What's Changed

• e889b689 feat: support H2C and QUICv2 sniffing (#3036) by @Kosta
• 05b5334c feat: add handshake-timeout for hysteria2 by @wwqgtxx
• 1265cb9a feat: add ip-stack option for masque outbound by @wwqgtxx
• 4ad27d81 feat: add ip-stack option for ZeroTier by @wwqgtxx
• 8453e589 feat: support AmneziaWG v3.0 by @wwqgtxx
• 8b76447b feat: add ip-stack option for wireguard outbound by @wwqgtxx
• 8c56780b feat: support AmneziaWG v3.1 by @wwqgtxx
• b0825150 feat: add Zerotier outbound support by @wwqgtxx
• b27c659a feat: add client-metadata configuration to anytls and DON'T sent by default by @wwqgtxx
• bb80689b feat: support bbr3 for mipstack by @wwqgtxx
• d46944f3 feat: add ip-stack option for openvpn outbound by @wwqgtxx
• e40b5962 feat: add rate-limit for restls listener by @wwqgtxx

BUG & Fix

• 25ccc4dd fix: handle zerotier network lifecycle events correctly by @wwqgtxx
• 2e8a04c9 fix: tailscale failed to recover after the network was restored by @wwqgtxx
• 33154579 fix: CVE-2026-56862 for crypto/tls by @wwqgtxx
• 3a779dda fix: typo in uplinkHTTPMethod (#3029) by @Kosta
• 4fcf9aed fix: track QUIC crypto stream coverage without repeated range sorting by @wwqgtxx
• 5e3cb10b fix: avoid reserved TLS suffixes in JLS FakeRandom by @wwqgtxx
• 63f15f2d fix: keep connections open after initial sniffing failures by @wwqgtxx
• 69a3142a fix: apply default uplink chunk size for xhttp (#3061) by @vanbujhm
• 7ac597bd fix: domain resolve logic in zerotier outbound by @wwqgtxx
• 8d1b6616 fix: avoid unnecessary waits in HTTP/2 sniffing by @wwqgtxx
• 8d710081 fix: typo in error string (#3090) by @Rye Sears
• 9574a46c fix: truncate udp dns replies to the client's advertised buffer size (#3043) by @TWO666
• 95f7a0c5 fix: remove incorrect quic error wrapping by @wwqgtxx
• 978d25ae fix: enforce ShadowQUIC JLS authentication in QUIC layer by @wwqgtxx
• 98f1200d fix: panic when UDP is not supported in dns_dialer by @wwqgtxx
• 9b9dc8a0 fix: survive server-initiated soft reset and rekey for openvpn (#3109) by @ayanami-desu
• 9d901dc7 fix: prevent CUBIC ACKs from reducing cwnd for gvisor by @wwqgtxx
• a2c9556a fix: HTTP/2 read loop spinning on underlying StreamError by @wwqgtxx
• a939fc1c fix: compilation errors under specific circumstances by @wwqgtxx
• ac017cdd fix: initialize DNS before NTP (#3103) by @xYx
• ace20375 fix: echo edns0 opt in dns replies when the request carries one (#3041) by @TWO666
• afeb0728 fix: trim trailing newline from Tailscale VersionDotTxt in IPNVersion (#3079) by @胡威
• b9894451 fix: reduce PROTOCOL_VIOLATION errors on masque dialing by setting ConnectionIDLength by @wwqgtxx
• c1603f4d fix: coordinate TCP sniffers on overlapping ports by @wwqgtxx
• c7089c00 fix: include the upstream tailscale version for standardization (#3074) by @Feng.YJ
• cd05b74f fix: harden zerotier runtime synchronization by @wwqgtxx
• e18ef3a1 fix: harden ShadowQUIC JLS camouflage forwarding by @wwqgtxx
• ea9c544e fix: avoid unnecessary waits in TLS and QUIC sniffing by @wwqgtxx
• f298cd2e fix: normalize HTTP hosts and avoid unnecessary sniffing delays by @wwqgtxx
• f5fddd37 fix: preserve WebSocket 0-RTT data order by @wwqgtxx
• f83a0721 fix: let QUIC sniffer handle Retry key changes by @wwqgtxx
• fb002210 fix: tun dns hijack sending zero-filled or stale packets when PackBuffer reallocates (#3037) by @TWO666

