Mihomo: baixar versions anteriors

What's Changed
- 2df147b9 feat: support dns-mode for tun (#3288) by @Chenx Dust
BUG & Fix
- 349af191 fix: the embedded shadowsocks listener can't be closed (#3314) by @Token
- 80101933 fix: bound doh dials so ones the query gave up on cannot pile up (#3274) by @Cassian433
- 94b13aed fix: dialer-proxy cycle check takes quadratic time and memory (#3315) by @Token
- c4e81869 fix: CVE-2026-97031 for crypto/tls by @wwqgtxx
- df1b07af fix: a sub-millisecond URL test is reported as a failure (#3316) by @Token
- e4dd968d fix: keep fake-ip allocation state when cloning the pool on reload (#3283) by @Younes Beriane
- 1354e52e fix: unpassed loadbalance test by @wwqgtxx
Maintenance
- 3f27ef39 chore: refactored and fixed issues for sudoku while also improving performance (#3333) by @saba-futai
- 9f053c49 chore: lazy init wireguard device and stack by @wwqgtxx
- bc76c139 chore: update mieru version (#3304) by @enfein
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.32...v1.19.33

What's Changed
- 3025efad feat: add load-balance hash-key to pin a session on the inbound user (#3133) by @简直蠢丶
BUG & Fix
- 409ee57e fix: populate HWCap from auxv on linux by @artbred
- 41b8a059 fix: account for TCP options in effective MSS by @wwqgtxx
- 5019cc09 fix: potential race condition in c.idleSession.Len() in idleCleanupExpTime() for anytls (#3225) by @Chenx Dust
- 60f70cec fix: align unconnected UDP and raw IP ICMP errors with Linux for mipstack by @wwqgtxx
- 88dcbf7f fix: default listener tun to mips stack (#3264) by @Jiawen Geng
- 8d57a8c5 fix: exclude opcode from P_DATA_V1 AEAD additional data for OpenVPN (#3237) by @FlyingSB
- 8fa048d3 fix: half-close in sing-mux by @proxi
- ac652970 fix: nil pconn deref when ctx is canceled during h2 ClientConn setup by @BESTRUI
- afe94daf fix: set udp InUser metadata for mieru inbound (#3236) by @Ryoma Dev
- fbb67422 fix: restart EasyTier outbound after silent overlay failure (#3215) by @MiaM1ku
Maintenance
- 13417699 chore: support RX checksum offload for mipstack by @wwqgtxx
- 3c947c76 chore: convert support xhttp extra.headers (#3230) by @Peter Solomon
- 63bd52ec chore: change default IP stack mode to mips and support congestion-controller option for tun by @wwqgtxx
- 91dd03a9 chore: support lazy receive buffer reads for mipstack and gvisor by @wwqgtxx
- f103639c chore: update mieru version (#3242) by @enfein
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.31...v1.19.32

What's Changed
- dca26db0 feat: add EasyTier outbound (#3194) by @MiaM1ku
- ab405bad feat: support stack: mips in tun configuration by @wwqgtxx
- 390870c7 feat: support identity-secret for ZeroTier by @wwqgtxx
BUG & Fix
- 0159cf47 fix: restore hysteria v1 udp handling (#3178) by @Chenx Dust
- 04366507 fix: close connection after error handling in doq by @wwqgtxx
- 06b2c5b8 fix: close connection after error handling in mkcp outbound by @wwqgtxx
- 127b1392 fix: split-DNS UDP queries fail silently in tsnet mode when upstream is a tailnet peer by @wwqgtxx
- 187c6342 fix: close connection after error handling in snell outbound by @wwqgtxx
- 1cdca1a0 fix: handle decryption handshake errors in server by @wwqgtxx
- 20bcda2d fix: avoid VLESS decryption cleanup panic (#3195) by @浅小沫
- 5183232e fix: RandomPaddingAddition and DisableCookies for AmneziaWG v3 by @wwqgtxx
- 5f951098 fix: DomainSet wildcard matching with overlapping rules by @wwqgtxx
- 634b3199 fix: hysteria2 UDP sessions not closed on connection close by @wwqgtxx
- 68ec4fae fix: ipv6 url parse in xhttp (#3160) by @CyberVacation
- 6d179a1c fix: openvpn derive the tls-auth HMAC digest from auth instead of hard-coding SHA-1 (#3189) by @Token
- 77b9393c fix: preserve domain rules across Foreach round trips by @wwqgtxx
- 78210c9c fix: close connection after error handling in kcptun by @wwqgtxx
- 7d7532d4 fix: error using of safeConnClose in sudoku outbound by @wwqgtxx
- 94ccba56 fix: mieru listener doesn't obey "listen" config (#3205) by @enfein
- 99c49780 fix: prevent nil pointer dereference in WireGuard initialization (#3148) by @Sinspired
- a91201f1 fix: correct android amd64 core asset name in updater (#3167) by @NuoFang
- c0e43ebe fix: tailscale should always use UserDial for upstream TCP DNS server by @wwqgtxx
- d5f57a5e fix: missing NeedHandshake for shadowsocks none by @wwqgtxx
- dc66a8a1 fix: close connection after error handling in handleContextListener by @wwqgtxx
- e0f1d2b2 fix: close udp endpoint in mieru server by @wwqgtxx
- faeb537a fix: close connection after error handling in tuic server by @wwqgtxx
- fb66af81 fix: typo in config.yaml (#3145) by @Kosta
- fd74ecb6 fix: trusttunnel client not waiting for TCP connection established by @wwqgtxx
Maintenance
- 061966e7 chore: OpenVPN no longer relies on the underlying conn deadline functions by @wwqgtxx
- 2ecceb5b chore: improve mipstack under device backpressure by @wwqgtxx
- 2f7eae5a chore: report detailed errors for invalid Clash-style domain patterns by @wwqgtxx
- 2fe7ecbf chore: change yaml library to go.yaml.in/yaml/v3 by @wwqgtxx
- 4aa9cc17 chore: avoid redundant select calculations in DomainSet by @wwqgtxx
- 4dfaa902 chore: align the APIs between mipstack and gvisor by @wwqgtxx
- 518c7036 chore: convert support REALITY ML-KEM option (#3199) by @Aethersailor
- 6087521e chore: avoid a separate rule slice in DumpMrs by @wwqgtxx
- 65287f0e chore: reduce memory usage in converter (#3159) by @beck
- 8e2f18a1 chore: avoid redundant rank calculations in DomainSet by @wwqgtxx
- 8e6738fa chore: update tailscale to v1.102.3 by @wwqgtxx
- 8f54283e chore: updated sudoku to v0.5.0 (#3187) by @saba-futai
- 92433dba chore: reduce gVisor memory usage by @wwqgtxx
- b59a7e7b chore: sharing synthetic datasets used for build benchmarking by @wwqgtxx
- bbb8cb92 chore: add standalone DomainSetBuilder by @wwqgtxx
- c210be21 chore: buffer geodata reads with a 16 KiB reader (#3185) by @Huffer
- d37f58e7 chore: add new DomainMap implement based on succinct DomainSet by @wwqgtxx
- dd26c524 chore: reduce connection memory and actor stack overhead for mipstack by @wwqgtxx
- ebf82e29 chore: reuse queues during DomainSet build by @wwqgtxx
- f295ba6d chore: update mipstack for api adjustment by @wwqgtxx
- f6a038ce chore: add some benchmark code for new DomainMap by @wwqgtxx
- fe22fdd2 chore: update mieru version (#3119) by @enfein
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.30...v1.19.31

What's Changed
- e889b689 feat: support H2C and QUICv2 sniffing (#3036) by @Kosta
- 05b5334c feat: add handshake-timeout for hysteria2 by @wwqgtxx
- 1265cb9a feat: add ip-stack option for masque outbound by @wwqgtxx
- 4ad27d81 feat: add ip-stack option for ZeroTier by @wwqgtxx
- 8453e589 feat: support AmneziaWG v3.0 by @wwqgtxx
- 8b76447b feat: add ip-stack option for wireguard outbound by @wwqgtxx
- 8c56780b feat: support AmneziaWG v3.1 by @wwqgtxx
- b0825150 feat: add Zerotier outbound support by @wwqgtxx
- b27c659a feat: add client-metadata configuration to anytls and DON'T sent by default by @wwqgtxx
- bb80689b feat: support bbr3 for mipstack by @wwqgtxx
- d46944f3 feat: add ip-stack option for openvpn outbound by @wwqgtxx
- e40b5962 feat: add rate-limit for restls listener by @wwqgtxx
BUG & Fix
- 25ccc4dd fix: handle zerotier network lifecycle events correctly by @wwqgtxx
- 2e8a04c9 fix: tailscale failed to recover after the network was restored by @wwqgtxx
- 33154579 fix: CVE-2026-56862 for crypto/tls by @wwqgtxx
- 3a779dda fix: typo in uplinkHTTPMethod (#3029) by @Kosta
- 4fcf9aed fix: track QUIC crypto stream coverage without repeated range sorting by @wwqgtxx
- 5e3cb10b fix: avoid reserved TLS suffixes in JLS FakeRandom by @wwqgtxx
- 63f15f2d fix: keep connections open after initial sniffing failures by @wwqgtxx
- 69a3142a fix: apply default uplink chunk size for xhttp (#3061) by @vanbujhm
- 7ac597bd fix: domain resolve logic in zerotier outbound by @wwqgtxx
- 8d1b6616 fix: avoid unnecessary waits in HTTP/2 sniffing by @wwqgtxx
- 8d710081 fix: typo in error string (#3090) by @Rye Sears
- 9574a46c fix: truncate udp dns replies to the client's advertised buffer size (#3043) by @TWO666
- 95f7a0c5 fix: remove incorrect quic error wrapping by @wwqgtxx
- 978d25ae fix: enforce ShadowQUIC JLS authentication in QUIC layer by @wwqgtxx
- 98f1200d fix: panic when UDP is not supported in dns_dialer by @wwqgtxx
- 9b9dc8a0 fix: survive server-initiated soft reset and rekey for openvpn (#3109) by @ayanami-desu
- 9d901dc7 fix: prevent CUBIC ACKs from reducing cwnd for gvisor by @wwqgtxx
- a2c9556a fix: HTTP/2 read loop spinning on underlying StreamError by @wwqgtxx
- a939fc1c fix: compilation errors under specific circumstances by @wwqgtxx
- ac017cdd fix: initialize DNS before NTP (#3103) by @xYx
- ace20375 fix: echo edns0 opt in dns replies when the request carries one (#3041) by @TWO666
- afeb0728 fix: trim trailing newline from Tailscale VersionDotTxt in IPNVersion (#3079) by @胡威
- b9894451 fix: reduce PROTOCOL_VIOLATION errors on masque dialing by setting ConnectionIDLength by @wwqgtxx
- c1603f4d fix: coordinate TCP sniffers on overlapping ports by @wwqgtxx
- c7089c00 fix: include the upstream tailscale version for standardization (#3074) by @Feng.YJ
- cd05b74f fix: harden zerotier runtime synchronization by @wwqgtxx
- e18ef3a1 fix: harden ShadowQUIC JLS camouflage forwarding by @wwqgtxx
- ea9c544e fix: avoid unnecessary waits in TLS and QUIC sniffing by @wwqgtxx
- f298cd2e fix: normalize HTTP hosts and avoid unnecessary sniffing delays by @wwqgtxx
- f5fddd37 fix: preserve WebSocket 0-RTT data order by @wwqgtxx
- f83a0721 fix: let QUIC sniffer handle Retry key changes by @wwqgtxx
- fb002210 fix: tun dns hijack sending zero-filled or stale packets when PackBuffer reallocates (#3037) by @TWO666
Maintenance
- 09b0ff3c chore: reduce interface differences between gVisor and mipstack by @wwqgtxx
- 0ba9f2f6 chore: remove dohMaxConnsPerHost & dohMaxIdleConns (#3048) by @ayanamist
- 1af24e98 chore: update tailscale to v1.102.2 by @wwqgtxx
- 1ef16c71 chore: harden TCP pacing and handshake state handling by @wwqgtxx
- 26c635f6 chore: avoid string reversal allocation in DomainSet.Has (#3049) by @Ember Moth
- 2bade294 chore: allow the sniffer to read more data if possible by @wwqgtxx
- 2ea54615 chore: adjust internal dialQuic api by @wwqgtxx
- 3c16aaf1 chore: update quic-go to 0.61.0 by @wwqgtxx
- 3cac8696 chore: reduce ZeroTier wire data-path

