- Update version tp 5.15.1
   * feat: RandomStrategy AliveOnly
   * Improve container image tags and timestamp
   * Add delay_auth_write to Socks5 Client Advanced Config
   * Add MaxMin TLS version support in TLS Setting
   * feat: RandomStrategy AliveOnly
   * Improve container image tags and timestamp
   * Fixed an encrypted traffic's malleable vulnerability that allow 
     integrity corruption by an attacker with a privileged network 
     position to silently drop segments of traffic from an encrypted 
     traffic stream.
   * Update documents
   * Fix bugs
- Update vendor, fix CVE-2024-22189 boo#1222488 (forwarded request 1167661 from hillwood)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

 (forwarded request 1119975 from hillwood)

• Files Changed
• Browse Source

- Drop vendor in filelist (forwarded request 1095190 from hillwood)

• Files Changed
• Browse Source

- Update version to 5.7.0
  * meek: a new transport protocol meek is added.
  * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol
  * set v2ray binary as an entrypoint in container images
  * Add Integrated Container Image Building
  * Skip validating on empty http host config
  * Add PacketAddr support to Trojan
  * DomainStrategy support for all outbounds
  * Add an option to replace destination address in access log with sniffed domain
  * uTLS uTLS ALPN Control
  * uTLS New Security Type uTLS: TLS Client Hello imitation
  * DNS Support per-client configuration
  * DNS Support specifying domain matcher
  * Add bind to device to Windows and Darwin
  * Replace default Health Ping URL to HTTPS for burst observatory
  * Implement Match and MatchAny for all MatcherGroup
  * Fix bugs (forwarded request 1092471 from hillwood)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort (forwarded request 935001 from jsegitz)

• Files Changed
• Browse Source

- Update version to 4.43.0
  * Send Shadowsocks handshake with payload data if available
  * Custom TCP Fast Open queue length support
  * Fix Trojan fallback cannot get ALPN
  * Fix QueryStrategy ignored
  * Fix UDP connection transport connection terminated unnecessarily
  * refactor: move from io/ioutil to io and os package
  * Fix some tests to use udp.PickPort() 
  * Fix flaky TestVMessDynamicPort (forwarded request 930773 from hillwood)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update version to 4.39.2
  * Websocket: support header based Websocket early data & its partial browser
  forwarder support
  * GeoData: add a memory efficient geodata decoder called memconservative for
  memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei
  * HTTP/2 Transport: support to set method and headers for outgoing connections
  * TCP Socket Option: support to set keepalive interval on Linux operating system
  #962 Thanks @therealak12
  * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede
  @Loyalsoldier
  * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier
  * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier
  * Fix Observatory starts with empty config & fails to close (#957) Thanks
  @Loyalsoldier
  * Fix Null check on alternative system dialer (#959) Thanks @rurirei
  * Fixed the chain proxy support for gRPC and HTTP/2 transport
  * Fixed leastping logic (#1019) Thanks @fanyiguang
  * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99
- Update in 4.38.3
  - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665
  - TLS: A SECURITY improvement that allow the remote peer's TLS certificate
  to be pinned to a known value. Document for TLS is updated
  - Observatory: A component that measure the connectivity of selected outbounds
  The document for Observatory is updated.
  - Routing : leastPing balancing strategy is added. This strategy will select
  a outbound that is alive and completed HTTPS GET request in the least time.
  The document for Routing is updated.
  - Fixed crashing in fake dns. #931 Thanks @IceCodeNew
  - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier
  - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d
  - Fixed UDP DNS connection cause crash. Thanks @nekohasekai
  - Fixed two typo in comments. Thanks @U-v-U
  * Multi-json support for observatory, browser forwarder.
  #944 Thanks @ha-ku @AkinoKaede
- Add browserforwarder related v2ray-extra.zip (forwarded request 896867 from zzndb001)

