wayback

wayback copied to clipboard

Sourced from github.com/refraction-networking/utls's releases.

v1.7.0

What's Changed

• Fix Config.InsecureSkipTimeVerify not being respected by @​adotkhan in refraction-networking/utls#303
• Fixes session ticket / PSK not set by @​adotkhan in refraction-networking/utls#302
• fix: generate ClientHelloSpec only once by @​adotkhan in refraction-networking/utls#306
• fix: extMasterSecret mismatch with extended_master_secret extension by @​adotkhan in refraction-networking/utls#307
• Merge changes from go 1.23.4 by @​mingyech in refraction-networking/utls#323
• build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 by @​dependabot in refraction-networking/utls#326
• Merge changes from go 1.24.0 by @​mingyech in refraction-networking/utls#329
• Add Chrome 131 parrot and ML-KEM support by @​BRUHItsABunny in refraction-networking/utls#322
• feat: add support for ECH when using custom clienthello specs by @​mingyech in refraction-networking/utls#331
• Fix check for TLS downgrade canary by @​mingyech in refraction-networking/utls#337
• build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 by @​dependabot in refraction-networking/utls#336

New Contributors

• @​mingyech made their first contribution in refraction-networking/utls#323
• @​BRUHItsABunny made their first contribution in refraction-networking/utls#322

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.7...v1.7.0

v1.6.7 Allow inspecting Client Hello before locking Session/PSK

What's Changed

• Allow BuildHandshakeState to inspect ClientHello before setting SessionTicket/PSK by @​adotkhan in refraction-networking/utls#301

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.6...v1.6.7

v1.6.6 Hotfix: QUIC must not send non-empty session ID by RFC

What's Changed

• quic: always use empty session ID by @​gaukas in refraction-networking/utls#297

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.5...v1.6.6

v1.6.5 Popular Firefox 120 parrot and deps update

What's Changed

• build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 by @​dependabot in refraction-networking/utls#293
• Update Firefox 120 parrot to a more popular version by @​adotkhan in refraction-networking/utls#296

New Contributors

• @​adotkhan made their first contribution in refraction-networking/utls#296

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.4...v1.6.5

v1.6.4 bugfix: UConn incorrectly inherits Conn methods

What's Changed

• build(deps): bump github.com/quic-go/quic-go from 0.40.1 to 0.42.0 by @​dependabot in refraction-networking/utls#289
• fix: (*UConn).Read() and Secure Renegotiation by @​gaukas in refraction-networking/utls#292

... (truncated)

• 9dd2a0b build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
• f889276 fix: add check for tls downgrade canary in utls
• bd6a9be test: add test for checking tls downgrade canary
• 65ca559 fix: check nil dereference in keySharePrivateKey
• f1c485f fix: fix tls versions for non-ech connections
• 167c602 fix: ech with hrr and add tests
• f156fea feat: add support for ECH when using custom clienthello specs
• e430876 feat: add latest chrome to auto
• 9d151db fix: Chrome 131 parrot needs to send ML-KEM keyshare too
• 877cd49 feat: Add Chrome 131 parrot
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.