What's Changed
- bd749c65 feat: sync anytls v0.0.13 (#2990) by @anytls
- e26714a1 feat: support TLS rekey fix, data-ciphers negotiation, tls-crypt-v2 for OpenVPN (#2989) by @Lanlan13-14
- 0e7c3c79 feat: support restls for anytls outbound and listener by @wwqgtxx
- 2b2bdf6d feat: support jls for shadowsocks outbound and listener by @wwqgtxx
- 5677fd38 feat: add name-cert-verify to support separate certificate verification name by @wwqgtxx
- 611a4481 feat: support jls for vmess/vless/trojan outbound and listener by @wwqgtxx
- 6d96163e feat: support override-expr for proxy provider override by @wwqgtxx
- 769ea6f5 feat: support restls for vmess/vless/trojan outbound and listener by @wwqgtxx
- 76d80883 feat: add support for TLSAuth for Openvpn (#2969) by @lyaaz
- 8fe7f748 feat: support jls for anytls outbound and listener by @wwqgtxx
- 9ab75434 feat: support restls/jls for snell outbound and listener by @wwqgtxx
- aea5ce41 feat: support shadowquic outbound and listener by @wwqgtxx
- bc0e5aa8 feat: support shadowtls for anytls outbound and listener by @wwqgtxx
- bfa9ea1d feat: support brutal for shadowquic (mihomo private extension) by @wwqgtxx
- c015694b feat: support shadowtls for vmess/vless/trojan outbound and listener by @wwqgtxx
BUG & Fix
- 02dfcf2b fix: incorrect alphabet size used in session-table for predefined tables in xhttp-config by @SaltyMonkey
- 0ee58417 fix: reconnect OpenVPN on server soft reset (#2978) by @freephilx
- 12c30af9 fix: wireguard per-peer reserved ignored (#2958) by @AaronChen0
- 2b0d8411 fix: make shadowtls v2 read deadlines recoverable by @wwqgtxx
- 2c7309e2 fix: listener duplicate-name check (#2948) by @AaronChen0
- 3766a087 fix: set global CA pool and NTP time for restls by @wwqgtxx
- 41549236 fix: stop reaper goroutine busy-looping after context cancel (#2964) by @AaronChen0
- 45f79309 fix: CNAME query matching a hosts domain-entry returns an empty answer (#2965) by @AaronChen0
- 75a3ea8b fix: leaked openStreams on failure in TUIC client (#2959) by @AaronChen0
- 7a3c37cb fix: make shadowtls v3 read deadlines recoverable by @wwqgtxx
- 8507c1e2 fix: missing override shadow-tls-opts and restls-opts in xhttp download-settings by @wwqgtxx
- 86984831 fix: the incorrect tls stack was used in shadowtls tests by @wwqgtxx
- 975389a1 fix: intermittent timeouts during the soak test by @wwqgtxx
- 9a7e7266 fix: performance regression caused by unnecessary wrapping in stream encryption by @wwqgtxx
- 9ae1cc2b fix: shadowquic JLS pre-flight fallback handle by @wwqgtxx
- a35045d9 fix: consume CachedConn data in ReadCached by @wwqgtxx
- a5167fa4 fix: allow JLS fallback before the server flight by @wwqgtxx
- a70af274 fix: remove unnecessary quinn-jls compatibility behavior by @wwqgtxx
- ba5c45b7 fix: anytls listener config parsing by @wwqgtxx
- c079b0cc fix: panic on full-width IP-SUFFIX rules (#2975) by @AaronChen0
- c5834396 fix: DOMAIN-WILDCARD ignores sniffed hostname (#2956) by @AaronChen0
- cb8cde8d fix: missing override jls-opts in xhttp download-settings by @wwqgtxx
- e8ab2d04 fix: alpnAwareRoundTripper behavior in mekya client by @wwqgtxx
- f86bc224 fix: align HelloRetryRequest handling with JLS v3 by @wwqgtxx
Maintenance
- 1d1b370e chore: remove redundant writeFull in snell v4 by @wwqgtxx
- 2d45f9ec chore: using new net/http api in mekya client by @wwqgtxx
- 309cfbd6 chore: reimplement shadowtls by @wwqgtxx
- 3b73922f chore: cleanup shadowquic code by @wwqgtxx
- 3f22309b chore: respect the incoming context during JLS fallback by @wwqgtxx
- 42361162 chore: better UserFromConn implementation by @wwqgtxx
- 44dd834f chore: preserve jls in-user for shadowsocks listeners by @wwqgtxx
- 46f9b786 chore: export internal OverrideExpr for api user by @wwqgtxx
- 4d7ef85a chore: sync logic to legacy shadowsocks listener by @wwqgtxx
- 5c1b8bfc chore: authenticate JLS ServerHello using its wire encoding by @wwqgtxx
- 6a52d23a chore: do not force trailing path / when both sessionID and seq are placed elsewhere for xhttp by @

What's Changed
- 90b1066e feat: add ping keepalive support for OpenVPN (#2859) by @puppywang
- fd2112ec feat: add built-in proxy PASS-RULE (#2873) by @ECHSFXY
- 1e62d554 feat: add empty-fallback to group options allows for customization instead of hardcoding COMPATIBLE by @wwqgtxx
- 317bfc20 feat: add allow-insecure config to anytls/trojan/vless listeners for nginx/caddy front users by @wwqgtxx
- 358fa5eb feat: add age-secret-key for proxy-provider and -age-secret-key for cmdline to support age armor format config decryption by @wwqgtxx
- bd72c65b feat: remove global-client-fingerprint, please set client-fingerprint directly on the proxy instead by @wwqgtxx
- e928ef59 feat: add path-in-bundle to rule-providers to support extract from BundleMRS.7z when the local file does not exist by @wwqgtxx
BUG & Fix
- 11848509 fix: quic sniffer out-of-bounds read causes process crash via single UDP packet by @Guanni Qu
- 1abd1261 fix: validation error handling for age-secret-key by @wwqgtxx
- 5184081a fix: socks4 readUntilNull unbounded memory allocation by @Guanni Qu
- 5bdb1cc7 fix: trojan protocol WaitReadFrom panic via oversized UDP relay length field by @Guanni Qu
- 9761bcd7 fix: exchangeQUIC not fully respecting context by @wwqgtxx
- c7100255 fix: readMsg in doq out-of-bounds access by @wwqgtxx
- dafdd06b fix: variable capture in dns outbound by @wwqgtxx
- dbaf85b7 fix: vision TLS filter out-of-bounds read via crafted session_id length by @Guanni Qu
Maintenance
- 01edf45c chore: improve internal api by @wwqgtxx
- 316f5df1 chore: add WithDialer option to component/http for api user by @wwqgtxx
- ab56858d chore: sync sudoku v0.4.7 optimizations (#2879) by @saba-futai
- b60e687e chore: support convert age-secret-key to age-public-key for build-in age tool by @wwqgtxx
- d7ac7b52 chore: support std input/output for age encrypt/decrypt tool by @wwqgtxx
- f99d4e1b chore: adjust internal age component api by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.26...v1.19.27

What's Changed
- 52edebd1 feat: add snell version 4/5 outbound and inbound (#2817) by @xream
- 7a6a6509 feat: support OpenVPN CBC ciphers (#2818) by @Romanov Caesar
- ff98700d feat: support CHACHA20-POLY1305 data cipher for OpenVPN (#2798) by @Lanlan13-14
- fc8c5a24 feat: support comp-lzo for OpenVPN (#2841) by @Zhiqiang Zhang
- 2dd7d599 feat: support MD5/SHA384/SHA512 OpenVPN auth methods by @wwqgtxx
- f1c36561 feat: support AES-192-GCM/AES-192-CBC OpenVPN data ciphers by @wwqgtxx
- f30a64f9 feat: support hysteria2 gecko obfs by @wwqgtxx
BUG & Fix
- 03e1f449 fix: interface structs do not copy correctly by @wwqgtxx
- 301d580d fix: compile issue of tailscale-wireguard-go dependency by @wwqgtxx
- 3809a03c fix: stack panic after dispatcher attach nil by @wwqgtxx
- 38cb06d3 fix: hysteria2 realm stun domain resolve by @wwqgtxx
- 4065583a fix: masque retry condition by @wwqgtxx
- 5639e93f fix: improve OpenVPN transport reliability (#2824) by @Romanov Caesar
- 8c26d61c fix: tproxy did not pass the additions correctly by @wwqgtxx
- a2aca027 fix: pinger in tailscale not under our control by @wwqgtxx
- a52a27ed fix: errors.ErrUnsupported backport by @wwqgtxx
- a531449b fix: missing param passing in vless listener config by @wwqgtxx
- b230c90d fix: shadowtls v3 client HMAC handling for TLS 1.3 HelloRetryRequest by @wwqgtxx
- d2fcf71c fix: tailscale panic when working with dialer-proxy by @wwqgtxx
- f69331f4 fix: config struct not exported by @wwqgtxx
Maintenance
- 060711fb chore: more netip.AddrPort using in tproxy by @wwqgtxx
- 0ddf4bbf chore: update sing-tun by @wwqgtxx
- 0dec35ed chore: always dial tcp on netstack for tailscale by @wwqgtxx
- 31ece04a chore: upgrade the embedded xsync.Map to v4.5.0 by @wwqgtxx
- 5b28a0ee chore: optimize sudoku packed hot paths (#2833) by @saba-futai
- 6e15299c chore: remove AF_ALG in tailscale-wireguard-go by @wwqgtxx
- 72f133f4 chore: more logging for tailscale debug by @wwqgtxx
- 8f2d84f9 chore: update mieru version to v3.33.0 (#2840) by @enfein
- a05c94b4 chore: make the proxydialer module no longer directly depend on the tunnel module by @wwqgtxx
- b1a07d20 chore: remove unnecessary member variables added by xsync/v3 by @wwqgtxx
- cb652ddb chore: make the handler-related SNAT key in NewPacket by @wwqgtxx
- d27f3201 chore: use pre-go1.27 tls.QUICConfig.ClientHelloInfoConn API for quic-go to avoid cloning tls.Config by @wwqgtxx
- d60b336d chore: use mihomo name & ver to tailscale reported ver to avoid update prompts (#2801) by @ayanamist
- d610afef chore: clear parameter passing by @wwqgtxx
- e9e23c4e chore: tailscale must be compiled under the with_gvisor build tag by @wwqgtxx
- f2da5b7c chore: reduce internal circular dependencies by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.25...v1.19.26