• Files Changed
• Browse Source

- update version to 4.37.3
  * Add multiple address host support for DNS (#884 #886 #888)
  * Fix geoiop & geosite load issue (#889)
- update in 4.37.2
  * Add browser forwarder support for Websocket (#818)
  * Add Websocket 0-RTT early data support (#818)
  * Add replay protection for Shadowsocks proxy (#777)
  * Add queryStrategy option for DNS (#794)
  * Add disableFallback & skipFallback option for DNS client (#864)
  * Add inversed GeoIP matching (#860)
  * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx
  * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U
  * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier
  * Remove AA header flag in DNS query (#817) @Loyalsoldier
  * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017
  * Context: ctx initialization for core.functions (#841) @rurirei
  * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier
  * Fix Websocket early data 404 bug (#859) @k79e
  * Fix QUIC: disconnect due to timeout (#850) @bhoppi
  * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr
- update in 4.36.2
  * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang
  * Fix core panics when zero domain/full type of rule (#786) @darsvador
- update in 4.36.1
  * Add gRPC/gun transport (#757 #783)
  * Add loopback proxy (#770)
  * Add a new efficient routing rule matcher MphDomainMatcher (#743)
  * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779)
- update build needed golang version to 1.16
- keep go.sum go.mod to fix build issue with 'matched no packages'
- add geo files manually since upstream removed them from source (forwarded request 885541 from zzndb001)

• Files Changed
• Browse Source

- update version to 4.35.1
  * Add support for FakeDNS (#395 #406 #696) @yuhan6665
  * Add streamSetting / transport support for outbound front proxy
  * Add zero pseudo encryption for better performance VMess
  * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong
  * Add a faster and more memory-efficient routing rule matcher
    HybridDomainMatcher (#587 #639) @darsvador
  * Add support to disable DNS cache (#699 #705) @CalmLong
  * Fix test HTTP/2 dial timeout (#570) @kslr
  * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken
  * Fix TCP default ALPN (#716) @AkinoKaede
  * Fix DNS rule index out of range (#727) @Loyalsoldier
  Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info
- update import path to github.com/v2fly/v2ray-core/v4 (forwarded request 877960 from zzndb001)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update version to 4.32.0
  * loads JSON internally by default @forever8938
  * Refine UNIX domain socket @lucifer9
  * Fix mKCP sending window @p4gefau1t
  * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang
  * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan
- other changes before this version
  * Add full VLESS fallbacks support to Trojan
  * Add Trojan over XTLS support @maskedeken
  * Add XTLS Direct Mode
  * Add XTLS support to mKCP
  * Add padding to abstract UNIX domain socket in fallbacks
  * Add XTLS support to DomainSocket @rprx (forwarded request 845261 from zzndb)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update version to 4.28.1
  * Fix incorrect IV usage which slightly reduced security
- Update version to 4.28.0
  * Changes
    - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded)
  * Fixes
    - Fix dns tests by setting v2ray.location.asset @felixonmars
    - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx
    - Systemd: prevent restart on corrupt config @DuckSoft
  * Chores
    - Upgrade all dependencies @rprx
    - Change lint order to avoid file changes notice @Loyalsoldier
    - Update geoip, geosite (forwarded request 833934 from zzndb)

• Files Changed
• Browse Source

- Update version to 4.27.5
  * Features
    - Parse X-Forwarded-For in http transport @lucifer9
  * Fix
    - Fix according to staticcheck result @Loyalsoldier
    - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans
    - Refine code @Loyalsoldier
  * Warning
    - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is
    set to 0 (forwarded request 831436 from zzndb)

• Files Changed
• Browse Source

- update to version 4.27.4
  * get source tarball from latest release page.
  * update vendor use latest project git directory.
  * update changes from version 4.26.0
- update upstream source url
- update systemd units follow upstream
- change asset data directory follow upstream and downstream (forwarded request 830473 from zzndb)

• Files Changed
• Browse Source