644b9bcf3c
Reject IP literal server name with TLS spoof
2026-05-14 21:56:20 +08:00
719a002e70
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-05-14 21:56:20 +08:00
8224f2e5f9
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-05-14 21:56:20 +08:00
7fe1f47690
Fix legacy rule-set download_detour blocked by empty direct check
2026-05-14 21:56:20 +08:00
227e0ca30f
Add TLS spoof support
2026-05-14 21:56:20 +08:00
69f9f0232e
Standardize hosts path
2026-05-14 21:56:20 +08:00
195e129000
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-05-14 21:56:20 +08:00
04dc9fc353
oom-killer: Record report before reset network
2026-05-14 21:56:20 +08:00
6f23a9652b
Add optimistic DNS cache
2026-05-14 21:56:20 +08:00
b207d37a11
Fix tailscale error
2026-05-14 21:56:20 +08:00
f7cf93e2b4
Fix darwin cgo DNS again
2026-05-14 21:56:20 +08:00
914a6c51a1
Fix stun test
2026-05-14 21:56:20 +08:00
9b44e1b9da
documentation: Fix missing update for ip_version and query_type
2026-05-14 21:56:20 +08:00
0cc595866c
Add cloudflared inbound
2026-05-14 21:56:20 +08:00
72f89974ed
Fix lint errors
2026-05-14 21:56:20 +08:00
0dc7d6e40d
platform: Wrap command RPC error returns with E.Cause
2026-05-14 21:56:20 +08:00
0a9d8f945e
Add package_name_regex route, DNS and headless rule item
2026-05-14 21:56:20 +08:00
39dda9fb42
documentation: Fixes
2026-05-14 21:56:20 +08:00
825f86af7d
Un-deprecate ip_accept_any DNS rule item
2026-05-14 21:56:20 +08:00
972a03592c
tools: Tailscale status
2026-05-14 21:56:20 +08:00
775f683e98
Fix darwin local DNS transport
2026-05-14 21:56:20 +08:00
1ee527af75
Fix rules lock
2026-05-14 21:56:20 +08:00
c5a3e59945
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-05-14 21:56:20 +08:00
7d382fe3fc
tools: Tailscale status
2026-05-14 21:56:20 +08:00
11b7ffdff5
platform: Fix darwin signal handler
2026-05-14 21:56:19 +08:00
3b5e8c8a17
tools: Network Quality & STUN
2026-05-14 21:56:19 +08:00
3cfbfbbdb9
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-05-14 21:56:19 +08:00
b9ac437bce
Fix deprecated warning double-formatting on localized clients
2026-05-14 21:56:19 +08:00
f2945572e2
platform: Fix set local
2026-05-14 21:56:19 +08:00
6fa641a277
Add evaluate DNS rule action and related rule items
2026-05-14 21:55:53 +08:00
01efb67654
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-05-14 16:38:11 +08:00
17a63d553a
platform: Add OOM Report & Crash Report
2026-05-14 16:38:11 +08:00
914fc9c2c9
Add BBR profile and hop interval randomization for Hysteria2
2026-05-14 16:37:11 +08:00
4c6ff22afa
Refactor ACME support to certificate provider
2026-05-14 16:37:10 +08:00
f0a057c330
documentation: Update descriptions for neighbor rules
2026-05-14 16:37:10 +08:00
d0fd6f654b
Add macOS support for MAC and hostname rule items
2026-05-14 16:37:10 +08:00
9e548cb3e5
Add Android support for MAC and hostname rule items
2026-05-14 16:37:10 +08:00
443bec777e
Add MAC and hostname rule items
2026-05-14 16:36:54 +08:00
1086ab2563
Bump version 1.13.12
2026-05-14 15:11:09 +08:00
2b995ea10a
Run lint for all platforms in workflow
2026-05-13 23:39:27 +08:00
5e7fd7ad78
Fix lint errors
2026-05-13 23:39:27 +08:00
338aa551d1
Update golangci-lint configuration
2026-05-13 16:38:08 +08:00
b6f7d62bb6
sing: Update contextjson
2026-05-13 16:28:50 +08:00
76880eb46b
Update naiveproxy to v148.0.7778.96-1
2026-05-13 16:28:49 +08:00
b4c625543a
Fix tailscale crash at start
2026-05-13 16:28:49 +08:00
2f139af2d1
Fix naive inbound close
2026-05-13 16:28:49 +08:00
383a1824c1
dns: Refactor reordered pool
2026-05-13 16:28:49 +08:00
d166f0da8b
dns: Fix conn pool leak
2026-05-13 16:28:49 +08:00
6475a5e036
Skip kickWriteHandshake for server first protocols
2026-05-13 16:28:49 +08:00
6548c17110
dns: Fix deadline
2026-05-13 16:28:49 +08:00
世界