What's Changed
- 571925d2 feat: add Tailscale outbound support (#2786) by @汐殇
- 7af9eeb3 feat: add OpenVPN outbound support (#2785) by @Romanov Caesar
- 6ea4373e feat: support auth-user-pass and AES-256-GCM for OpenVPN (#2787) by @Ekko
- 5e220351 feat: add GOST relay outbound proxy type (#2795) by @ztywyj
- 98aa7e63 feat: support realm-opts for hysteria2 outbound and listener by @wwqgtxx
- 787dbfc5 feat: support setting realm-opts.proxy for hysteria2 listener by @wwqgtxx
- 2ffd9628 feat: support hysteria2-realm listener by @wwqgtxx
- 8b8eae56 feat: support simple-obfs for shadowsocks listener by @wwqgtxx
BUG & Fix
- 0003e143 fix: trusttunnel listener panic by @wwqgtxx
- 17bed79b fix: tsnet panic for tailscale by @wwqgtxx
- 2f51cb03 fix: conn maybe not closed in error handling by @wwqgtxx
- 2f6ce20f fix: tailscale not use configured dialer for captive detection by @wwqgtxx
- 35d5d4e4 fix: CVE-2026-39825 for net/http by @wwqgtxx
- 388d958a fix: remove unstable warning for tailscale by @wwqgtxx
- 5df45b25 fix: typo in default alpn by @wwqgtxx
- 7a646e8d fix: correctly configure the HTTP/2 scheduled ping parameters in masque h2 mode by @wwqgtxx
- 802b0b24 fix: netlink permission denied on android for tailscale by @wwqgtxx
- 8a28dce5 fix: validate Linux process netlink matches by @xream
- 95946a5f fix: net/http.Transport's UnencryptedHTTP2 does not work TLS without ALPN by @wwqgtxx
- 98aa42ed fix: convert place disguise host in h2-opts.host for legacy base64-JSON VMess (#2739) by @wangwei354
- 9e97dc05 fix: tailscale not use configured dialer for netstack forwardTCP by @wwqgtxx
- aae58120 fix: net/http.Server's UnencryptedHTTP2 does not work TLS without ALPN by @wwqgtxx
- b3104a52 fix: panic in vless xhttp h3 mode when quic dial fails (#2736) by @beck
- cc376acc fix: skip TTL update for OPT records by @wwqgtxx
- d2acf450 fix: hysteria2 realm server reaper loop by @wwqgtxx
- e933ca82 fix: netlink permission denied on android for tailscale by @wwqgtxx
- f5cfb8d2 fix: convert emit HTTP2Options-shaped h2-opts for share-link HTTP/2 transport (#2737) by @wangwei354
- fd314191 fix: wrong function call in SetWriteDeadline (#2790) by @Aaron Chen
- ffe6e42c fix: conn maybe not closed in error handling by @wwqgtxx
Maintenance
- 00e6df50 chore: close http2 connections when closing client in doh by @wwqgtxx
- 028b480a chore: remove unused http server code by @wwqgtxx
- 163ce6ab chore: add mlkem768x25519-sha256 key exchange algorithm to ssh outbound by @wwqgtxx
- 1fea5515 chore: verify adapter can parse convert's result in its test by @wwqgtxx
- 263d06d1 chore: allow passing tunnel when creating the proxy by @wwqgtxx
- 2a8da25d chore: handle the possibility of multiple ClientTrace.GotConn calls by @wwqgtxx
- 2d94970c chore: using new net/http api in masque h2 mode by @wwqgtxx
- 2f11d963 chore: use our internal DNS resolution logic for tailscale by @wwqgtxx
- 3d3af1f4 chore: respect outbound dns prefer when resolve UDP by @wwqgtxx
- 3fb93bd7 chore: using new net/http api in gun and xhttp listener by @wwqgtxx
- 44c94236 chore: code cleanup by @wwqgtxx
- 81bea659 chore: using new net/http api in vmess h2 client by @wwqgtxx
- 82621cd1 chore: always safe UUID generation by @wwqgtxx
- 8bc7d3e5 chore: using new net/http api in doh client by @wwqgtxx
- 8d539528 chore: remove unused xhttp options in download-settings by @wwqgtxx
- 8f69ad9e chore: better uuid generation by @wwqgtxx
- 993d1b64 chore: add stun retry and lazy server start for realm by @wwqgtxx
- a1c68a43 chore: using new net/http api in reality client fallback by @wwqgtxx
- ac6f6d04 chore: tailscale using ListenPacket for UDP by @wwqgtxx
- b03aa5d5 chore: remove race code in wireguard implementation by @wwqgtxx
- b8b44394 chore: using new net/http api in trusttunnel listener by @wwqgtxx
- bb2f57b0 chore: using new net/http api in xhttp client by @wwqgtxx
- c27446a5 chore: using new net/http api in gun client by @wwqgtxx
- c59c99a0 chore: handle context cancellation in xhttp client dialing by

What's Changed
- cacd01a3 feat: add h3 mode support for xhttp client (#2686) by @HanaHime
- 61dc7b10 feat: add http1.1 mode support for xhttp client by @wwqgtxx
- 2337d70d feat: support xhttp new options for bypassing CDN's potential detection by @wwqgtxx
- 6791df12 feat: support h-keep-alive-period to xhttp reuse-settings by @wwqgtxx
- 700e25fd feat: support sc-max-buffered-posts for xhttp listener by @wwqgtxx
- f109b8b0 feat: support range format for xhttp sc-max-each-post-bytes by @wwqgtxx
- ad91303f feat: support upload packet merging in packet-up mode and sc-min-posts-interval-ms settings for xhttp transport by @wwqgtxx
- a8472466 feat: convert support new xhttp-opts fields (#2734) by @legiz-ru
- 80072ebb feat: support range format for hysteria2 hop-interval by @wwqgtxx
- 1b2ea145 feat: support ipv6 dual stack fallback for masque/trusttunnel/xhttp h3 mode by @wwqgtxx
- 808c0d62 feat: support ipv6 dual stack fallback for hysteria2 by @wwqgtxx
- fdafea36 feat: support ipv6 dual stack fallback for tuic by @wwqgtxx
- 885244a9 feat: support network: h2 for masque outbound by @wwqgtxx
- db259326 feat: support bbr-profile for hysteria2/tuic/trusttunnel/masque by @wwqgtxx
- d701d1c0 feat: add -post-up and -post-down flags for cmdline by @wwqgtxx
- 8a029da5 feat: add /storage endpoint with Get, Put, and Delete methods for restful api by @Zephyruso
BUG & Fix
- 0495d295 fix: convert normalize VLESS share-link transport mapping (#2694) by @slackworker
- 0f71808c fix: masque h2 conn lifecycle management by @wwqgtxx
- 299a63f8 fix: quic underlay packetConn maybe not closed in doh3/doq by @wwqgtxx
- 299fd337 fix: race in websocket with early data by @wwqgtxx
- 2fbed16d fix: don't add ":80" to Host for vmess http obfs by @wwqgtxx
- 4387c674 fix: race for hysteria2 salamander by @wwqgtxx
- 4f927ca1 fix: CVE-2026-33814 for net/http by @wwqgtxx
- 6fb9d9e4 fix: max payload size estimation on datagram queueing for quic-go by @wwqgtxx
- 83ac220f fix: convert accept obfs/obfs-host as aliases for mode/host in ss v2ray-plugin URL (#2712) by @beck
- 9613f02a fix: random panic by race in proxy id init by @wwqgtxx
- 96a6962b fix: quic underlay packetConn maybe not closed in masque by @wwqgtxx
- acc4f626 fix: quic underlay packetConn not closed in trusttunnel h3 mode by @wwqgtxx
- b00c9857 fix: race in h2mux read by @wwqgtxx
- d4b3d236 fix: race in trusttunnel read by @wwqgtxx
- db63ffbb fix: quic underlay packetConn not closed in xhttp h3 mode by @wwqgtxx
- e4099f0f fix: prevert body not close where conn is already closed before setup for sing-mux and trusttunnel by @wwqgtxx
- ec664a51 fix: option name typo in listener by @wwqgtxx
- f0ad835d fix: BBR scale window for datagram size by @wwqgtxx
- fcbcd10b fix: race in quic get congestion by @wwqgtxx
Maintenance
- 03253614 chore: add test for xhttp over vless encryption by @wwqgtxx
- 0e0265fd chore: simplify gotConn handling by @wwqgtxx
- 1bee5901 chore: reduce data copy in read packet for masque by @wwqgtxx
- 20cb280c chore: simplify error handling code by @wwqgtxx
- 2247c0eb chore: async xhttp RoundTrip to let some CDN/reverse proxy happy (#2719) by @kyber1024
- 2cfff83e chore: let xhttp server passing stream-one and stream-up mode test under http1 by @wwqgtxx
- 37942ce9 chore: remove unused timeout in socks5 over tls by @wwqgtxx
- 3d6add33 chore: align internal logic by @wwqgtxx
- 3f2b0ba6 chore: test dialer should be created by test tunnel by @wwqgtxx
- 4814c727 chore: add mode restrictions test back by @wwqgtxx
- 49858024 chore: add test for packet upload queue by @wwqgtxx
- 5b013f25 chore: code cleanup by @wwqgtxx
- 6b076839 chore: better DialQuic interface by @wwqgtxx
- 6c407f0f chore: rebuild upload queue logic by @wwqgtxx
- 7ab4eed8 chore: handling edge cases where the transport may dial more than once in test by @wwqgtxx
- 7abf2904 chore: update quic congestion pacer by @wwqgtxx
- 7b737755 chore: add short circuit logic for dual stack dial to decrease unnecessary goroutine by @wwqgtxx
- 7e833

What's Changed
- d1319912 feat: add reuse-settings support for vless xhttp (aka xmux) (#2670) by @Nemu-x
- f3b05818 feat: convert support xhttp subscriptions (#2671) by @legiz-ru
- 4f5ad974 feat: convert support xhttp reuse-settings (aka xmux) (#2675) by @legiz-ru
- 77095546 feat: add max-connections, min-streams and max-streams options to grpc-opts by @wwqgtxx
- 7f6ac1db feat: support sc-stream-up-server-secs and no-sse-header for xhttp listener by @wwqgtxx
- 8b37e99f feat: support sc-max-each-post-bytes for xhttp client and listener by @wwqgtxx
- caacf7a9 feat: add max-connections, min-streams and max-streams options to trusttunnel client by @wwqgtxx
- Updated to the Golang 1.26.2 toolchain, fixing some security CVEs.
BUG & Fix
- 49e58541 fix: CVE-2026-32283 for crypto/tls by @wwqgtxx
- 5d8e2d2b fix: gun reader error handling by @wwqgtxx
Maintenance
- 0cb51414 chore: respect mode restrictions for xhttp listener by @wwqgtxx
- 3db64d03 chore: add get tls connection state function in component/tls by @wwqgtxx
- 428b7ad9 chore: remove unneeded io.ReadFull in gun reader by @wwqgtxx
- 4730f675 chore: update sing-tun by @wwqgtxx
- 5e8bd85f chore: skip kcptun test on windows go1.20 by @wwqgtxx
- 6687ae13 chore: better stream-up server implement by @wwqgtxx
- 6a2b0dbd chore: optimized sudoku read/write performance (#2678) by @saba-futai
- 78e4b844 chore: remove unused code in h2ConnWrapper by @wwqgtxx
- 7923f1ab chore: rebuild reuseManager code by @wwqgtxx
- 871e6d14 chore: rebuild xhttp inbound test by @wwqgtxx
- 979305d2 chore: cleanup condition for authentication by @wwqgtxx
- 97c526f4 chore: add TLSConn interface and not depend on *tls.Conn type for our net/http fork by @wwqgtxx
- 98b24999 chore: align internal logic by @wwqgtxx
- 9f38a266 chore: follow upstream server's keepalive settings for http proxy by @wwqgtxx
- c48f592d chore: merge duplicate code by @wwqgtxx
- e5f05aa7 chore: don't need to close connection if content length is positive numbers for http proxy by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.23...v1.19.22

