d82be7d86b
build(deps): bump github.com/docker/docker in /test
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 27.3.1+incompatible to 28.0.0+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.3.1...v28.0.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-version: 28.0.0+incompatible
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-23 12:05:56 +00:00
64a5cc88e1
Refactor ACME support to certificate provider
2026-03-23 20:04:36 +08:00
71626beaf8
Bump version
2026-03-23 20:01:44 +08:00
004a967e72
cronet-go: Update chromium to 145.0.7632.159
2026-03-23 20:01:30 +08:00
3ab8ba76d0
documentation: Update descriptions for neighbor rules
2026-03-23 20:01:29 +08:00
1edc8fd855
Add macOS support for MAC and hostname rule items
2026-03-23 20:01:29 +08:00
22a8661858
Add Android support for MAC and hostname rule items
2026-03-23 20:01:29 +08:00
52aa5716be
Add MAC and hostname rule items
2026-03-23 20:01:25 +08:00
2c24e82257
Bump version
2026-03-23 19:59:05 +08:00
a3623eb41a
tun: Fix system stack rewriting TUN subnet destinations to loopback
2026-03-23 19:38:55 +08:00
72bc4c1f87
Fix DNS transport returning error for empty AAAA response
...
Closes #3925
2026-03-23 19:21:55 +08:00
9ac1e2ff32
Match package_name in process_path rule on Android
2026-03-23 18:57:35 +08:00
0045103d14
Fix package_name shared uid matching
2026-03-23 18:57:35 +08:00
d2a933784c
Optimize Darwin process finder
2026-03-23 18:57:35 +08:00
3f05a37f65
Optimize Linux process finder
2026-03-23 18:57:35 +08:00
b8e5a71450
Add process information cache to avoid duplicate lookups
...
PreMatch and full match phases each created a fresh InboundContext,
causing process search (expensive OS syscalls) to run twice per
connection. Use a freelru ShardedLRU cache with 200ms TTL to serve
the second lookup from cache.
2026-03-23 14:26:45 +08:00
c13faa8e3c
tailscale: Only set ProcessLocalIPs/ProcessSubnets for fake TUN
2026-03-23 14:16:40 +08:00
7623bcd19e
Fix DialerForICMPDestination
2026-03-23 13:58:55 +08:00
795d1c2892
Fix nested rule-set match cache isolation
2026-03-23 12:26:19 +08:00
6913b11e0a
Reject removed legacy inbound fields instead of silently ignoring
2026-03-21 17:16:10 +08:00
1e57c06295
daemon: Allow StartOrReloadService to recover from FATAL state
2026-03-21 13:37:14 +08:00
ea464cef8d
daemon: Fix CloseService leaving instance non-nil on close error
2026-03-21 13:23:57 +08:00
a8e3cd3256
tun: Fix nfqueue not working in prerouting
2026-03-17 11:05:40 +08:00
686cf1f304
documentation: Fix Chinese link anchors
2026-03-16 12:24:10 +08:00
9fbfb87723
documentation: Fix unicode heading anchors
2026-03-16 12:10:32 +08:00
d2fa21d07b
Deprecate Socksaddr.IsFqdn: do not reject potentially valid domain names
2026-03-16 09:37:59 +08:00
d3768cca36
Bump version
2026-03-15 17:56:37 +08:00
0889ddd001
Fix connector canceled dial cleanup
2026-03-15 17:56:37 +08:00
f46fbf188a
documentation: Minor fixes
2026-03-15 17:56:37 +08:00
f2d15139f5
tun: Fix nftables single include_uid not working
2026-03-15 16:58:34 +08:00
041646b728
Fix kTLS crash
2026-03-14 21:38:38 +08:00
b990de2e12
tun: Fix "Fix auto_redirect dropping SO_BINDTODEVICE traffic"
2026-03-14 21:38:38 +08:00
fe585157d2
Bump version
2026-03-14 21:38:38 +08:00
eed6a36e5d
tun：Fix auto_redirect dropping SO_BINDTODEVICE traffic
2026-03-14 21:38:38 +08:00
eb0f38544c
tailscale: Fix system interface rules
2026-03-14 21:38:38 +08:00
54468a1a2a
platform: Add f-droid update helpers
2026-03-11 20:41:29 +08:00
8289bbd846
Add Alpine APK packaging to CI build
...
Add fpm-based Alpine APK packaging alongside existing DEB/RPM/Pacman
packages. Alpine APKs use `linux` in the filename to distinguish from
OpenWrt APKs which use the `openwrt` prefix.
2026-03-11 20:41:29 +08:00
49c450d942
ccm/ocm: Fix missing metering for 1M context and /fast mode
...
CCM: Fix 1M context detection - use prefix match for versioned
beta strings (e.g. "context-1m-2025-08-07") and include cache
tokens in the 200K threshold check per Anthropic billing docs.
OCM: Add GPT-5.4 family pricing (standard/priority/flex) with
extended context (>272K) premium pricing support. Add context
window tracking to usage combinations, mirroring CCM's pattern.
Update normalizeGPT5Model defaults to latest known models.
2026-03-11 20:41:29 +08:00
a7ee943216
Fix tailscale connections
2026-03-11 00:27:15 +08:00
8bb4c4dd32
documentation: Update ocm/ccm examples
2026-03-10 22:04:12 +08:00
67621ee6ba
Fix OCM websocket proxy lifecycle and headers
2026-03-10 22:04:11 +08:00
a09ffe6a0f
ccm/ocm: Add by_user_and_week cost summary
2026-03-10 22:04:11 +08:00
e0be8743f6
ocm: Add Responses WebSocket API proxy and fix client config docs
...
Support the OpenAI Responses WebSocket API (`wss://.../v1/responses`)
for bidirectional frame proxying with usage tracking.
Fix Codex CLI client config examples to use profiles and correct flags.
Update openai-go v3.24.0 → v3.26.0.
2026-03-10 22:04:11 +08:00
0b04528803
tailscaile: Fix using TUN auto redirect with tailscale system interface
2026-03-10 22:04:11 +08:00
65875e6dac
tailscale: Use system dialer for system interface
...
* Revert "Fix netstack TCP connections with system interface
2026-03-10 19:50:16 +08:00
4d6fb1d38d
Fix legacy DNS client_subnet options not working
2026-03-09 20:18:47 +08:00
305b930d90
release: Fix default config
2026-03-09 20:18:43 +08:00
bc3884ca91
release: Add openwrt apk build
2026-03-09 20:18:40 +08:00
df0bf927e4
Fix missing with_gvisor build tag for tailscale
2026-03-09 20:18:28 +08:00
efe20ea51c
release: Backport Go 1.25 to macOS 10.13
2026-03-09 20:13:36 +08:00
dependabot[bot]