The machine generated changes includes in this release will subject to review and changes once the maintainer recovers from temporary incapacitation and is not covered by API stability policies.

Mptcp is now disabled by default, for next 8 mid version releases to compensate for Linux tcp stack vulnerabilities.

Dependencies updated.

What's Changed

• Machine generated/mptcp default and dependencies 20261101 by @xiaokangwang in #3865

Full Changelog: v5.55.0...v5.56.0

this is a maintenance release containing security updates for end users. The machine generated changes includes in this release will subject to review and changes once the maintainer recovers from temporary incapacitation and is not covered by API stability policies.

What's Changed

• Machine generated/update go dependencies by @xiaokangwang in #3857

Full Changelog: v5.54.2...v5.55.0

Security Update

This update fixes an issue with quic transport where it sends V2Ray specific handshake parameters that differs from quic-go defaults. Thanks Jackson Sippe, et al. for reporting this issue.

This update includes a change that requires a protocol update of QUIC transport. Please update the server first to allow connections from both older and latest clients with a transition graceful period. This transition period will last until v5.61.0, and you end this transition immediately by manually setting QUIC transport's server alpn to h3.

-----> ⚠️ Important Message ⚠️<-----

This update includes security fix recommended for QUIC transport.

-----> ⚠️ 重要消息 ⚠️<-----

本更新含适用于 QUIC transport 的安全更新。

New Features

• Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other udp improvement in #3809
• Add Wireguard Chain Proxy Support in #3816

Fixes

• Add safe defaults for QUIC connections in #3820
• Add safe defaults for QUIC connections on server side in #3830
• Allow quic server to accept clients with mismatching alpn temporaryly

Chores

• Fix: CI tests failures by @Loyalsoldier in #3790
• Chore: bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #3803
• Chore: bump google.golang.org/grpc from 1.83.0 to 1.83.2 by @dependabot[bot] in #3817
• Chore: bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 by @dependabot[bot] in #3815
• Chore: bump github.com/miekg/dns from 1.1.72 to 1.1.73 by @dependabot[bot] in #3813
• Chore: bump github.com/pion/stun/v3 from 3.1.6 to 3.1.7 by @dependabot[bot] in #3808
• Chore: bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in #3802
• Chore: bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #3807
• Chore: bump golang.org/x/net from 0.58.0 to 0.59.0 by @dependabot[bot] in #3805

Full Changelog: v5.53.0...v5.54.1

Security Update

This update fixes an issue with quic transport where it sends V2Ray specific handshake parameters that differs from quic-go defaults. Thanks Jackson Sippe, et al. for reporting this issue.

-----> ⚠️ Important Message ⚠️<-----

This update includes security fix recommended for QUIC transport.

-----> ⚠️ 重要消息 ⚠️<-----

本更新含适用于 QUIC transport 的安全更新。

New Features

• Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other udp improvement in #3809
• Add Wireguard Chain Proxy Support in #3816

Fixes

• Add safe defaults for QUIC connections in #3820

Chores

• Fix: CI tests failures by @Loyalsoldier in #3790
• Chore: bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #3803
• Chore: bump google.golang.org/grpc from 1.83.0 to 1.83.2 by @dependabot[bot] in #3817
• Chore: bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 by @dependabot[bot] in #3815
• Chore: bump github.com/miekg/dns from 1.1.72 to 1.1.73 by @dependabot[bot] in #3813
• Chore: bump github.com/pion/stun/v3 from 3.1.6 to 3.1.7 by @dependabot[bot] in #3808
• Chore: bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in #3802
• Chore: bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #3807
• Chore: bump golang.org/x/net from 0.58.0 to 0.59.0 by @dependabot[bot] in #3805

Full Changelog: v5.53.0...v5.54.1

New Features

• Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other udp improvement in #3809
• Add Wireguard Chain Proxy Support in #3816