What's Changed
- 18fcfc31 feat: support parsing mierus subscription link (#2657) by @enfein
- 357f1ad0 feat: implement xhttp stream-up and download-settings support (#2655) by @Nemu-x
- 530c6b43 feat: add xhttp transport support (#2645) by @Nemu-x
- 56379b77 feat: implement download-settings for packet-up mode by @wwqgtxx
- 61c13586 feat: add ping-interval to grpc-opts by @wwqgtxx
BUG & Fix
- 0a05ef88 fix: custom grpc-user-agent not working (#2620) by @Alex
- 2d34ecff fix: panic on trojan dial error by @wwqgtxx
- 31486436 fix: close conn after peek failed in mixed listener (#2621) by @hunshcn
- 416f7697 fix: default xhttp padding to 100-1000 when not set (#2647) by @Nemu-x
- 576a4428 fix: remove unused sc-max-concurrent-posts option (#2654) by @Nemu-x
- 60f32054 fix: conceal the h2-special typed error for gun server by @wwqgtxx
- 719d3eb2 fix: prevent deadlock in gun.Conn.Close when initReader is in progress (#2651) by @beck
- 7e6a7d72 fix: incorrect use the request context in trusttunnel client by @wwqgtxx
- 7fdc1228 fix: remove incomplete xhttp config options (#2648) by @Nemu-x
- 809aee85 fix: crash on armv7 synology's linux by @wwqgtxx
- ba42eb4a fix: multiple hosts unsupported by net/url after go1.26 by @wwqgtxx
- c36090ad fix: download servername override by @wwqgtxx
- d0f33125 fix: incorrect OPT RR filter order (#2634) by @woaihsw
- dd3a1494 fix: transport not closed in xhttp client by @wwqgtxx
- e28fe24f fix: incorrect use of hyphen by @wwqgtxx
- f82a3653 fix: correct inverted error check in getTunnelName (#2659) by @Rulong Chen（陈汝龙）
Maintenance
- 0120b1d7 chore: add logging for get tun name from fd by @wwqgtxx
- 018a2918 chore: better lifecycle management by @wwqgtxx
- 08a3aaa3 chore: rebuild gun code by @wwqgtxx
- 132800eb chore: more code sharing by @wwqgtxx
- 29fed6ed chore: rebuild packet up writer by @wwqgtxx
- 3a3a5b6f chore: move xhttp configuration checks to proxy created by @wwqgtxx
- 4500802b chore: update proxygroup interface by @wwqgtxx
- 45587c52 chore: adjust sing-mux test by @wwqgtxx
- 6517d2a9 chore: align with legacy behavior by @wwqgtxx
- 73465fea chore: align to sudoku v0.4.0 (#2661) by @saba-futai
- 77a4cc46 chore: code cleanup by @wwqgtxx
- 7d6ee8dc chore: move sharing code to common/httputils by @wwqgtxx
- 7fd98605 chore: unify internal coding style by @wwqgtxx
- 8795cd69 chore: clean up unused function args by @wwqgtxx
- 8c6c6d57 chore: align the way of getting addr and deadline in conn by @wwqgtxx
- 9664ca2d chore: add procfs fallback for android findProcess (#2639) by @Alexandr Andreev
- ae374f61 chore: remove unreachable code by @wwqgtxx
- b3c81602 chore: reduce the inherent 1rtt in httpmask mode for sudoku (#2610) by @saba-futai
- c3dc85ef chore: rebuild xhttp stream-up and download-settings code by @wwqgtxx
- c9bc2d39 chore: don't modify msg when getting minimalTTL by @wwqgtxx
- db367871 chore: update patch file for goissue77975 by @wwqgtxx
- dd4eb63c chore: avoid the request context never being canceled in trusttunnel client by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.21...v1.19.22

What's Changed
- 20bf57c1 feat: add disable-reuse params for DoT by @wwqgtxx
- 4ca51589 feat: support trusttunnel inbound and outbound by @wwqgtxx
- 90337171 feat: sudoku support ws transport (#2589) by @saba-futai
- c251e411 feat: support mieru traffic pattern configuration (#2585) by @enfein
BUG & Fix
- 05fbf552 fix: make User-Agent check case-insensitive (#2566) by @Panda
- 3035ae89 fix: correct typo in ProxyGroup health check log message (#2575) by @Hung-I Wang
- 3752cb04 fix: CVE-2026-26958 of filippo.io/edwards25519 by @wwqgtxx
- 445083b6 fix: override interface-name broken by @wwqgtxx
- 4c35436b fix: race condition in mieru inbound test (#2606) by @enfein
- 50480406 fix: rollback sing-tun commit by @wwqgtxx
- 5eaf5d16 fix: quic gso maybe not working with pppoe by @wwqgtxx
- 68ca83f2 fix: windows crash for golang1.26 on WSARecvFrom syscall by @wwqgtxx
- 7bdeaabb fix: update patch file for go1.26.1 by @wwqgtxx
- 9dee264f fix: udp/icmp not work on gso with system stack by @wwqgtxx
- a2bf158b fix: protobuf cause various binaries are significantly bigger when building with Go 1.26 by @wwqgtxx
- b7b05e07 fix: udp/icmp not work on gso with mixed stack by @wwqgtxx
- c68af864 fix: update patch file for go1.25.8 by @wwqgtxx
- dda1d525 fix: unable to start mieru inbound when traffic-pattern is not set (#2590) by @enfein
- df1a244d fix: regression segfault on linux 3.4 on mipsle by @wwqgtxx
- e4143cf1 fix: tun doesn't clean up the DNS setting in systemd-resolved when closed by @wwqgtxx
Maintenance
- 002e457d chore: rollback to the generic method for handling UTLS fingerprints by @wwqgtxx
- 00459357 chore: add some UTLS fingerprint names that explicitly do not contain X25519MLKEM768 by @wwqgtxx
- 30391b40 chore: unified UA settings method by @wwqgtxx
- 3aa668c5 chore: update patch file for goissue77975 by @wwqgtxx
- 43509da1 chore: simplify gun code by @wwqgtxx
- 60a93120 chore: structure support remain-tagged field by @wwqgtxx
- 6eb27ac3 chore: align with legacy behavior by @wwqgtxx
- 7f772de8 chore: simplify masque certificate verification by @wwqgtxx
- 836c972c chore: cleanup unreachable code by @wwqgtxx
- 9fda032a chore: structure unifies the way to handle top-level and sub structs by @wwqgtxx
- a48da7de chore: simplify reality verifier code by @wwqgtxx
- a949ad88 chore: update golang to 1.26 by @wwqgtxx
- bf610c3a chore: update dependencies by @wwqgtxx
- c3399fd3 chore: better logging for removed configurations by @wwqgtxx
- fcf780a0 chore: reopen mieru inbound windows test by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.20...v1.19.21

What's Changed
- 828fd30d chore: support connection reuse for DoT by @H1JK
- 3c526ae0 feat: add query-server-name for ech-opts by @wwqgtxx
- dede56fe feat: add proxy-server-nameserver-policy to dns section by @wwqgtxx
- e45c8961 feat: support masque outbound by @wwqgtxx
- f94da9f2 chore: fingerprint verifier handle non-leaf certificate will check the SNI matches the certificate's DNS name by @wwqgtxx
BUG & Fix
- 2cfc4ba0 fix: CVE-2025-68121 for crypto/tls again and again by @wwqgtxx
- 32799662 fix: quic data race for crypto/tls by @wwqgtxx
- 3ac62152 fix: race condition of tcpConcurrent in dialer (#2556) by @Chenx Dust
- 75a0cd5a fix: file exists when tun start by @wwqgtxx
- 85c024a4 fix: snat key in sudoku packet listener by @wwqgtxx
- d18a14af fix: snat key in trojan packet listener by @wwqgtxx
- e3b8fc2b fix: hy2 listener panic with http/https masquerade by @wwqgtxx
- f52c9356 fix: CVE-2025-68121 for crypto/tls again by @wwqgtxx
Maintenance
- 022f6773 chore: cleanup hostValue code by @wwqgtxx
- 034f1d1e chore: disallow empty proxy-server-nameserver when proxy-server-nameserver-policy is set by @wwqgtxx
- 0c995a24 chore: move proxiesWithProviders to hub/route internal to disallow external usage of this poorly implemented function by @wwqgtxx
- 18d139a1 chore: rollback tls to restore the session resumption functionality in quic-go by @wwqgtxx
- 1e1434d1 chore: remove an unnecessary variable by @wwqgtxx
- 26052ba5 chore: remove confused varbin using in sing by @wwqgtxx
- 27a3ca6a chore: converter support fingerprint for vmess/vless/trojan by @wwqgtxx
- 3bca69c7 chore: add some comments for the fingerprint verifier by @wwqgtxx
- 46ee1649 chore: hy2 listener fellow hysteria2's code skip verify in https masquerade by @wwqgtxx
- 5516ca18 chore: code cleanup by @wwqgtxx
- 5e1b133e chore: more callback support for utls by @wwqgtxx
- 5fda87d5 chore: update sing-tun by @wwqgtxx
- 65c3d3e4 chore: remove unreachable code in sudoku by @wwqgtxx
- 6aaabc97 chore: decrease unneeded string convert in socks5 addr parsing by @wwqgtxx
- 707fe8b2 chore: remove auto IDNA conversion in domain rules by @wwqgtxx
- 710772f9 chore: add simple validation for static dialer-proxy config (#2551) by @sleshep
- 7573affd chore: better logging in masque outbound by @wwqgtxx
- 86257fc8 chore: remove reflect-based provider override code by @wwqgtxx
- 8b0bcb67 chore: better generator by @wwqgtxx
- 97f25250 chore: code cleanup by @wwqgtxx
- 98b30605 chore: optimize timeout control in DoH TLS probe by @wwqgtxx
- 993595df chore: switch to our own common/orderedmap package, remove two unneeded json dependence by @wwqgtxx
- b9010064 chore: using mihomo's global pool in DoQ by @wwqgtxx
- c33c90d7 chore: clean up duplicate code in sudoku by @wwqgtxx
- d36b024b chore: align sudoku with upstream v0.2.0 (#2549) by @saba-futai
- e03ba23f chore: update logrus by @wwqgtxx
- f2222b5e chore: code cleanup by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.19...v1.19.20

What's Changed
- 06387d50 feat: support fake-ip-filter-mode: rule mode (#2469) by @David
- 06f5fbac feat: add path-root for sudoku (#2511) by @saba-futai
- 0ad9ac32 feat: support aes-128-gcm, ratelimit and framesize for kcptun by @wwqgtxx
- 19a6b5d6 feat: support rule disabling and hit/miss count/at tracking in restful api (#2502) by @potoo0
- 487de9b5 feat: add PROCESS-NAME-WILDCARD and PROCESS-PATH-WILDCARD by @wwqgtxx
- 498f81aa feat: add header support for rule provider (#2463) by @joshua
- 4d767033 feat: all dns client support disable-qtype-<int> params by @wwqgtxx
- 7daf37bc feat: support http-mask-mode, http-mask-tls and http-mask-host for sudoku (#2456) by @saba-futai
- d6b12632 feat: support http-mask-multiplex for suduko (#2482) by @saba-futai
- f38fc202 feat: add grpc-user-agent to grpc-opts (#2512) by @Shaw
- 97bce45e chore: deprecated global-client-fingerprint, please set client-fingerprint directly on the proxy instead by @wwqgtxx
- Note: This version includes fixes for several security vulnerabilities in the utls and Golang tls standard libraries.
BUG & Fix
- 10f4bebd fix: only clear dstIP if it is confirmed to be a fake IP by @wwqgtxx
- 1a6230ec chore: update mieru version (#2484) by @enfein
- 4f0a6fa1 fix: gvisor panic by @wwqgtxx
- c393e917 fix: gvisor compatibility on go1.26 by @wwqgtxx
- c456370f fix: missing context cancel in pullLoop by @wwqgtxx
- c5b0f00b fix: logic issues with BBR impl by @Toby
- e6bf56b9 fix: os.(*Process).Wait not working on Windows7 by @wwqgtxx
- e6c0e3b1 fix: handle geoip:lan when GetRecodeSize() (#2460) by @HolgerHuo
- edbfebea fix: CVE-2025-68121 for crypto/tls by @wwqgtxx
- ee37a353 fix: incorrect timestamp conversion in brutal by @wwqgtxx
Maintenance
- 0818aa54 chore: provider a common entrance for YAML package by @wwqgtxx
- 0cf37de1 chore: better time storage in rule wrapper by @wwqgtxx
- 0cffc8d7 chore: revert "chore: update quic-go to 0.58.0" by @wwqgtxx
- 0f2baca2 chore: refactored the implementation of suduko mux (#2486) by @saba-futai
- 10ef29f5 chore: apply global ca in sudoku code by @wwqgtxx
- 11000dcc chore: add common/deque package by @wwqgtxx
- 1a6230ec chore: update mieru version (#2484) by @enfein
- 1f8bee97 chore: force to disable mptcp for tproxy by @wwqgtxx
- 287f9e51 chore: temporarily skip mieru inbound test in go1.26 on windows by @wwqgtxx
- 4f9bfd21 chore: add some comments for the finalizer by @wwqgtxx
- 64015b76 chore: update quic-go to 0.58.0 by @wwqgtxx
- 85ba7f6a chore: change import paths in sudoku code by @wwqgtxx
- 9168bee6 chore: align internal logic by @wwqgtxx
- 94c8d60f chore: simplified logic rule parsing by @wwqgtxx
- ae6069c1 chore: moving rules disabled and hit/miss counts data to extra for restful api (#2503) by @potoo0
- b18a3355 chore: remove unused pointer in rules implements by @wwqgtxx
- c128d23d chore: update quic-go to 0.59.0 by @wwqgtxx
- c8e33a43 chore: decrease rule wrapper memory usage by @wwqgtxx
- cdabd1e8 chore: update utls by @wwqgtxx
- eb30d3f3 chore: add a code comment for tproxy listener by @wwqgtxx
- efb80086 chore: update quic-go to 0.58.1 by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.18...v1.19.19

