e1e43adc80
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 26s
ci-pangolin / Cleartext Scan — Android 禁明文 (push) Successful in 20s
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 21s
ci-pangolin / DS-flow — 原型/跨端同源/代码色单源闸 (push) Successful in 2m5s
ci-pangolin / Go — build + test (push) Failing after 2m37s
ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Failing after 3m47s
ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Failing after 11m31s
ci-pangolin / Flutter — analyze + test (push) Failing after 11m39s
ci-pangolin / OpenAPI Sync Check (push) Failing after 11m50s
ci-pangolin / Lint — shellcheck (push) Failing after 12m1s
ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 6m57s
ci-pangolin / Golden — 视觉回归 (全量:components/auth/desktop/tablet) (push) Failing after 10m29s
Deploy Client / build-windows (push) Successful in 1m51s
Deploy Client / build-android (push) Failing after 3m7s
Deploy Client / release-deploy (push) Has been skipped
Deploy Client / build-macos (push) Failing after 27s
Deploy Client / build-ios (push) Failing after 5m17s
上一版加了服务端 route_exclude_address,但 macOS/iOS 路由由 Swift 的 NEPacketTunnelNetworkSettings 控制,而 openTun 只设了 includedRoutes、 从不设 excludedRoutes → libbox 解析出的排除网段被丢弃,strict_route 仍把 LAN(192.168/16、10/8)抓进隧道,VPN 开着连不上局域网/NAS/家里机器/内网 gitea。 修:openTun 里 ipv4/ipv6 各补 excludedRoutes = excludedRoutes4/6(options), 读 libbox 的 getInet4/6RouteExcludeAddress(sing-box config 的 route_exclude_address 经此暴露)。镜像已有的 includedRoutes4/6 写法。 生效:客户端重新构建发版后,私有 LAN 直连恢复 → CI runner 不再需要经 ali 的 中继隧道(relay),从 Mac 也能直连家里所有内网机器。 Android(VpnService.excludeRoute,API33+ 分版本)作后续。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>