sing-box: bump version to 1.13.11

[ffha]

changelog: SagerNet/sing-box@v1.12.22...v1.13.11

📦 Package Details

Maintainer: @brvphoenix
_{(You can find this by checking the history of the package Makefile.)}

Description: Update sing-box version to v1.13.11

---

🧪 Run Testing Details

• OpenWrt Version:
• OpenWrt Target/Subtarget:
• OpenWrt Device:

---

✅ Formalities

• I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

[saldry]

https://github.com/SagerNet/sing-box/blob/v1.13.11/docs/installation/build-from-source.md

There're some new build tags for sing-box 1.13: with_ccm, with_ocm, with_naive_outbound, badlinkname, tfogo_checklinkname0

The makefile needs more update to make Naive outbound available.

[JeWgh]

Could you also port this PR to the openwrt-25.12 branch?

[ffha]

Could you also port this PR to the openwrt-25.12 branch?

I will port this PR when the PR is merged.

[peterwillcn]

The new DNS server enabled in sing-box 1.13 is incompatible with the syntax of 1.12, and most importantly, the underlying implementation mechanism is incompatible with the old implementation. The official documentation does not provide a detailed migration plan. Testing has found that upgrading to 1.13 causes the OpenWRT proxy to fail to properly distribute and resolve domain names. Therefore, until a solution is found, OpenWRT will not support version 1.13.

[saldry]

@peterwillcn, the new DNS server format is introduced in 1.12, and 1.13 did not change that. The doc of migration is here: https://sing-box.sagernet.org/migration/#migrate-to-new-dns-server-formats

I didn't see any improperly distributing and resolving domain names in my local environment.

[Onotot]

After adding new build flags and attempting to build version 1.13.13 on branch 25.12, I encountered the following errors:
link: github.com/sagernet/sing-box/common/badtls: invalid reference to crypto/tls.(*Conn).handlePostHandshakeMessage

This was resolved by adding the following line to the Makefile:
GO_PKG_LDFLAGS:=-checklinkname=0
The solution was taken from here: SagerNet/sing-box@d2fe7ec

When building with the with_naive_outbound flag, I get the following error:

/src_fast/build_sing-box/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-14.3.0_musl/lib/gcc/aarch64-openwrt-linux-musl/14.3.0/../../../../aarch64-openwrt-linux-musl/bin/ld.bfd: skipping incompatible /src_fast/build_sing-box/openwrt/dl/go-mod-cache/[github.com/sagernet/cronet-go/lib/linux_arm64@v0.0.0-20260516034431-d86a63399c27/libcronet.a](https://github.com/sagernet/cronet-go/lib/linux_arm64@v0.0.0-20260516034431-d86a63399c27/libcronet.a) when searching for -l:libcronet.a
/src_fast/build_sing-box/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-14.3.0_musl/lib/gcc/aarch64-openwrt-linux-musl/14.3.0/../../../../aarch64-openwrt-linux-musl/bin/ld.bfd: skipping incompatible /src_fast/build_sing-box/openwrt/dl/go-mod-cache/[github.com/sagernet/cronet-go/lib/linux_arm64@v0.0.0-20260516034431-d86a63399c27/libcronet.a](https://github.com/sagernet/cronet-go/lib/linux_arm64@v0.0.0-20260516034431-d86a63399c27/libcronet.a) when searching for -l:libcronet.a
collect2: error: ld returned 1 exit status


make[2]: *** [Makefile:197: /src_fast/build_sing-box/openwrt/build_dir/target-aarch64_cortex-a53_musl/sing-box-full/sing-box-1.13.13/.built] Error 1
make[2]: Leaving directory '/src_fast/build_sing-box/openwrt/feeds/packages/net/sing-box'
time: package/feeds/packages/sing-box/full/compile#14.85#5.48#9.62
    ERROR: package/feeds/packages/sing-box failed to build (build variant: full).
make[1]: *** [package/Makefile:188: package/feeds/packages/sing-box/compile] Error 1

About libcronet, the sing-box author has this information available here:

Build Variant	Platforms	Description
(no suffix)	Linux amd64/arm64	purego build, libcronet.so included
-glibc	Linux 386/amd64/arm/arm64/mipsle/mips64le/riscv64/loong64	CGO build, dynamically linked with glibc, requires glibc >= 2.31 (loong64: >= 2.36)
-musl	Linux 386/amd64/arm/arm64/mipsle/riscv64/loong64	CGO build, statically linked with musl
(no suffix)	Windows amd64/arm64	purego build, libcronet.dll included

I haven't found a solution for this yet, maybe someone with more experience can suggest something.

The size of the sing-box package has also increased, relative to version 1.12.x. For the tiny variant, it's likely necessary to add the badlinkname and tfogo_checklinkname0 build flags, but it's not yet clear what exactly this affects, as the package builds without them.

[ampetelin]

@peterwillcn, which DNS server introduced in version 1.13 are you referring to? As @saldry already pointed out, there were no DNS syntax changes in version 1.13, since the syntax had already been changed in version 1.12.

[saldry]

@peterwillcn, You may add detour to your DNS server if you can't access to it directly.

{
	"dns": {
		"servers": [
			{
				"tag": "google",
				"type": "tls",
				"server": "8.8.8.8",
				"detour": "proxy-out"
			}
		]
	}
}

New DNS server format uses dialer, which defaults to direct, not default outbound.

[peterwillcn]

upgrade 1.13.13 #29674