What's Changed
- e4cdb9b6 feat: add uot for sudoku (#2415) by @saba-futai
- 2211789a chore: add customized byte style for sudoku (#2427) by @saba-futai
- 25041b59 chore: sudoku support enable-pure-downlink mode to increase download bandwidth (#2419) by @saba-futai
- 4a723e8d chore: allow automatic reloading when the TLS server's certificate, private-key or ech-key is a local file by @wwqgtxx
- 5585304d chore: allow custom path for gRPC (grpc-service-name start with /) by @wwqgtxx
- a06097c2 chore: add xvp rotation andd new header generation strategy for sudoku (#2437) by @saba-futai
- The group with relay type (which was marked as deprecated in v1.18.6) was completely removed in v1.19.17, please using dialer-proxy instead
BUG & Fix
- 17966b54 fix: close sing-tun maybe panic on windows by @wwqgtxx
- 1ebcb25e fix: typo in sniffer skip-dst-address config parsing (#2446) by @Howard20181
- 91f5593f fix: structure ignore tag not working in nest struct by @wwqgtxx
- abb55199 fix: os.RemoveAll not working on Windows7 by @wwqgtxx
- b753a57e fix: ech not work with websocket+clientFingerprint by @eric-gitta-moore
- bc8f0dcf fix: missing ntp call by @wwqgtxx
- d33dbbe2 fix: QUIC events with session tickets disabled will panic on Go 1.26 by @wwqgtxx
- e652e277 fix: missing ProxyInfo information in wireguard outbound by @wwqgtxx
Maintenance
- 17b8eb87 chore: skip icmp forwarding when destination in tun interface addr range by @wwqgtxx
- 1cab34d2 chore: update quic-go to 0.57.1 by @wwqgtxx
- 2a1b3b2a chore: allow sudoku inbound handle sing-mux request by @wwqgtxx
- 30891f87 chore: sharing sudoku internal code by @wwqgtxx
- 32ce5139 chore: discard domain addr input in sudoku uot by @wwqgtxx
- 35a1130c chore: use HasPrefix instead of Contains for key checks (#2447) by @Howard20181
- 40863d24 chore: add lock in baseProvider for thread-safe by @wwqgtxx
- 6539b509 chore: restful api contains providerChains for connections by @wwqgtxx
- 6b40072b chore: support find process on freebsd 14 and 15 (#2422) by @Vincent-Loeng
- 7cd58fbd chore: add DialerForAPI to outbound option for library user by @wwqgtxx
- 7e8c2876 chore: improve HTTPS RR logging (#2431) by @eric-gitta-moore
- 827cd616 chore: cleanup import path by @wwqgtxx
- 87c3f700 chore: add TODO comment to ca.LoadCertificates by @wwqgtxx
- 90470ac3 chore: cleanup import path for common/net by @wwqgtxx
- 936ebc77 chore: add echparser package for parse ECHConfigList and ECHConfig by @wwqgtxx
- 93cf46e4 chore: remove unused import path by @wwqgtxx
- 9a5e506f chore: simplify server config and add keygen for sudoku (#2407) by @saba-futai
- 9df8392c chore: clean up internal interface definitions by @wwqgtxx
- ac905435 chore: code cleanup by @wwqgtxx
- b509affe chore: simplify DNSPrefer serialization process by @wwqgtxx
- b5fa3ee9 chore: restful api contains provider-name for proxies by @wwqgtxx
- b92b3870 chore: update ech handling by @wwqgtxx
- bc719eb9 chore: simplify tuic client by @wwqgtxx
- bc9db11c chore: hub/route module handle websocket itself by @wwqgtxx
- c33d9ad8 chore: cleanup sudoku internal code by @wwqgtxx
- cbcacdbb chore: using tls.Config.GetCertificate/GetClientCertificate to load TLS certificates by @wwqgtxx
- d2007fdc chore: improves thread safety in adapter by @xixu-me
- d8dcaa75 chore: add upTotal and downTotal data to /traffic restful api by @wwqgtxx
- e1384e86 chore: update http2 using in test by @wwqgtxx
- e7a04e07 chore: don't process msg.Extra in msgToHTTPSRRInfo by @wwqgtxx
- f44aa22d chore: add sudoku ed25519key test by @wwqgtxx
- fdb7cb1f chore: allow setting DialerForAPI in adapter.ParseProxy for library user by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.17...v1.19.18

What's Changed
- 5aa140c4 feat: support mieru UDP outbound (#2384) by @enfein
- 6cf17439 feat: add Sudoku protocol inbound & outbound support (#2397) by @futai (doc: outbound inbound)
- The group with relay type (which was marked as deprecated in v1.18.6) was completely removed, please using dialer-proxy instead
BUG & Fix
- 0df2f79e fix: missing metadata in mieru inbound by @wwqgtxx
- 2f545ef6 fix: hosts not working by @wwqgtxx
- 438d4138 fix: compare authentication scheme case-insensitively (#2386) by @TargetLocked
- 45fd6287 fix: bugs in kcp-go and smux by @wwqgtxx
- 5998956a fix: a nil pointer error when closing mieru underlay (#2401) by @enfein
- 8b6ba22b fix: replace wrong SetString() with SetBool() for uint weak-typed input (#2394) by @Sinspired
- c107c6a8 fix: crash due to nil net.Conn from mieru inbound (#2361) by @enfein
- d48bcf1e fix: fakeip6 logic not work correctly by @wwqgtxx
Maintenance
- 054e63cb chore: remove depend of purego by @wwqgtxx
- 0b3159bf chore: remove redundant code (#2355) by @hi
- 140d892c chore: better log by @wwqgtxx
- 4d3167ff chore: completely remove relay group type using dialer-proxy instead by @wwqgtxx
- 7571c87a chore: add fake-ip-ttl to dns section by @wwqgtxx
- 93de49d2 chore: sync sudoku with mihomo log (#2402) by @futai
- a001b1b1 chore: update mieru version (#2403) by @enfein
- d1f89fa0 chore: update tfo-go ready for go1.26 by @wwqgtxx
- e2796e2d chore: apply ping destination filter for windows by @wwqgtxx
- f6e494e7 chore: upgrade the embedded xsync.Map to v4.2.0 by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.16...v1.19.17

What's Changed
- a4b76809 feat: support mieru inbound (#2347) by @enfein
- c8af92a0 feat: support fake-ip-range6 in dns module by @wwqgtxx
BUG & Fix
- 5bc0ac72 fix: openbsd build by @wwqgtxx
- 6fb1f796 fix: handle nil pointer stored in non-nil interface (#2337) by @Restia-Ashbell
- 8b32c437 fix: race in kcp-go by @wwqgtxx
- 90f47a6d fix: openbsd build by @wwqgtxx
- 9ed9c3d1 fix: docker build by @wwqgtxx
- c2209d68 fix: vision panic with dialer-proxy by @wwqgtxx
- dcfe664a fix: strategyFn index out of range if proxies changed (#2330) by @vernesong
- f2bf4a07 fix: memory leak in h3 stream hijack by @wwqgtxx
Maintenance
- 1d5890ab chore: cleanup import path for constant/provider by @wwqgtxx
- 27b47f97 chore: structure support ignore tag by @wwqgtxx
- 421dc79a chore: cleanup default value in parseProxy by @wwqgtxx
- 5a285acd chore: reduce the global variables that should not be used in amneziawg-go by @wwqgtxx
- 644c04fd chore: update sing-tun by @wwqgtxx
- 6bffbdd9 chore: ignore ipv6 check when get interface addrs failed by @wwqgtxx
- 85c56e74 chore: revert ade42346 for convert speed by @wwqgtxx
- 87016393 chore: update bart by @wwqgtxx
- 926aaec7 chore: update purego by @wwqgtxx
- 99e68e99 chore: update dependencies by @wwqgtxx
- a3c023ae chore: cleanup import path for component/process by @wwqgtxx
- c25a3889 chore: share append chains logic by @wwqgtxx
- cfdaebe9 chore: check fake-ip-range and fake-ip-range6 are indeed ipv4 and ipv6 prefixes by @wwqgtxx
- f3edbc2b chore: remove unused code by @wwqgtxx
- fb1ae21f chore: remove unused code by @wwqgtxx
- fd39c2a7 chore: better maphash test by @wwqgtxx
- ff62386f chore: reduce internal dependencies of the ntp package by @wwqgtxx
- ff76576c chore: cleanup import path for listener by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.15...v1.19.16

What's Changed
BUG & Fix
Maintenance
- 40e08138 chore: adjust the internal code structure of the dns module by @wwqgtxx
- 94b591ed chore: separate the DNS enhancer config passing by @wwqgtxx
- d2256253 chore: update quic-go to 0.55.0 by @wwqgtxx
- da69b192 chore: remove unused global goroutine in kcp-go by @wwqgtxx
- de2ff37f chore: update utls by @wwqgtxx
- f45c6f5e chore: update quic-go to 0.54.1 by @wwqgtxx
- f7bd8b83 chore: revert "chore: consolidate mieru port configuration (#2277)" by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.14...v1.19.15

