Seyyed Mostafa
32937846c5
Tunnel inbound: Compatible with listening UNIX domain socket ( #5693 )
...
https://github.com/XTLS/Xray-core/pull/5693#issuecomment-4229947428
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-04-11 18:39:32 +00:00
dependabot[bot]
93225a1132
Bump golang.org/x/net from 0.52.0 to 0.53.0 ( #5899 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/net/compare/v0.52.0...v0.53.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.53.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-11 17:24:31 +00:00
dependabot[bot]
4d958cbfd3
Bump actions/github-script from 8 to 9 ( #5898 )
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v8...v9 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '9'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-11 17:24:14 +00:00
风扇滑翔翼
e5a9fb752e
QUIC sniffer: Fix potential panic on malformed QUIC packets ( #5866 )
...
Fixes https://github.com/XTLS/Xray-core/security/advisories/GHSA-hrp5-2rwj-wvmv
---------
Co-authored-by: kastov <yk@sent.com >
2026-04-07 10:10:12 +00:00
Rynnya
6a1a13b797
TUN inbound: Closable by AlwaysOnInboundHandler ( #5860 )
...
https://github.com/XTLS/Xray-core/pull/5860#issuecomment-4193477738
2026-04-07 16:32:06 +08:00
Alexey Cherednichenko
6c4008edad
Observatory: Clear removed outbounds ( #5876 )
...
* fix: prune stale observatory status
* More readable
Refactor observer to clear removed outbounds instead of updating status. Introduced slices package for improved outbound checking.
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-04-07 16:32:06 +08:00
LjhAUMEM
3f608b3a58
Finalmask quicParams: Add bbrProfile ("conservative" / "standard" (default) / "aggressive") ( #5869 )
...
And Update github.com/apernet/quic-go to 20260330051153
2026-04-05 13:45:50 +00:00
LjhAUMEM
4c3020ca6f
TUN inbound: Fix UDP FullCone NAT ( #5888 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5845
2026-04-05 12:59:22 +00:00
LjhAUMEM
ba88aa173c
WireGuard outbound: Fix UDP FullCone NAT on Linux ( #5858 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5848
2026-04-05 12:57:08 +00:00
hexband
08301e272c
Hysteria inbound: Unwrap stats conn before extracting user ( #5870 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5868
2026-04-03 21:26:25 +00:00
风扇滑翔翼
6eccc59728
WireGuard: Use Xray's buffer ( #5880 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5878
2026-04-03 21:22:45 +00:00
dependabot[bot]
1e89a8fd98
Bump google.golang.org/grpc from 1.79.3 to 1.80.0 ( #5885 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.3 to 1.80.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.80.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 18:52:07 +00:00
RPRX
d2758a023c
v26.3.27
...
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v1.260327.0
v26.3.27
2026-03-27 17:45:40 +00:00
LjhAUMEM
8aacdbd71b
WireGuard inbound: Fix multi-peer; Fix potential routing issue ( #5843 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5554
Fixes https://github.com/XTLS/Xray-core/issues/4760
2026-03-27 17:30:21 +00:00
LjhAUMEM
14524cc3b7
Finalmask: Add randRange to "noise" (UDP), as the same as "header-custom"'s (TCP & UDP) ( #5850 )
...
https://github.com/XTLS/Xray-core/pull/5812
2026-03-27 17:20:43 +00:00
RPRX
cb7bfeb54c
v26.3.23
...
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v26.3.23
2026-03-23 10:21:21 +00:00
风扇滑翔翼
d62f5cfb62
Loopback outbound: Fix potential nil InboundFromContext ( #5836 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5710
2026-03-23 10:11:17 +00:00
Copilot
755f0a1d12
VLESS Reverse Proxy: Add "sniffing" to outbound's "reverse" (which is actually an inbound) ( #5837 )
...
