What's Changed
- 571925d feat: add Tailscale outbound support (#2786) by @汐殇
- 7af9eeb feat: add OpenVPN outbound support (#2785) by @romanov Caesar
- 6ea4373 feat: support auth-user-pass and AES-256-GCM for OpenVPN (#2787) by @ekko
- 5e22035 feat: add GOST relay outbound proxy type (#2795) by @ztywyj
- 98aa7e6 feat: support
realm-optsfor hysteria2 outbound and listener by @wwqgtxx - 787dbfc feat: support setting
realm-opts.proxyfor hysteria2 listener by @wwqgtxx - 2ffd962 feat: support hysteria2-realm listener by @wwqgtxx
- 8b8eae5 feat: support simple-obfs for shadowsocks listener by @wwqgtxx
BUG & Fix
- 0003e14 fix: trusttunnel listener panic by @wwqgtxx
- 17bed79 fix: tsnet panic for tailscale by @wwqgtxx
- 2f51cb0 fix: conn maybe not closed in error handling by @wwqgtxx
- 2f6ce20 fix: tailscale not use configured dialer for captive detection by @wwqgtxx
- 35d5d4e fix: CVE-2026-39825 for net/http by @wwqgtxx
- 388d958 fix: remove unstable warning for tailscale by @wwqgtxx
- 5df45b2 fix: typo in default alpn by @wwqgtxx
- 7a646e8 fix: correctly configure the HTTP/2 scheduled ping parameters in masque h2 mode by @wwqgtxx
- 802b0b2 fix: netlink permission denied on android for tailscale by @wwqgtxx
- 8a28dce fix: validate Linux process netlink matches by @xream
- 95946a5 fix: net/http.Transport's UnencryptedHTTP2 does not work TLS without ALPN by @wwqgtxx
- 98aa42e fix: convert place disguise host in h2-opts.host for legacy base64-JSON VMess (#2739) by @wangwei354
- 9e97dc0 fix: tailscale not use configured dialer for netstack forwardTCP by @wwqgtxx
- aae5812 fix: net/http.Server's UnencryptedHTTP2 does not work TLS without ALPN by @wwqgtxx
- b3104a5 fix: panic in vless xhttp h3 mode when quic dial fails (#2736) by @beck
- cc376ac fix: skip TTL update for OPT records by @wwqgtxx
- d2acf45 fix: hysteria2 realm server reaper loop by @wwqgtxx
- e933ca8 fix: netlink permission denied on android for tailscale by @wwqgtxx
- f5cfb8d fix: convert emit HTTP2Options-shaped h2-opts for share-link HTTP/2 transport (#2737) by @wangwei354
- fd31419 fix: wrong function call in SetWriteDeadline (#2790) by @aaron Chen
- ffe6e42 fix: conn maybe not closed in error handling by @wwqgtxx
Maintenance
- 00e6df5 chore: close http2 connections when closing client in doh by @wwqgtxx
- 028b480 chore: remove unused http server code by @wwqgtxx
- 163ce6a chore: add mlkem768x25519-sha256 key exchange algorithm to ssh outbound by @wwqgtxx
- 1fea551 chore: verify adapter can parse convert's result in its test by @wwqgtxx
- 263d06d chore: allow passing tunnel when creating the proxy by @wwqgtxx
- 2a8da25 chore: handle the possibility of multiple ClientTrace.GotConn calls by @wwqgtxx
- 2d94970 chore: using new net/http api in masque h2 mode by @wwqgtxx
- 2f11d96 chore: use our internal DNS resolution logic for tailscale by @wwqgtxx
- 3d3af1f chore: respect outbound dns prefer when resolve UDP by @wwqgtxx
- 3fb93bd chore: using new net/http api in gun and xhttp listener by @wwqgtxx
- 44c9423 chore: code cleanup by @wwqgtxx
- 81bea65 chore: using new net/http api in vmess h2 client by @wwqgtxx
- 82621cd chore: always safe UUID generation by @wwqgtxx
- 8bc7d3e chore: using new net/http api in doh client by @wwqgtxx
- 8d53952 chore: remove unused xhttp options in download-settings by @wwqgtxx
- 8f69ad9 chore: better uuid generation by @wwqgtxx
- 993d1b6 chore: add stun retry and lazy server start for realm by @wwqgtxx
- a1c68a4 chore: using new net/http api in reality client fallback by @wwqgtxx
- ac6f6d0 chore: tailscale using ListenPacket for UDP by @wwqgtxx
- b03aa5d chore: remove race code in wireguard implementation by @wwqgtxx
- b8b4439 chore: using new net/http api in trusttunnel listener by @wwqgtxx
- bb2f57b chore: using new net/http api in xhttp client by @wwqgtxx
- c27446a chore: using new net/http api in gun client by @wwqgtxx
- c59c99a chore: handle context cancellation in xhttp client dialing by @wwqgtxx
- c98e67a chore: using new net/http api in trusttunnel client by @wwqgtxx
- df1c5e5 chore: relax sudoku user configuration (#2757) by @saba-futai
- f333359 chore: move magic close http2 connections function to own fork by @wwqgtxx
- f5f9e59 chore: update sing-tun by @wwqgtxx
- faa58f2 chore: add some comments for using the new net/http API by @wwqgtxx
Full Changelog: v1.19.24...v1.19.25