🚀 v10.1.0 — Hysteria2, smarter testing, and a fresh xray-core

This release makes the http tester a lot smarter and faster, adds the
Hysteria2 protocol, and catches up to the latest xray-core. 🎉

✅ Nothing breaks. Every new option is optional — if you don't touch the
new flags, everything works exactly like before.

🆕 New protocol: Hysteria2

You can now parse, test, and run Hysteria2 configs! 🔥

• Works with both hysteria2:// and the shorter hy2:// links.
• Supported everywhere: parse, http (testing), proxy, and the web UI.
• Understands SNI, insecure, and Salamander obfuscation
  (obfs / obfs-password), and handles IPv6 addresses correctly.

xray-knife http -c "hy2://..."

🎯 Smarter testing: don't trust just one website

Before, a config was judged by reaching a single site (Cloudflare). The
problem? Some proxies can reach Cloudflare but nothing else — and they'd
still show as "working." 😕

Now you can test each config against a panel of different websites and
grade it by how many it can actually reach. 🌍

# Grade each config against a global mix of sites
xray-knife http -f configs.txt --check-preset global

• 🎬 Great for checking if a config really works for YouTube / Google /
  streaming, not just a generic CDN.
• 🕵️ Fake "captive portal" pages that pretend to work are now correctly
  rejected.
• 📊 You get a clear per-website breakdown (which site failed and why) —
  in the terminal, in CSV, in JSON, and in the web dashboard.

⚡ Test big lists way faster

Testing thousands of configs? These options make it dramatically quicker:

# Quickly find the first 20 working configs from a huge list
xray-knife http -f configs.txt --prescan --max-passed 20

• 🛡️ UDP-based configs (Hysteria2, WireGuard, QUIC, mKCP) are never
  wrongly dropped by the quick check — they're always kept and tested.

🔌 Protocol improvements

• 🔐 REALITY post-quantum keys — VLESS and Trojan now support the new
  ML-DSA-65 verification key (the pqv parameter), ready for
  quantum-resistant setups.
• 📡 WireGuard — added support for keepalive, allowedips, and
  reserved (works with Cloudflare WARP-style values, comma or base64).
• 🧩 Shadowsocks — modern SS-2022 links (from sing-box /
  shadowsocks-rust) now parse correctly, alongside the classic format.
• 🧦 SOCKS — more robust login parsing; links without a password no
  longer cause crashes.

🔄 Fresh xray-core (important compatibility work)

We upgraded to the latest xray-core and its dependencies. Upstream
removed a couple of old settings — we handle them automatically so your
existing links keep working: ✨

• allowInsecure was removed upstream → we now use the sanctioned
  verifyPeerCertByName replacement for VLESS, Trojan, and VMess.
• mKCP header/seed were removed upstream → configs now build cleanly
  with defaults.
• 🐛 Fixed a VMess default-network bug, gRPC mode handling, and ALPN
  parsing.
• 🐛 Fixed a VLESS XHTTP bug where the extra field could get corrupted.

🧰 Proxy fixes

• 🎯 When you pass a custom inbound (-I / --inbound-config), the proxy
  now listens on the address/port from that link — so the health check,
  TUN, and system proxy all point to the right place.
• ⏱️ Fixed an "instant timeout" bug in chain rotation when the delay setting
  was left empty (now defaults to a sensible 5s).
• 🔁 Rotation now resets the failure counter for each fresh connection, so a
  new proxy doesn't inherit the last one's bad luck.

🧪 Under the hood

Added lots of new automated tests covering the multi-website grading,
presets, deduplication, the quick pre-scan, Hysteria2 parsing, and the
SOCKS/Shadowsocks fixes — so all of this stays reliable. ✅

Full details & downloads below. Happy testing! 🚀