Closes https://github.com/XTLS/Xray-core/issues/5662
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-03-23 09:49:32 +00:00
Copilot
d8a8629a14
WireGuard outbound: Fix multi-peer's readQueue issue ( #5554 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4507
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-03-23 08:08:28 +00:00
风扇滑翔翼
982c95d89a
OpenBSD: Disable readV ( #5786 )
...
https://github.com/XTLS/Xray-core/pull/5784#issuecomment-4024880917
https://github.com/XTLS/Xray-core/issues/5756#issuecomment-4015530258
https://github.com/XTLS/Xray-core/pull/5824#issuecomment-4103829456
2026-03-23 07:57:35 +00:00
dependabot[bot]
ae3ddd1c06
Bump nick-fields/retry from 3 to 4 ( #5838 )
...
Bumps [nick-fields/retry](https://github.com/nick-fields/retry ) from 3 to 4.
- [Release notes](https://github.com/nick-fields/retry/releases )
- [Commits](https://github.com/nick-fields/retry/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: nick-fields/retry
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-23 07:40:05 +00:00
HeXis-YS
f926ee4aa0
XTLS Vision: Defer Splice handoff until write completes ( #5737 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4878
2026-03-22 17:48:33 +00:00
LjhAUMEM
67a71adad1
WireGuard: Implement UDP FullCone NAT ( #5833 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5601
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-03-22 17:42:40 +00:00
ClickDevTech
ce66db7032
README.md: Add CELERITY to Web Panel ( #5834 )
2026-03-22 17:14:16 +00:00
Boris Kovalskii
7d93062f3d
README.md: Add INCY to iOS & macOS Clients ( #5832 )
2026-03-22 17:10:29 +00:00
RPRX
2320416ca3
Update github.com/xtls/reality to 20260322125925
...
9234c772ba
ad4fbafc4b
cd53f7d502
2026-03-22 13:35:23 +00:00
RPRX
e0ab00f6a8
README.md: Add BlancVPN to Sponsors
...
Sponsor Xray-core: https://github.com/XTLS/Xray-core/issues/3668
2026-03-21 14:48:21 +00:00
RPRX
157e65b34d
REALITY config: Print Warning when user is choosing apple/icloud as the target or listening on non-443 ports
...
https://t.me/projectXtls/1754
https://github.com/XTLS/BBS/issues/21#issuecomment-4103308607
2026-03-21 13:19:32 +00:00
风扇滑翔翼
c1b67a961e
XHTTP transport: Some optimizations ( #5803 )
...
https://github.com/XTLS/Xray-core/pull/5801
https://github.com/XTLS/Xray-core/pull/5808
---------
Co-authored-by: Sergei Ozeranskii <sergey.ozeranskiy@gmail.com >
Co-authored-by: rufsieus <rufsieus@gmail.com >
2026-03-21 12:48:47 +00:00
Lumière Élevé
9e09399087
Xray-core: More robust browser header masquerading (chrome, firefox, edge) ( #5802 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5800
2026-03-21 12:24:08 +00:00
风扇滑翔翼
bb05684407
VLESS Reverse Proxy: Check burstObservatory immediately after inbound adds new reverse-mux to reverse-outbound ( #5752 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5750
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-03-21 11:16:24 +00:00
LjhAUMEM
06dc4cf8bd
Finalmask: Refactor header conns to avoid multiple-copy; Add randRange to "header-custom" (TCP & UDP) ( #5812 )
...
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016760602
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4052921628
2026-03-21 09:04:22 +00:00
Matthew
35800e953e
Commands: x25519 outputs "Password" -> "Password (PublicKey)" ( #5759 )
...
https://github.com/XTLS/Xray-core/discussions/5084#discussioncomment-14312223
https://github.com/XTLS/Xray-core/discussions/5123#discussioncomment-14364120
...