What's Changed
- 0ced98da feat: support sending ping requests via direct in tun mode by @wwqgtxx
- 0dc5e305 feat: add mTLS support for client & server (certificate and private-key for proxies, client-auth-type and client-auth-cert for listeners( by @wwqgtxx
- 571be856 feat: support mieru 0-RTT handshake (#2261) by @enfein
- 67867052 feat: remove ca and ca-str in hy1/hy2/tuic outbound, using fingerprint instead by @wwqgtxx
- 80a90f05 feat: support AmneziaWG v2.0 by @wwqgtxx
- 9a124a39 feat: add disable-icmp-forwarding option to tun (#2248) by @NuoFang
- abe6c3bb feat: support kcptun plugin for ss client/server by @wwqgtxx
- For macOS users: According to the Go wiki, Go 1.25 no longer supports macOS 11. macOS 11 users are advised to download the binary with the go124 tag, macOS 10.15 users are advised to download the binary with the go122 tag, and macOS 10.13 users are advised to download the binary with the go120 tag.
- Note: For amd64 platform, -amd64 and -amd64-compatible versions have been deprecated. -amd64-v1, -amd64-v2 and -amd64-v3 will be used to mark the CPU level. Please adapt the automatic update script in time for downstream projects.
BUG & Fix
- 02d954bf fix: server mux conn not close by @wwqgtxx
- 1b99759e fix: ntp time method not passing to ss2022 client by @wwqgtxx
- 23448ec1 fix: incomplete read filter in vision by @wwqgtxx
- 30bead4e fix: ntp not apply to reality client by @wwqgtxx
- 4188277b fix: tuic server goroutine leak by @wwqgtxx
- 455f2136 fix: xudp server source addr losing by @wwqgtxx
- 472cefb6 fix: snat key in packet listener by @wwqgtxx
- 6c527f8d fix: panic when wintun dll fails to load by @wwqgtxx
- 7061c5a8 fix: possible data location errors in vision read by @wwqgtxx
- 74e64d31 fix: maybe "invalid cross-device link" in update ui by @wwqgtxx
- 7e9e12cc fix: SyscallVectorisedPacketWriter not handle inet type in address processing by @wwqgtxx
- 8cdfd87d fix: ip4p port not apply in resolveUDPAddr by @wwqgtxx
- 909729ca fix: allow use vision on vless encryption over ws by @wwqgtxx
- 92ecdfcc fix: data race on darwin by @wwqgtxx
- 9cc208bd fix: reality shouldn't check chacha by @wwqgtxx
- a8f7e258 fix: backticks cannot be used to separate multiple regular expressions in the exclude-filter of proxy-providers by @wwqgtxx
- c4449a9f fix: ntp not apply to reality server by @wwqgtxx
- ccff0035 fix: get localAddr error by @wwqgtxx
- dd7b3c28 fix: race codes by @wwqgtxx
- f02766a7 fix: reshaping buffer maybe too long in vision by @wwqgtxx
- fed4b369 fix: auto update local file provider (#2245) by @nunu6689
Maintenance
- 00638f30 chore: don't test sing-mux over grpc by @wwqgtxx
- 0336d64e chore: cleanup vision code by @wwqgtxx
- 08fc100c chore: cleanup ntp code by @wwqgtxx
- 0992ee8a chore: remove depend of gopsutil by @wwqgtxx
- 0c258317 chore: replace HasAESGCMHardwareSupport in vless encryption by @wwqgtxx
- 0c556bca chore: replace hashicorp/yamux to our forked libp2p/go-yamux by @wwqgtxx
- 0d3d31dc chore: ready for handwritten addons parsing by @wwqgtxx
- 108bf645 chore: merge the server-side and client-side vision implementations by @wwqgtxx
- 1b1f95aa chore: consolidate mieru port configuration (#2277) by @enfein
- 1d09ed82 chore: simplify resolveUDPAddr by @wwqgtxx
- 2222d0e3 chore: update gvisor by @wwqgtxx
- 29872007 chore: sync vless encryption code by @wwqgtxx
- 29eaa4d6 chore: add test for memory module by @wwqgtxx
- 318b3524 chore: better handwritten addons parsing by @wwqgtxx
- 33cde659 chore: sync vless encryption code by @wwqgtxx
- 3a1caf13 chore: better batchConn handle in kcp-go by @wwqgtxx
- 3b63fef2 chore: better defensive programming by @wwqgtxx
- 40b2cde2 chore: cleanup dns client code by @wwqgtxx
- 45cb45ac chore: simplify randBetween by @wwqgtxx
- 50e1afd9 chore: cleanup vless code by @wwqgtxx
- 545d9b84 chore: sync vless encryption code by @wwqgtxx
- 57b527d5 chore: simplify GetMemoryInfo in darwin by @wwqgtxx
- 57e14e5b chore: cleanup internal ca using by @wwqgtxx
- 5c73025b chore: 

What's Changed
- 1b0c72bf feat: support vless encryption by @wwqgtxx client doc server doc
- 5f09db26 feat: support AmneziaWG v1.5 by @wwqgtxx doc
- dc52c381 fix: ? in DOMAIN-WILDCARD should match exactly one character https://github.com/MetaCubeX/mihomo/issues/2204 by @wwqgtxx
- ⚠️⚠️ Warning: Any GUI client with the word mihomo in its name is not related to this project and violates the license agreement. Please do not use these malicious software. ⚠️⚠️
- Note: For amd64 platform, -amd64 and -amd64-compatible versions have been deprecated. -amd64-v1, -amd64-v2 and -amd64-v3 will be used to mark the CPU level. Please adapt the automatic update script in time for downstream projects.
BUG & Fix
- 0f1baeb9 fix: updater may not be able to overwrite files directly by @wwqgtxx
- 0f76fdf4 fix: vision on vless encryption by @wwqgtxx
- 2605bf78 fix: add code signing for macOS executables during file copy by @xishang0128
- 26f60305 fix: 335d54e4 sync mistake by @wwqgtxx
- 2a915a5c fix: vless server close by @wwqgtxx
- 375e1603 fix: data loss in vision server read by @wwqgtxx
- 48f3ea8b fix: buffer handle in vision server read by @wwqgtxx
- 8e6be199 fix: h2mux client closed by @wwqgtxx
- 99e888c8 fix: missing WriterReplaceable for deadline.Conn by @wwqgtxx
- adf553a9 fix: generate doc by @wwqgtxx
- d2395fb4 fix: allow disabling ALPN by setting an empty array (#2225) by @eWloYW8
- e3d9a8e2 fix: vision on vless encryption by @wwqgtxx
- e89af723 fix: auto redirect panic by @wwqgtxx
- e8fddd85 fix: vless packetaddr not working by @wwqgtxx
- eca5a277 fix: mlkem768 logging by @wwqgtxx
Maintenance
- 00035302 chore: let /upgrade support channel and force as parameters in restful api by @wwqgtxx
- 03f4513f chore: sync vless encryption code by @wwqgtxx
- 0408da2a chore: sync vless encryption code by @wwqgtxx
- 0836ec6e chore: change time.Duration atomic using by @wwqgtxx
- 089766b2 chore: update TypedValue in sing by @wwqgtxx
- 0e9102da chore: don't test h2mux for the inbound by @wwqgtxx
- 10174d28 chore: update wireguard-go by @wwqgtxx
- 12c30acd chore: cleanup vision code by @wwqgtxx
- 16d95df1 chore: better wildcard test by @wwqgtxx
- 16ff9e81 chore: code cleanup by @wwqgtxx
- 182f60d4 chore: sync vless encryption code by @wwqgtxx
- 1ae050ca chore: sync vless encryption code by @wwqgtxx
- 27904817 chore: update cast using in sing-vmess by @wwqgtxx
- 2a8831b0 chore: sync vless encryption code by @wwqgtxx
- 335d54e4 chore: sync vless encryption code by @wwqgtxx
- 41b321df chore: sync vless encryption code by @wwqgtxx
- 438be2d3 chore: update mieru version (#2215) by @enfein
- 443200a5 chore: sync vless encryption code by @wwqgtxx
- 46dccf26 chore: sync vless encryption code by @wwqgtxx
- 48c1b1cd chore: remove depend on lunixbochs/struc by @wwqgtxx
- 4e20ed65 chore: sync vless encryption code by @wwqgtxx
- 578e659b chore: keep original file permissions when unpack in updater by @wwqgtxx
- 664ddb8d chore: simplifying generator code by @wwqgtxx
- 6c726d64 chore: test different http data size for inbound by @wwqgtxx
- 71290b05 chore: reimplement TypedValue by atomic.Pointer by @wwqgtxx
- 73925296 chore: add a confused benchmark for wildcard by @wwqgtxx
- 76e40bae chore: sync vless encryption code by @wwqgtxx
- 7960bcae chore: code cleanup by @wwqgtxx
- 7e0a77c9 chore: sync vless encryption code by @wwqgtxx
- 7f38763e chore: update hkdf using by @wwqgtxx
- 84086a6e chore: update dependencies by @wwqgtxx
- 854c6a13 chore: sync vless encryption code by @wwqgtxx
- 873d0dee chore: make XorConn replaceable for splice by @wwqgtxx
- 946b4025 chore: code cleanup by @wwqgtxx
- a0bdb861 chore: rebuild vless encryption string parsing by @wwqgtxx
- a18e99f9 chore: update dependencies by @wwqgtxx
- aca0d97b chore: sync vless encryption code by @wwqgtxx
- b31664be chore: sync vless encryption code by @wwqgtxx
- b41ea054 chore: add encryption to converter by @wwqgtxx
- b481eca4 chore: allow vision with vless encryption by @wwqgtxx
- b4c3bbf6 chore: sync vless encry

What's Changed
- 241ae92b feat: support DOMAIN-WILDCARD rule (#2124) by @ayanamist
- Note: For amd64 platform, -amd64 and -amd64-compatible versions have been deprecated. -amd64-v1, -amd64-v2 and -amd64-v3 will be used to mark the CPU level. Please adapt the automatic update script in time for downstream projects.
BUG & Fix
- 0d92b672 fix: add base64 decoding for VLESS host in ConvertsV2Ray function (#2125) by @JianGuo Wang
- 2b84dd36 fix: regex in logic rules by @wwqgtxx
- 30502017 fix: darwin system stack problem by @wwqgtxx
- 407c13b8 fix: hy2 server crash by @wwqgtxx
- 63ad95e1 fix: remove unconventional bits when unpacking for update_ui (#2178) by @白日梦主义
- 765cbbcc fix: miss config in patch by @wwqgtxx
- 79decdc2 fix: vision server crash by @wwqgtxx
- a37440c8 fix: some downstream dependencies on the upgrader's output fields by @wwqgtxx
- b06ec5be fix: add path safety check in file type providers (#2177) by @白日梦主义
- ba3e7187 chore: update mieru to v3.16.1 (#2138) by @enfein
- d84b182b fix: darwin tun mixed stack not working by @wwqgtxx
Maintenance
- 01cd7e2c chore: improve backup and replace logic in updater by @xishang0128
- 1a841532 chore: code cleanup by @wwqgtxx
- 300eb8b1 chore: rebuild rule parsing code by @wwqgtxx
- 349b773b chore: upgrade and embed the xsync.Map to v4 by @wwqgtxx
- 56c3462b chore: update quic-go to 0.53.0 by @wwqgtxx
- 5f1f2962 chore: add /cache/dns/flush to restful api by @wwqgtxx
- 63371512 chore: upgrade bbolt to 1.4.2 by @wwqgtxx
- 66fd5c9f chore: allow setting cache-max-size in dns section by @wwqgtxx
- 6a620ba2 chore: revert "chore: better dns batchExchange" by @wwqgtxx
- 6a9d4289 chore: remove unused code (#2126) by @Leo
- 6f4fe71e chore: update dependencies by @wwqgtxx
- 748b5df9 chore: keep original file permissions after update by @xishang0128
- 8cbae59d chore: upgrade bbolt by @wwqgtxx
- 8f18d3f6 chore: add recvmsgx and sendmsgx config to tun by @wwqgtxx
- 91985c1e chore: typo (#2127) by @phanium
- 9f1da117 chore: use the compile-time GOAMD64 flag in the updater by @wwqgtxx
- a9b7e705 chore: optimizing copyFile in updater by @wwqgtxx
- aa555ced chore: allow embedded xsync.Map to be lazily initialized by @wwqgtxx
- b9260e06 chore: improve darwin tun performance by @wwqgtxx
- ba3e7187 chore: update mieru to v3.16.1 (#2138) by @enfein
- c3a3009a chore: keep original file permissions when copyFile in updater by @wwqgtxx
- d4fbffd8 chore: update utls to 1.8.0 by @wwqgtxx
- deec7aaf chore: optimizing download in updater by @wwqgtxx
- dfe6e050 chore: rebuild core updater by @wwqgtxx
- fb043df1 chore: use canonical return value order by @xishang0128
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.11...v1.19.12

