Mihomo Files

What's Changed

• 188372cb feat: add tls.ech-key for external-controller-tls by @wwqgtxx
• 5cf0f18c feat: reality add support-x25519mlkem768, it only works with new version server by @wwqgtxx
• a1350d49 feat: add ech-key for listeners by @wwqgtxx
• c6d7ef8c feat: add ech-opts for anytls/shadowsocks/trojan/vmess/vless outbound by @wwqgtxx
• dc958e6a feat: add ech-opts for hysteria/hysteria2/tuic outbound by @wwqgtxx
• Other incompatible updates are the same as v1.19.6~v1.19.8:

  • For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
  • For security reasons, the "path" parameter of /configs in the restful api has been restricted, and its directory also needs to be in workdir or SAFE_PATHS.
  • In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.
  • Note: The workdir mentioned above is specified by the -d parameter when the program is started or the CLASH_HOME_DIR environment variable. If neither of the above is specified, the default is:
  • on Unix systems, $HOME/.config/mihomo.
  • on Windows, %USERPROFILE%/.config/mihomo.

BUG & Fix

• 41b57afb fix: grpc deadline implement by @wwqgtxx
• 608ddb1b fix: external-ui-name must in local by @wwqgtxx
• 90ed01ed fix: backoff not reset when the file unchanged by @wwqgtxx
• bb8c47d8 fix: error typo by @wwqgtxx
• c489c526 fix: hysteria2 hop ports init https://github.com/MetaCubeX/mihomo/issues/2056 by @wwqgtxx
• d036d981 fix: http server does not handle http2 logic correctly by @wwqgtxx
• d5a03901 fix: race in close grpc transport by @wwqgtxx
• d900c712 fix: shadowtls v2 not work with X25519MLKEM768 by @wwqgtxx
• f91a586d fix: inline proxy provider's healthcheck not work by @wwqgtxx

Maintenance

• 1672750c chore: simplifying the old fingerprint processing method by @wwqgtxx
• 257fead5 docs: update config.yaml follow 5cf0f18c by @wwqgtxx
• 83213d49 chore: adjust min backoff from 1s to 10s by @wwqgtxx
• 8a5f3b89 chore: simplify port hop costs by @wwqgtxx
• 8f92b1de chore: simplify the single root decompression process by @wwqgtxx
• 9f7a2a36 chore: unpack externalUI in a separate temporary directory to avoid malicious compressed packages from polluting workdir by @wwqgtxx
• a9347912 chore: stricter path checking when unpacking zip/tgz by @wwqgtxx
• ed42c4fe chore: disallow symlink in unzip by @wwqgtxx
• fd959fef chore: update dependencies by @wwqgtxx

Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.8...v1.19.9