: |-
+  This release contains improvements and new exciting features, including [post-quantum cryptography](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum). By tunneling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems.
+
+  **Changes and improvements**
+  - Fixed a device registration issue causing WARP connection failures when changing networks.
+  - Captive portal improvements and fixes:
+     - Captive portal sign in notifications will now be sent through operating system notification services.
+     - Fix for firewall configuration issue affecting clients in DoH only mode.
+  - Improved the connectivity status message in the client GUI.
+  -  The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be [enabled by MDM](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum).
+  - Improvement to handle client configuration changes made by MDM while WARP is not running.
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
+  - Added a WARP client device posture check for SAN attributes to the [client certificate check](/cloudflare-one/identity/devices/warp-client-checks/client-certificate/).
+version: 2025.5.893.0
+releaseDate: 2025-06-30T19:44:34.251Z
+packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.5.893.0
+packageSize: 44788578
+platformName: Linux

src/content/warp-releases/macos/beta/2025.5.735.1.yaml

@@ -7,7 +7,7 @@ releaseNotes: |-
   - Captive portal improvements including showing connectivity status in the client and sending system notifications for captive portal sign in.
   - The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be [enabled by MDM](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum).
   - Improvement to gracefully handle changes made by MDM while WARP is not running.
-  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and ethernet networks.
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
 
   **Known issues**
   - macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.4 or later.

src/content/warp-releases/macos/ga/2025.5.893.0.yaml

@@ -0,0 +1,23 @@
+releaseNotes: |-
+  This release contains improvements and new exciting features, including [post-quantum cryptography](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum). By tunneling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems.
+
+  **Changes and improvements**
+  - Fixed an issue where WARP sometimes failed to automatically relaunch after updating.
+  - Fixed a device registration issue causing WARP connection failures when changing networks.
+  - Captive portal improvements and fixes:
+     - Captive portal sign in notifications will now be sent through operating system notification services.
+     - Fix for firewall configuration issue affecting clients in DoH only mode.
+  - Improved the connectivity status message in the client GUI.
+  -  The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be [enabled by MDM](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum).
+  - Improvement to handle client configuration changes made by an MDM while WARP is not running.
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
+  - Improvement for WARP connectivity issues on macOS due to the operating system not accepting DNS server configurations.
+  - Added a WARP client device posture check for SAN attributes to the [client certificate check](/cloudflare-one/identity/devices/warp-client-checks/client-certificate/).
+
+  **Known issues**
+  - macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.4 or later.
+version: 2025.5.893.0
+releaseDate: 2025-06-30T21:10:36.123Z
+packageURL: https://downloads.cloudflareclient.com/v1/download/macos/version/2025.5.893.0
+packageSize: 95499638
+platformName: macOS

src/content/warp-releases/windows/beta/2025.5.735.1.yaml

@@ -9,7 +9,7 @@ releaseNotes: |-
   - Improvement to gracefully handle changes made by MDM while WARP is not running.
   - Improvement for multi-user mode to avoid unnecessary key rotations when transitioning from a pre-login to a logged-in state.
   - Added a WARP client device posture check for SAN attributes to the [client certificate check](/cloudflare-one/identity/devices/warp-client-checks/client-certificate/).
-  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and ethernet networks.
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
   - Added [SCCM VPN boundary support](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#sccm-vpn-boundary-support) to device profile settings. With SCCM VPN boundary support enabled, operating systems will register WARP's local interface IP with the on-premise DNS server when reachable.
 
   **Known issues**

src/content/warp-releases/windows/ga/2025.5.893.0.yaml

@@ -0,0 +1,34 @@
+releaseNotes: |-
+  This release contains improvements and new exciting features, including [SCCM VPN boundary support](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#sccm-vpn-boundary-support) and [post-quantum cryptography](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum). By tunneling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems.
+
+  **Changes and improvements**
+  - Fixed a device registration issue that caused WARP connection failures when changing networks.
+  - Captive portal improvements and fixes:
+     - Captive portal sign in notifications will now be sent through operating system notification services.
+     - Fix for firewall configuration issue affecting clients in DoH only mode.
+  - Improved the connectivity status message in the client GUI.
+  - Fixed a bug affecting clients in Gateway with DoH mode where the original DNS servers were not restored after disabling WARP.
+  - The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be [enabled by MDM](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum).
+  - Improvement to handle client configuration changes made by an MDM while WARP is not running.
+  - Improvements for multi-user experience to better handle fast user switching and transitions from a pre-login to a logged-in state.
+  - Added a WARP client device posture check for SAN attributes to the [client certificate check](/cloudflare-one/identity/devices/warp-client-checks/client-certificate/).
+  - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks.
+  - Added [SCCM VPN boundary support](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#sccm-vpn-boundary-support) to device profile settings. With SCCM VPN boundary support enabled, operating systems will register WARP's local interface IP with the on-premise DNS server when reachable.
+  - Fix for an issue causing WARP connectivity to fail without full system reboot.
+
+  **Known issues**
+  - Microsoft has confirmed a regression with Windows 11 starting around 24H2 that may cause performance issues for some users. These performance issues could manifest as mouse lag, audio cracking, or other slowdowns. Microsoft's recently released preview build, [Windows 11 24H2 KB5060829](https://support.microsoft.com/en-us/topic/june-26-2025-kb5060829-os-build-26100-4484-preview-e31ba7c2-ff65-4863-a462-a66e30840b1a), may resolve these issues.
+
+  - Devices with `KB5055523` installed may receive a warning about `Win32/ClickFix.ABA` being present in the installer. To resolve this false positive, update Microsoft Security Intelligence to [version 1.429.19.0](https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes?requestVersion=1.429.19.0) or later.
+
+  - DNS resolution may be broken when the following conditions are all true:
+    - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+    - A custom DNS server address is configured on the primary network adapter.
+    - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+    To work around this issue, reconnect the WARP client by toggling off and back on.
+version: 2025.5.893.0
+releaseDate: 2025-06-30T21:10:37.199Z
+packageURL: https://downloads.cloudflareclient.com/v1/download/windows/version/2025.5.893.0
+packageSize: 129204224
+platformName: Windows