What's Changed
- 29a37f4f feat: all dns client support disable-ipv4 and disable-ipv6 params by @wwqgtxx
- 40587b62 feat: all dns client support skip-cert-verify params by @wwqgtxx
- 617fef84 feat: converter support anytls/socks/http (#2100) by @beck
- 85e6d25d feat: all dns client support ecs and ecs-override params by @wwqgtxx
- 9283cb0f feat: add loopback-address support for tun by @wwqgtxx
- Other incompatible updates are the same as v1.19.6~v1.19.10:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- For security reasons, the "path" parameter of /configs in the restful api has been restricted, and its directory also needs to be in workdir or SAFE_PATHS.
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
- Note: The workdir mentioned above is specified by the -d parameter when the program is started or the CLASH_HOME_DIR environment variable. If neither of the above is specified, the default is:
- on Unix systems, $HOME/.config/mihomo.
- on Windows, %USERPROFILE%/.config/mihomo.
- The DNS resolution of the overall UDP part has been delayed to the connection initiation stage. It will be triggered only when the IP rule without no-resolve is matched during the rule matching process.
- For direct and wireguard outbound, the same logic as the TCP part will be followed, that is, when direct-nameserver (or DNS configured by wireguard) exists, the resolution result in the rule matching process will be discarded and the domain name will be re-resolved. This re-resolution logic is only effective for fakeip.
- For reject and DNS outbound, no resolution is required.
- For other outbound, resolution will still be performed when the UDP connection is initiated, and the domain name will not be sent directly to the remote server.
BUG & Fix
- 31f0060b fix: chacha20 counter overflow by @wwqgtxx
- 32d447ce fix: convert https (#2102) by @beck
- 40ea0ba0 fix: correct constructor for 2022-blake3-chacha8-poly1305 by @wwqgtxx
- 5344e869 fix: ssr uri decode (#2116) by @Restia-Ashbell
- 5b975275 fix: incorrect checking of strings.Split return value by @wwqgtxx
- 6cfaf15c fix: missing error return by @wwqgtxx
- 71a87056 fix: remote dst parse by @wwqgtxx
- 8d7f947a fix: TypedValue.CompareAndSwap by @wwqgtxx
- ebf5918e fix: v2ray-plugin mux maybe not close underlay connection by @wwqgtxx
Maintenance
- 01f8f2db chore: cleanup allocator code by @wwqgtxx
- 082bcec2 chore: apply find process mode in direct/global mode by @wwqgtxx
- 166392fe chore: sniffer replace domain only if domain is valid (#2122) by @ayanamist
- 255ff5e9 chore: add rate limiting support for reality listener by @wwqgtxx
- 2f9a3b34 chore: cleanup code by @wwqgtxx
- 5c6aa433 chore: unconditionally allow clients with passwords for password-free socks5 inbound (#2123) by @ayanamist
- 85bb40aa chore: add Int32Enum for common/atomic by @wwqgtxx
- 87795e3a chore: add yaml marshal for common/atomic by @wwqgtxx
- 939e4109 chore: write dns reply in single syscall by @wwqgtxx
- 93ca1851 chore: converter support fingerprint for anytls by @riolurs
- ae7967f6 chore: the resolve and findProcess behaviors of Logic and SubRules follow the order and needs of the internal rules by @wwqgtxx
- c60750d5 chore: allow tun to skip the system ipv6 check when starting by environment variable SKIP_SYSTEM_IPV6_CHECK by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.10...v1.19.11

What's Changed
- The DNS resolution of the overall UDP part has been delayed to the connection initiation stage. It will be triggered only when the IP rule without no-resolve is matched during the rule matching process.
- For direct and wireguard outbound, the same logic as the TCP part will be followed, that is, when direct-nameserver (or DNS configured by wireguard) exists, the resolution result in the rule matching process will be discarded and the domain name will be re-resolved. This re-resolution logic is only effective for fakeip.
- For reject and DNS outbound, no resolution is required.
- For other outbound, resolution will still be performed when the UDP connection is initiated, and the domain name will not be sent directly to the remote server.
- In addition, the memory usage of the UDP part of tun inbound has also been optimized in this version.
- Other incompatible updates are the same as v1.19.6~v1.19.8:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- For security reasons, the "path" parameter of /configs in the restful api has been restricted, and its directory also needs to be in workdir or SAFE_PATHS.
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
- Note: The workdir mentioned above is specified by the -d parameter when the program is started or the CLASH_HOME_DIR environment variable. If neither of the above is specified, the default is:
- on Unix systems, $HOME/.config/mihomo.
- on Windows, %USERPROFILE%/.config/mihomo.
BUG & Fix
- 15eda703 fix: hysteria2 panic by @wwqgtxx
- 1db89da1 fix: quic sniffer should not replace domain when no valid host is read by @wwqgtxx
- 213d80c1 fix: quic sniffer should consider skipDomain by @wwqgtxx
- 33590c40 fix: destination should unmap before find interface by @wwqgtxx
- 4741ac67 fix: in-port not work with shadowsocks listener by @wwqgtxx
- 5a21bf36 fix: listener close panic by @wwqgtxx
- 6c9abe16 fix: vmess listener error by @wwqgtxx
- d2e255f2 fix: some error in tun by @wwqgtxx
Maintenance
- 12e3952b chore: code cleanup by @wwqgtxx
- 199fb8fd chore: update quic-go to 0.52.0 by @wwqgtxx
- 28c387a9 chore: restore break change in sing-tun by @wwqgtxx
- 34de62d2 chore: better get localAddr by @wwqgtxx
- 3ed6ff94 chore: export pipeDeadline by @wwqgtxx
- 4ed83033 chore: remove confused code by @wwqgtxx
- 60ae9dce chore: recover log leval for preHandleMetadata by @wwqgtxx
- 689c58f6 chore: clear dstIP when overrideDest in sniffer by @wwqgtxx
- 88419cbd chore: better parse remote dst by @wwqgtxx
- 9e3bf14b chore: handle two interfaces have the same prefix but different address by @wwqgtxx
- a0c46bb4 chore: remove the redundant layer of udpnat in sing-tun to reduce resource usage when processing udp by @wwqgtxx
- a1c78812 chore: rebuild udp dns resolve by @wwqgtxx
- b1d12a15 chore: proxy's ech should fetch from proxy-nameserver by @wwqgtxx
- c0f452b5 chore: more unmap for 4in6 address by @wwqgtxx
- ef3d7e4d chore: remove unneeded dns resolve when proxydialer dial udp by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.9...v1.19.10

What's Changed
- 188372cb feat: add tls.ech-key for external-controller-tls by @wwqgtxx
- 5cf0f18c feat: reality add support-x25519mlkem768, it only works with new version server by @wwqgtxx
- a1350d49 feat: add ech-key for listeners by @wwqgtxx
- c6d7ef8c feat: add ech-opts for anytls/shadowsocks/trojan/vmess/vless outbound by @wwqgtxx
- dc958e6a feat: add ech-opts for hysteria/hysteria2/tuic outbound by @wwqgtxx
- Other incompatible updates are the same as v1.19.6~v1.19.8:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- For security reasons, the "path" parameter of /configs in the restful api has been restricted, and its directory also needs to be in workdir or SAFE_PATHS.
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
- Note: The workdir mentioned above is specified by the -d parameter when the program is started or the CLASH_HOME_DIR environment variable. If neither of the above is specified, the default is:
- on Unix systems, $HOME/.config/mihomo.
- on Windows, %USERPROFILE%/.config/mihomo.
BUG & Fix
- 41b57afb fix: grpc deadline implement by @wwqgtxx
- 608ddb1b fix: external-ui-name must in local by @wwqgtxx
- 90ed01ed fix: backoff not reset when the file unchanged by @wwqgtxx
- bb8c47d8 fix: error typo by @wwqgtxx
- c489c526 fix: hysteria2 hop ports init https://github.com/MetaCubeX/mihomo/issues/2056 by @wwqgtxx
- d036d981 fix: http server does not handle http2 logic correctly by @wwqgtxx
- d5a03901 fix: race in close grpc transport by @wwqgtxx
- d900c712 fix: shadowtls v2 not work with X25519MLKEM768 by @wwqgtxx
- f91a586d fix: inline proxy provider's healthcheck not work by @wwqgtxx
Maintenance
- 1672750c chore: simplifying the old fingerprint processing method by @wwqgtxx
- 257fead5 docs: update config.yaml follow 5cf0f18c by @wwqgtxx
- 83213d49 chore: adjust min backoff from 1s to 10s by @wwqgtxx
- 8a5f3b89 chore: simplify port hop costs by @wwqgtxx
- 8f92b1de chore: simplify the single root decompression process by @wwqgtxx
- 9f7a2a36 chore: unpack externalUI in a separate temporary directory to avoid malicious compressed packages from polluting workdir by @wwqgtxx
- a9347912 chore: stricter path checking when unpacking zip/tgz by @wwqgtxx
- ed42c4fe chore: disallow symlink in unzip by @wwqgtxx
- fd959fef chore: update dependencies by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.8...v1.19.9

What's Changed
- For security reasons, the "path" parameter of /configs in the restful api has been restricted, and its directory also needs to be in SAFE_PATHS or workdir.
- Other incompatible updates are the same as v1.19.6:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
BUG & Fix
- 6e35cf93 fix: truncated UDP response in system dns https://github.com/MetaCubeX/mihomo/issues/2031 by @wwqgtxx
Maintenance
- 21166408 chore: the updateConfigs api also adds a check for SAFE_PATHS by @wwqgtxx
- 23e2d3a1 chore: rebuild provider load by @wwqgtxx
- 266fb038 chore: update dependencies by @wwqgtxx
- 76e9607f chore: move start healthcheck.process() from New to Initial in provider avoid panic cause by build-in proxy have not set to tunnel by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.7...v1.19.8

What's Changed
- The incompatible updates of the restful api not mentioned in the previous version of the changelog have been rolled back, solving the problem that the related gui cannot refresh the configuration
- Other incompatible updates are the same as v1.19.6:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
BUG & Fix
- d22a8930 fix: hysteria server port hopping compatibility issues by @wwqgtxx
Maintenance
- 00cceba8 docs: update config.yaml follow 7e7016b (#2022) by @muink
- a4fcd3af chore: rollback incompatible changes to updateConfigs api by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.6...v1.19.7

Incompatible changes:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
- In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
What's Changed
- 5c40a634 feat: not inline rule-provider can also set payload as fallback rules when file/http parsing fails by @wwqgtxx
- 99aa1b0d feat: inbound support shadow-tls by @wwqgtxx
- f328203b feat: not inline proxy-provider can also set payload as fallback proxies when file/http parsing fails by @wwqgtxx
BUG & Fix
- 2b4726b9 fix: build on go1.24.3 https://github.com/golang/go/issues/73617 by @wwqgtxx
- 2fb93312 fix: some resources are not released in listener by @wwqgtxx
- 468cfc3c fix: set sni to servername if not specified for trojan outbound (#1991) by @WeidiDeng
- 48d8efb3 fix: do NOT reset the quic-go internal state when only port is different by @wwqgtxx
- 52ad793d fix: shadowtls v1 not work by @wwqgtxx
- 61d6a9ab fix: fetcher does not start the pull loop when local file parsing errors occur and the first remote update fails by @wwqgtxx
- 7de4af28 fix: shadowtls test by @wwqgtxx
- 86c127db fix: missing read waiter for cancelers by @wwqgtxx
- e6e7aa5a fix: alpn apply on shadowtls by @wwqgtxx
- f7742768 fix: ensure wait group completes by @Larvan2
- febb6021 fix: hysteria2 inbound not set UDPTimeout by @wwqgtxx
Maintenance
- 26e6d83f chore: make select display the specified testUrl for https://github.com/MetaCubeX/mihomo/issues/2013 by @xishang0128
- 4ecb49b3 chore: dynamic fetch remoteAddr in hysteria2 service by @wwqgtxx
- 50d7834e chore: change the separator of the SAFE_PATHS environment variable to the default separator of the operating system platform (i.e., ; in Windows and : in other systems) by @wwqgtxx
- 791ea5e5 chore: allow setting addition safePaths by environment variable SAFE_PATHS package managers can allow for pre-defined safe paths without disabling the entire security check feature for https://github.com/MetaCubeX/mihomo/issues/2004 by @wwqgtxx
- 793ce45d chore: update quic-go to 0.51.0 by @wwqgtxx
- 7e7016b5 chore: removed routing-mark and interface-name of the group, please set it directly on the proxy instead by @wwqgtxx
- 936df90a chore: update dependencies by @wwqgtxx
- 9e57b298 chore: update dependencies by @wwqgtxx
- a013ac32 chore: give better error messages for some stupid config files by @wwqgtxx
- aa51b9fa chore: replace using internal batch package to x/sync/errgroup by @wwqgtxx
- b4fe6698 chore: better path checks by @wwqgtxx
- c2301f66 chore: rebuild fingerprint and keypair handle by @wwqgtxx
- cad26ac6 chore: fetcher will change duration to achieve fast retry when the update failed with a 2x factor step from 1s to interval by @wwqgtxx
- d55b0471 chore: ignore interfaces not with FlagUp in local interface finding by @wwqgtxx
- ee5d77cf chore: cleanup tls clientFingerprint code by @wwqgtxx
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.5...v1.19.6