Maintenance

• 09b0ff3c chore: reduce interface differences between gVisor and mipstack by @wwqgtxx
• 0ba9f2f6 chore: remove dohMaxConnsPerHost & dohMaxIdleConns (#3048) by @ayanamist
• 1af24e98 chore: update tailscale to v1.102.2 by @wwqgtxx
• 1ef16c71 chore: harden TCP pacing and handshake state handling by @wwqgtxx
• 26c635f6 chore: avoid string reversal allocation in DomainSet.Has (#3049) by @Ember Moth
• 2bade294 chore: allow the sniffer to read more data if possible by @wwqgtxx
• 2ea54615 chore: adjust internal dialQuic api by @wwqgtxx
• 3c16aaf1 chore: update quic-go to 0.61.0 by @wwqgtxx
• 3cac8696 chore: reduce ZeroTier wire data-path overhead by @wwqgtxx
• 4859d142 chore: let quic sniffer handle coalesced packets and larger client hello by @wwqgtxx
• 49a5419d chore: update tailscale to v1.102.0 by @wwqgtxx
• 63024e39 chore: remove unused imports in test by @wwqgtxx
• 669db1ba chore: harden QUIC Initial packet processing by @wwqgtxx
• 6bb8b983 chore: strictly verify the syntax for Clash-style domain wildcards by @wwqgtxx
• 7259bbb8 chore: update mipstack for api adjustment by @wwqgtxx
• 73b061a7 chore: split internal dns server handler by @wwqgtxx
• 770800e9 chore: reduce packet-path and TCP allocation overhead by @wwqgtxx
• 7ee0b05b chore: allow override IV_VER by peer-info for OpenVPN by @wwqgtxx
• 7ff65441 chore: improve ZeroTier reliability and throughput under load by @wwqgtxx
• 8df94628 chore: update mipstack for api adjustment by @wwqgtxx
• 944e8e1a chore: align MIPS TCP keepalive defaults with sing-wireguard behavior by @wwqgtxx
• 94a89fb7 chore: reject oversized sniff reads before filling the buffer by @wwqgtxx
• 97cbdc52 chore: update gvisor by @wwqgtxx
• 99ce79c9 chore: reduce packet queue contention and socket allocation churn by @wwqgtxx
• 9a9c4c6e chore: improve zerotier event diagnostics by @wwqgtxx
• a52c00b2 chore: expand datagram and raw IP socket support for mipstack by @wwqgtxx
• b9faf971 chore: improve internal sharing mechanism for dnsClient by @wwqgtxx
• c235dc18 chore: let the sniffer assemble client hello across TLS records by @wwqgtxx
• c807c9a0 chore: let the HTTP/2 sniffer assemble header blocks across continuation frames by @wwqgtxx
• cb8e9900 chore: let sniffer support multi-round reading by @wwqgtxx
• cf98d2d5 chore: align ZeroTier link configuration and multicast state by @wwqgtxx
• d8fbf85f chore: update bart by @wwqgtxx
• dd7bc4c6 chore: reduce ZeroTier packet processing overhead by @wwqgtxx
• dfd7e896 chore: align congestion control with Linux by @wwqgtxx
• e183c580 chore: stabilize equal-quality peer path selection for ZeroTier by @wwqgtxx
• e9f62979 chore: improve ZeroTier packet bridge throughput by @wwqgtxx
• ee2db897 chore: let gVisor allow HandleLocal working with PromiscuousMode by @wwqgtxx
• efd63d87 chore: extract bitmap handling from QUIC crypto reassembly by @wwqgtxx
• f5fbe0c4 chore: update mieru version (#3046) by @enfein

Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.29...v1.19.30