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-03-19 15:57:27 +00:00
Katana
50fc324728
REALITY config: Fix client's shortId length check ( #5738 )
2026-03-19 15:50:23 +00:00
WASDetchan
ec732b0b40
API: Fix potential nil pointer dereference in executeAddRules() ( #5749 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5748
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-03-19 10:33:34 +00:00
风扇滑翔翼
85f1234863
TUN inbound: Generate deterministic GUID on Windows ( #5811 )
...
Closes https://github.com/XTLS/Xray-core/issues/5810
2026-03-19 10:18:07 +00:00
dependabot[bot]
695a28c424
Bump google.golang.org/grpc from 1.79.2 to 1.79.3 ( #5821 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.2 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 09:18:01 +00:00
dependabot[bot]
9fd3d9a1eb
Bump golang.org/x/net from 0.51.0 to 0.52.0 ( #5793 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/net/compare/v0.51.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.52.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 09:17:49 +00:00
风扇滑翔翼
e86c365572
TLS ECH: Avoid outer ALPN http/1.1 for WSS & HUS; Change echForceQuery's default value to "full"; Update github.com/refraction-networking/utls to 20260301010127; Add irrelevant tests for uTLS-REALITY ( #5725 )
...
https://github.com/XTLS/Xray-core/pull/5725#issuecomment-3982680111
2026-03-09 12:49:49 +00:00
LjhAUMEM
0321cdd0d2
Hysteria & XHTTP/3: Unified Finalmask's quicParams to set congestion, brutalUp, brutalDown, udpHop (ports & interval), etc. ( #5772 )
...
https://github.com/XTLS/Xray-core/pull/5772#issuecomment-4023006179
2026-03-09 12:17:32 +00:00
LjhAUMEM
766fa71eb1
Update github.com/apernet/quic-go to 20260217092621 ( #5782 )
2026-03-09 12:10:03 +00:00
dependabot[bot]
01951163fd
Bump google.golang.org/grpc from 1.79.1 to 1.79.2 ( #5777 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.1 to 1.79.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-09 12:05:14 +00:00
saba-futai
acb06e831b
Finalmask: Add Sudoku (TCP & UDP) ( #5685 )
...
https://github.com/SUDOKU-ASCII/sudoku/issues/23#issuecomment-3859972396
2026-03-07 18:21:35 +00:00
LjhAUMEM
a204873d79
Finalmask: Add header-custom (TCP & UDP), fragment (TCP), noise (UDP); Support dialer-proxy, XHTTP/3; Fix XDNS, XICMP potential panic ( #5657 )
...
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016609446
2026-03-07 15:42:18 +00:00
LjhAUMEM
ea87941b77
mKCP transport: Make sure ACKs are limited within MTU ( #5773 )
...
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-3984236113
2026-03-07 15:21:25 +00:00
patterniha
88a2589498
mKCP config: Check TTI 10~100 -> Check TTI 10~5000 ( #5755 )
...
https://github.com/XTLS/Xray-core/pull/5755#issuecomment-3992400360
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-03-07 14:11:56 +00:00
Жора Змейкин
5138ffcf22
XHTTP transport: Add "bbr" (default) and "force-brutal" congestion control for H3 ( #5711 )
...
https://github.com/XTLS/Xray-core/pull/5711#issuecomment-3984037632
2026-03-07 12:46:40 +00:00
26X23
0ac13bd910
XHTTP transport: Bugfixes for obfuscations ( #5720 )
...
https://github.com/XTLS/Xray-core/pull/5720#issuecomment-4016290343
2026-03-07 12:34:41 +00:00
Yury Kastov
eec280262d
API: Fix Online Map ( #5732 )
...
https://github.com/XTLS/Xray-core/pull/5732#pullrequestreview-3863990264
2026-03-07 10:56:11 +00:00
Yury Kastov
78fc2865ea
Routing: Add webhook to rules ( #5722 )
...
https://github.com/XTLS/Xray-core/pull/5722#issuecomment-3953836108
2026-03-07 10:49:46 +00:00