What's Changed

• bd749c65 feat: sync anytls v0.0.13 (#2990) by @anytls
• e26714a1 feat: support TLS rekey fix, data-ciphers negotiation, tls-crypt-v2 for OpenVPN (#2989) by @Lanlan13-14
• 0e7c3c79 feat: support restls for anytls outbound and listener by @wwqgtxx
• 2b2bdf6d feat: support jls for shadowsocks outbound and listener by @wwqgtxx
• 5677fd38 feat: add name-cert-verify to support separate certificate verification name by @wwqgtxx
• 611a4481 feat: support jls for vmess/vless/trojan outbound and listener by @wwqgtxx
• 6d96163e feat: support override-expr for proxy provider override by @wwqgtxx
• 769ea6f5 feat: support restls for vmess/vless/trojan outbound and listener by @wwqgtxx
• 76d80883 feat: add support for TLSAuth for Openvpn (#2969) by @lyaaz
• 8fe7f748 feat: support jls for anytls outbound and listener by @wwqgtxx
• 9ab75434 feat: support restls/jls for snell outbound and listener by @wwqgtxx
• aea5ce41 feat: support shadowquic outbound and listener by @wwqgtxx
• bc0e5aa8 feat: support shadowtls for anytls outbound and listener by @wwqgtxx
• bfa9ea1d feat: support brutal for shadowquic (mihomo private extension) by @wwqgtxx
• c015694b feat: support shadowtls for vmess/vless/trojan outbound and listener by @wwqgtxx BUG & Fix
• 02dfcf2b fix: incorrect alphabet size used in session-table for predefined tables in xhttp-config by @SaltyMonkey
• 0ee58417 fix: reconnect OpenVPN on server soft reset (#2978) by @freephilx
• 12c30af9 fix: wireguard per-peer reserved ignored (#2958) by @AaronChen0
• 2b0d8411 fix: make shadowtls v2 read deadlines recoverable by @wwqgtxx
• 2c7309e2 fix: listener duplicate-name check (#2948) by @AaronChen0
• 3766a087 fix: set global CA pool and NTP time for restls by @wwqgtxx
• 41549236 fix: stop reaper goroutine busy-looping after context cancel (#2964) by @AaronChen0
• 45f79309 fix: CNAME query matching a hosts domain-entry returns an empty answer (#2965) by @AaronChen0
• 75a3ea8b fix: leaked openStreams on failure in TUIC client (#2959) by @AaronChen0
• 7a3c37cb fix: make shadowtls v3 read deadlines recoverable by @wwqgtxx
• 8507c1e2 fix: missing override shadow-tls-opts and restls-opts in xhttp download-settings by @wwqgtxx
• 86984831 fix: the incorrect tls stack was used in shadowtls tests by @wwqgtxx
• 975389a1 fix: intermittent timeouts during the soak test by @wwqgtxx
• 9a7e7266 fix: performance regression caused by unnecessary wrapping in stream encryption by @wwqgtxx
• 9ae1cc2b fix: shadowquic JLS pre-flight fallback handle by @wwqgtxx
• a35045d9 fix: consume CachedConn data in ReadCached by @wwqgtxx
• a5167fa4 fix: allow JLS fallback before the server flight by @wwqgtxx
• a70af274 fix: remove unnecessary quinn-jls compatibility behavior by @wwqgtxx
• ba5c45b7 fix: anytls listener config parsing by @wwqgtxx
• c079b0cc fix: panic on full-width IP-SUFFIX rules (#2975) by @AaronChen0
• c5834396 fix: DOMAIN-WILDCARD ignores sniffed hostname (#2956) by @AaronChen0
• cb8cde8d fix: missing override jls-opts in xhttp download-settings by @wwqgtxx
• e8ab2d04 fix: alpnAwareRoundTripper behavior in mekya client by @wwqgtxx
• f86bc224 fix: align HelloRetryRequest handling with JLS v3 by @wwqgtxx Maintenance
• 1d1b370e chore: remove redundant writeFull in snell v4 by @wwqgtxx
• 2d45f9ec chore: using new net/http api in mekya client by @wwqgtxx
• 309cfbd6 chore: reimplement shadowtls by @wwqgtxx
• 3b73922f chore: cleanup shadowquic code by @wwqgtxx
• 3f22309b chore: respect the incoming context during JLS fallback by @wwqgtxx
• 42361162 chore: better UserFromConn implementation by @wwqgtxx
• 44dd834f chore: preserve jls in-user for shadowsocks listeners by @wwqgtxx
• 46f9b786 chore: export internal OverrideExpr for api user by @wwqgtxx
• 4d7ef85a chore: sync logic to legacy shadowsocks listener by @wwqgtxx
• 5c1b8bfc chore: authenticate JLS ServerHello using its wire encoding by @wwqgtxx
• 6a52d23a chore: do not force trailing path / when both sessionID and seq are placed elsewhere for xhttp by @Medium1992
• 75eeba42 chore: significantly trim unnecessary code from tailscale by @wwqgtxx
• 8413f504 chore: skip frequently failed tests on windows go1.20 by @wwqgtxx
• 94409eb6 chore: remove redundant writeFull in sudoku by @wwqgtxx
• 95af34af chore: remove redundant writeFull in shadowquic by @wwqgtxx
• 97292968 chore: sync to sudoku v0.4.8 (#2966) by @saba-futai
• 9cece132 chore: add test for alpnAwareRoundTripper in mekya client by @wwqgtxx
• b6ed8e26 chore: rewrite the internal mutual exclusion logic of the listener by @wwqgtxx
• b75a776d chore: clean up duplicate helpers in tests by @wwqgtxx
• bc5976f4 chore: sync internal logic by @wwqgtxx
• cf8545db chore: stabilize traffic wait timing in tlsmirror test by @wwqgtxx
• da5a3e52 chore: rewrite the internal mutual exclusion logic of the outbound by @wwqgtxx
• dc4d4fcb chore: allow jls with utls client-fingerprint by @wwqgtxx
• e3c1ea06 chore: better handshakeRecorderConn impl by @wwqgtxx
• e9119858 chore: change the brutal negotiation in shadowquic to be asynchronous by @wwqgtxx
• ee80e8d6 chore: more comprehensive interop test by @wwqgtxx
• f23e43e6 chore: remove redundant writeFull in gost relay by @wwqgtxx Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.28...v1.19.29