• Update Go to 1.27.4 and ML-DSA is no longer advertised in signature_algorithm_cert in TLS Client Hello. Exclave's non-uTLS REALITY implementation also no longer advertises ML-DSA in signature_algorithm_cert to match the behavior of Go TLS.
• Update uTLS to latest commit and fingerprint "Chrome" now matches Chrome 155. uTLS latest commit requires Go 1.27, so Go 1.26 support is dropped and compiling Exclave now requires at least Go 1.27.
• For Snell protocol, domain address is no longer resolved to IP when sending UDP packets.
• Update Mozilla CA certificate store and 6 CA certificates are removed.
• The memory usage of rule matcher is reduced (maybe).