Chores

• Fix: CI tests failures by @Loyalsoldier in #3790
• Chore: bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #3803
• Chore: bump google.golang.org/grpc from 1.83.0 to 1.83.2 by @dependabot[bot] in #3817
• Chore: bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 by @dependabot[bot] in #3815
• Chore: bump github.com/miekg/dns from 1.1.72 to 1.1.73 by @dependabot[bot] in #3813
• Chore: bump github.com/pion/stun/v3 from 3.1.6 to 3.1.7 by @dependabot[bot] in #3808
• Chore: bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in #3802
• Chore: bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #3807
• Chore: bump golang.org/x/net from 0.58.0 to 0.59.0 by @dependabot[bot] in #3805

Full Changelog: v5.53.0...v5.54.0

New Features

• Add Stream based Packet Addr for UDP Connections in #3774
• rrpit: compact session, async send, session recovery in #3787
• Add socks5ify engineering command in #3776

Chores

• Fix lint failure by removing redundant embedded field selectors in packetaddr wrapper in #3775
• bump actions/setup-go from 6 to 7 by @dependabot[bot] in #3778
• Chore: bump actions/stale from 10 to 11 by @dependabot[bot] in #3784
• Chore: bump redhat-actions/push-to-registry from 2 to 3 by @dependabot[bot] in #3786
• Chore: bump google.golang.org/grpc from 1.81.1 to 1.82.1 by @dependabot[bot] in #3783
• Chore: bump redhat-actions/podman-login from 1 to 2 by @dependabot[bot] in #3781
• Chore: bump github.com/quic-go/quic-go from 0.59.1 to 0.61.0 by @dependabot[bot] in #3770
• Chore: bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #3771
• Chore: bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in #3769
• Chore: bump github.com/pires/go-proxyproto from 0.12.0 to 0.15.0 by @dependabot[bot] in #3772
• Chore: bump github.com/go-playground/validator/v10 from 10.30.2 to 10.30.3 by @dependabot[bot] in #3739

Full Changelog: v5.52.0...v5.53.0

New Features

• Add X-Forwarded-For support to gRPC transport by @YuyangisCoding in #3737

Fixes

• ci: fix release artifacts hash mismatch by @Qusic in #3726
• Fix v4 X-Forwarded-For transport config by @YuyangisCoding in #3736
• Guard Android DNS resolver hack behind !cgo by @dyhkwong in #3755
• Fix codecov token breaking ci, Chore: bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in #3754

Chores

• Chore: bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 by @dependabot[bot] in #3734
• Chore: bump codecov/codecov-action from 5 to 7 by @dependabot[bot] in #3748
• Chore: bump actions/checkout from 6 to 7 by @dependabot[bot] in #3760
• common/errors: implement Unwrap on *Error for errors.Is/As support by @bindreams in #3746
• Chore: bump github.com/pion/webrtc/v4 from 4.2.12 to 4.2.16 by @dependabot[bot] in #3751
• Chore: bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in #3752

New Contributors

• @YuyangisCoding made their first contribution in #3737
• @bindreams made their first contribution in #3746

Full Changelog: v5.51.2...v5.52.0

New Features

• gdocsviewer Add Google Docs Viewer based transport in #3725
  • This is a new transport based on Tunneling with Google Docs Viewer, as used in https://github.com/0xinf0/gdocs-tunnel .
  • EN CN document has been updated.
• gdocsviewer: Refine poll logic and allow custom headers to reduce rate limiting in #3727
• gdocsviewer: allow adding headers in public config in #3728

Full Changelog: v5.51.1...v5.51.2

New Features

• gdocsviewer Add Google Docs Viewer based transport in #3725
  • This is a new transport based on Tunneling with Google Docs Viewer, as used in https://github.com/0xinf0/gdocs-tunnel .
  • EN CN document has been updated.
• gdocsviewer: Refine poll logic and allow custom headers to reduce rate limiting in #3727

Full Changelog: v5.51.0...v5.51.1

New Features

• gdocsviewer Add Google Docs Viewer based transport in #3725
  • This is a new transport based on Tunneling with Google Docs Viewer, as used in https://github.com/0xinf0/gdocs-tunnel .
  • EN CN document has been updated.

Full Changelog: v5.50.0...v5.51.0