What's Changed
- 2a40eba0 feat: tun add exclude-src-port,exclude-src-port-range,exclude-dst-port and exclude-dst-port-range on linux by @wwqgtxx
- a22efd5c feat: add exclude port and exclude port range options (#1951) by @okhowang
BUG & Fix
- 09c7ee0d fix: grpc server panic by @wwqgtxx
- 190047c8 fix: grpc transport not apply dial timeout by @wwqgtxx
- 24a9ff6d fix: disallow dialFunc be called after grpc transport has be closed by @wwqgtxx
- 2acb0b71 fix: tun IncludeInterface/ExcludeInterface priority by @wwqgtxx
- 323973f2 fix: converter judgment conditions by @wwqgtxx
- 3d2cb992 fix: grpc outbound not apply ca fingerprint by @wwqgtxx
- 487d7fa8 fix: panic under some stupid input config by @wwqgtxx
- 55cbbf7f fix: singledo test by @wwqgtxx
- 577f64a6 fix: X25519MLKEM768 does not work properly with reality by @wwqgtxx
- 664b1340 fix: websocket data losing by @wwqgtxx
- 76052b5b fix: grpc in trojan not apply client-fingerprint by @wwqgtxx
- 7a260f7b fix: udp dial support ip4p (#1377) by @HiMetre
- 7b37fcfc fix: auto_redirect should only hijack DNS requests from local addresses by @wwqgtxx
- 7de24e26 fix: StreamGunWithConn not synchronously close the incoming net.Conn by @wwqgtxx
- 7f1225b0 fix: grpc transport can't be closed by @wwqgtxx
- 8752f805 fix: anytls stream read error (#1970) by @anytls
- 9e0889c0 fix: observable test by @wwqgtxx
- a75e570c fix: vision conn read short buffer error by @wwqgtxx
- b0bd4f4c fix: resources not released when hysteria2 verification failed by @wwqgtxx
- b21b8ee0 fix: panic in ssr packet by @wwqgtxx
- b5fcd1d1 fix: chacha8-ietf-poly1305 not work by @wwqgtxx
- bad61f91 fix: avoid panic in inbound test by @wwqgtxx
- daa592c7 fix: converter panic by @wwqgtxx
- dbb5b7db fix: SetupContextForConn should return context error to user by @wwqgtxx
- dcb20e28 fix: websocket server upgrade in golang1.20 by @wwqgtxx
- e81f3a97 fix: correctly implement references to proxies by @wwqgtxx
- e8af0586 fix: websocketWithEarlyDataConn can't close underlay conn when is dialing or not dialed by @wwqgtxx
- eaaccffc fix: race in Single.Do by @wwqgtxx
- efa22437 fix: shut it down more aggressively in grpc transport closing by @wwqgtxx
Maintenance
- 237e2ede chore: tun will add firewall rule for Profile ALL on windows system stack by @wwqgtxx
- 23ffe451 chore: using http/httptrace to get local/remoteAddr for grpc client by @wwqgtxx
- 30d90d49 chore: update option checks to use IsZeroOptions by @wwqgtxx
- 345d3d70 chore: add inbound test for anytls by @wwqgtxx
- 39d6a0d7 chore: update utls to 1.7.0 by @wwqgtxx
- 3d806b5e chore: add inbound test for shadowsocks/trojan by @wwqgtxx
- 4b15568a chore: cleanup metadata code by @wwqgtxx
- 619c9dc0 chore: apply the default interface/mark of the dialer in the final stage by @wwqgtxx
- 622d99d0 chore: rebuild outdated proxy auto close mechanism by @wwqgtxx
- 6236cb1c chore: cleanup trojan code by @wwqgtxx
- 63e66f49 chore: cleanup trojan code by @wwqgtxx
- 69ce4d0f chore: speed up inbound test by @wwqgtxx
- 7551c8a5 chore: remove unneed code by @wwqgtxx
- 7d7f5c89 chore: add inbound test for tuic by @wwqgtxx
- 8085c68b chore: decrease direct using *net.TCPConn by @wwqgtxx
- 84cd0ef6 chore: remove internal crypto/tls fork in shadowtls by @wwqgtxx
- 8fa4e812 chore: remove internal crypto/tls fork in reality server by @wwqgtxx
- 9e8f4ada chore: better addr parsing by @wwqgtxx
- a6c0c02e chore: ignore interfaces not in IfOperStatusUp when fetch system dns server on windows by @wwqgtxx
- b2d28908 chore: cleanup resolveUDPAddr code by @wwqgtxx
- b59f11f7 chore: add singMux inbound test for shadowsocks/trojan/vless/vmess by @wwqgtxx
- ba3c44a1 chore: code cleanup by @wwqgtxx
- bfd06eba chore: rebuild SetupContextForConn with context.AfterFunc by @wwqgtxx
- cac2bf72 chore: cleanup netip code by @wwqgtxx
- cedb36df chore: using SetupContextForConn to reduce the DialContext cannot be cancelled by @wwqgtxx
- d0d0c392 chore: add inbound test for vmess/vless by @wwqgtxx
- d5243adf chore: better

What's Changed
- 0f32c054 feat: support UDP over TCP in mieru (#1926) by @enfein
- 801f3c35 feat: support sniff quic fragment data (#1899) by @5aaee9
- ff89bf0e feat: add gost-plugin in which only ws and mws are currently supported. (#1896) by @Cesaryuan
BUG & Fix
- 025ff19f fix: wrong conditional judgment in removeExtraHTTPHostPort https://github.com/MetaCubeX/mihomo/issues/1939 by @wwqgtxx
- 4f8b70c8 fix: buffer in tproxy not recycle (#1923) by @5aaee9
- 7c444a91 fix: correctly handle ipv6 zone by @wwqgtxx
- c0de3c0e fix: some default value in dialer not restore in tun when config reload by @wwqgtxx
- dee5898e fix: memory leak due to unclosed session (#1908) by @Cesaryuan
- e3d4ec24 fix: race at interfaceName setting by @wwqgtxx
Maintenance
- 00e64661 chore: update checksum generation step by @Skyxim
- 070eb314 chore: speedup system stack in tun by @wwqgtxx
- 0ed159e4 chore: code cleanup by @wwqgtxx
- 14217e78 chore: update service capabilities to include CAP_SYS_TIME and CAP_DAC_OVERRIDE by @xishang0128
- 1e22f4da chore: reduce data copying in quic sniffer and better handle data fragmentation and overlap by @wwqgtxx
- 4bd3ae52 chore: dialer will consider the routing of the local interface when auto-detect-interface in tun is enabled for #1881 #1819 by @wwqgtxx
- 68abb134 chore: support longest-prefix matches in local interface finding by @wwqgtxx
- 7b382611 chore: update gvisor by @wwqgtxx
- 7ff046a4 chore: modify UDPSniff's function signature to prepare for its ability to handle multiple packets. by @wwqgtxx
- a7a796bb chore: cleanup quic sniff's code by @wwqgtxx
- c94b4421 chore: add checksum generation for production artifacts by @Skyxim
- dcef7878 chore: update utls by @wwqgtxx
- f318b805 chore: better cache implement for group's getProxies by @wwqgtxx
- f6153460 chore: anytls protocol version 2 (#1936) by @anytls
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.3...v1.19.4

What's Changed
- 136d1141 feat: socks5/http/mixed inbound support setting tls in listeners by @wwqgtxx
- 1dc41551 feat: inbound's port can use ports format by @wwqgtxx
- 8d783c65 feat: inbound support grpc(lite) by @wwqgtxx
- 91324b76 feat: inbound support trojan by @wwqgtxx
- 9962a0d0 feat: implement anytls client and server (#1844) by @anytls
BUG & Fix
- 05e8f13a fix: integer overflow in ports iteration by @wwqgtxx
- 1213023f fix: reality not work with vmess+grpc outbound by @wwqgtxx
- 3b40bf76 fix: grpc server's ALPN order by @wwqgtxx
- 8bc6f77e fix DEB packaging (#1868) by @ForestL
- 938ab7f4 fix: syscall packet read waiter for windows by @wwqgtxx
- a00f4f11 fix: vless inbound allow not use flow when request send empty flow by @wwqgtxx
- a7e56f1c fix: anytls client close (#1871) by @anytls
- d1d846f1 fix: s390x golang1.24 build by @wwqgtxx
- d81c19a7 fix: grpc server panic by @wwqgtxx
- dc1145a4 fix: anytls padding send (#1848) by @anytls
Maintenance
- 06b9e6c3 chore: update dependencies by @wwqgtxx
- 3cc67fd7 chore: update golang to 1.24 by @wwqgtxx
- 447c4163 chore: update quic-go to 0.49.0 by @wwqgtxx
- 5830afcb chore: add MinIdleSession option to AnyTLS configuration by @Larvan2
- 808fdcf6 chore: code cleanup by @wwqgtxx
- 9074b78e chore(dns): increase MaxConnsPerHost (#1834) by @5aaee9
- b151e7d6 chore: support fingerprint for anytls by @wwqgtxx
- e2140e62 chore: update anytls (#1863) by @anytls
- e23f40a5 chore: tradition shadowsocks server could handle smux by @wwqgtxx
- e2b75b35 chore: update anytls (#1851) by @anytls
- eaaccbc6 chore: update dependencies by @wwqgtxx
- ef29e450 chore: complete classical rule parse error log (#1839) by @ForestL
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.2...v1.19.3

What's Changed
- 0ac6c3b1 feat: inbound support vless by @wwqgtxx
- fc233184 feat: add receive window config for hy2 https://github.com/MetaCubeX/mihomo/issues/1796 by @wwqgtxx
BUG & Fix
- 49d54cc2 fix: remote conn statistic error (#1776) by @J.K.SAGE
- 56c12888 fix: empty proxy provider subscription info not omitted (#1759) by @Mossia
- 9c73b5b7 fix: the trustcerts not add to globalCerts after ca.ResetCertificate (#1801) support PEM format for custom-certificates too by @wwqgtxx
- c7661d77 fix: initialize error message with cipher (#1760) by @lucidhz
Maintenance
- 0a5ea37c chore: update dependencies by @wwqgtxx
- 192d769f chore: ensure forced domains are always sniffed (#1793) by @tnextday
- 9bfb10d7 chore: extracting compressed files to correct location (#1823) by @ForestL
- a440f640 chore: alignment capability for vmess inbound by @wwqgtxx
- b69e52d4 chore: deprecated routing-mark and interface-name of the group, please set it directly on the proxy instead by @wwqgtxx
- c99c71a9 chore: listening tcp together for dns server (#1792) by @wwqgtxx
- f4806b49 chore: update mieru version (#1762) by @enfein
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.1...v1.19.2

What's Changed
- 72a126e feat: support inline proxy provider by @wwqgtxx
- bb80324 feat: support inline rule provider (#1731) by @qianlongzt
- f3a43fe feat: support read config file from stdin via -f - by @wwqgtxx
BUG & Fix
- 3f6823b fix: handle invalid values in Decoder's decode method by @wwqgtxx
- 5d9d8f4 fix: check whether the dst port is within the specified range (#1706) by @laburaps
- a9ce5da fix: key missing for tun inbound #1672 by @wwqgtxx
- c7fc93d fix: the TLS Sniffer fails when the length of the ClientHello packet exceeds the TCP MSS (#1711) by @laburaps
Maintenance
- 1c5f4a3 chore: update dependencies by @wwqgtxx
- 20739f5 chore: code cleanup by @wwqgtxx
- 269c525 chore: update gopsutil to v4 by @wwqgtxx
- 301c78f chore: update sing-tun to v0.4.5 by @wwqgtxx
- 368b1e1 chore: rollback tfo-go version by @wwqgtxx
- 5a9ad0e chore: code cleanup by @wwqgtxx
- 89dfabe chore: align time fields in logs (#1704) by @valord577
- 9a95920 chore: support config multiplexing of mieru by @wwqgtxx
- c786b72 chore: update dependencies by @wwqgtxx
- cd23112 chore: remove gRPC dependency from mieru (#1705) by @enfein
Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.0...v1.19.1