Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mihomo for openSUSE:Factory checked in at 2026-08-17 16:59:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mihomo (Old) and /work/SRC/openSUSE:Factory/.mihomo.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mihomo" Mon Aug 17 16:59:15 2026 rev:4 rq:1371504 version:1.19.30 Changes: -------- --- /work/SRC/openSUSE:Factory/mihomo/mihomo.changes 2026-07-20 10:00:30.546490631 +0200 +++ /work/SRC/openSUSE:Factory/.mihomo.new.1258/mihomo.changes 2026-08-17 17:02:38.250758611 +0200 @@ -1,0 +2,51 @@ +Mon Aug 17 05:52:22 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 1.19.30: + * CVE-2026-56862: post-handshake TLS handshake messages such as + KeyUpdate were always treated as state-advancing, letting a + malicious client force unbounded key derivation on the server; + fixed by the vendored crypto/tls fork metacubex/tls 0.1.8 + (boo#1275032) + * Add a ZeroTier outbound, plus follow-up work on its network + lifecycle events, domain resolution, runtime synchronisation, + multicast/link state, equal-quality path selection and + packet-bridge throughput + * Add mipstack, a second userspace network stack alongside + gVisor, with BBR3, datagram and raw IP socket support; expose + it through a new "ip-stack" option on the openvpn, masque, + wireguard and ZeroTier outbounds + * Support AmneziaWG v3.0 and v3.1 + * Overhaul the sniffer: H2C and QUICv2 sniffing (#3036), + multi-round reads, ClientHello reassembly across TLS records, + HTTP/2 header blocks across continuation frames and coalesced + QUIC packets; keep connections open after an initial sniffing + failure and drop unnecessary sniffing waits + * Fix DNS handling: initialise DNS before NTP (#3103), truncate + UDP replies to the client's advertised buffer size (#3043), + echo the EDNS0 option when the request carries one (#3041) and + fix a panic when UDP is unsupported in dns_dialer + * Improve OpenVPN: survive server-initiated soft reset and rekey + (#3109) and allow overriding IV_VER through peer-info + * Harden ShadowQUIC/JLS: enforce JLS authentication in the QUIC + layer, avoid reserved TLS suffixes in JLS FakeRandom and + harden JLS camouflage forwarding + * Add "client-metadata" to anytls (not sent by default), + "handshake-timeout" to hysteria2 and "rate-limit" to the + restls listener + * Fix Tailscale not recovering after the network was restored, + and report the upstream Tailscale version (#3074, #3079) + * Apply the default uplink chunk size for xhttp (#3061) and + strictly verify Clash-style domain wildcard syntax + * Update bundled quic-go to 0.61.0, tailscale to v1.102.2, and + refresh gvisor, bart and mieru +- Widen License to "GPL-3.0-only AND MPL-2.0": the Go binary + statically links its vendored modules, and the new ZeroTier and + mipstack stacks are MPL-2.0 (as are the already-linked + metacubex/yamux and hashicorp/golang-lru) +- Run the upstream unit test suite in %check instead of only a + version smoke test, skipping the three listener/inbound + V2RayInterop tests that download and build v2ray-core at test + time; this needs "go test -skip", so raise the golang(API) + BuildRequires floor to 1.21 + +------------------------------------------------------------------- Old: ---- mihomo-1.19.29.tar.gz New: ---- mihomo-1.19.30.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mihomo.spec ++++++ --- /var/tmp/diff_new_pack.2O39av/_old 2026-08-17 17:02:39.302795781 +0200 +++ /var/tmp/diff_new_pack.2O39av/_new 2026-08-17 17:02:39.305795887 +0200 @@ -17,17 +17,28 @@ Name: mihomo -Version: 1.19.29 +Version: 1.19.30 Release: 0 Summary: The universal proxy platform -License: GPL-3.0-only +# Legal-Review-Notice: mihomo's own code is GPL-3.0-only, but the Go binary +# statically links its whole vendored module set, so the tag covers the linked +# set. Copyleft actually linked into the shipped binary (derived from +# "go list -deps" for linux/amd64+arm64 with -tags with_gvisor, mapped onto +# vendor/modules.txt): GPL-3.0-or-later (the metacubex/sing* family, fswatch, +# randv2, enfein/mieru, sina-ghaderi/*) - absorbed by GPL-3.0-only - and +# MPL-2.0 (metacubex/zerotier-go, metacubex/mipstack, metacubex/yamux, +# hashicorp/golang-lru). MPL-2.0 section 3.2 source availability is satisfied +# by vendor.tar.gz shipping in the src.rpm. +License: GPL-3.0-only AND MPL-2.0 URL: https://github.com/MetaCubeX/mihomo Source0: %{name}-%{version}.tar.gz Source1: vendor.tar.gz Source2: config.yaml Source3: %{name}.service Source4: start.sh -BuildRequires: golang(API) >= 1.20 +# upstream go.mod asks for go 1.20, but %%check uses "go test -skip", +# which exists only since go 1.21 +BuildRequires: golang(API) >= 1.21 BuildRequires: golang-packaging Requires: bash # mihomo is the maintained successor to clash (the original Dreamacro/clash was @@ -60,6 +71,20 @@ %check %{buildroot}%{_bindir}/%{name} -v +# Upstream's in-module unit tests run fully offline, with one exception: the +# listener/inbound *V2RayInterop tests shell out to +# "go get github.com/v2fly/v2ray-core/[email protected]" to build a v2ray binary at +# test time, which cannot work in the network-less build root - skip exactly +# those three. The separate test/ directory is its own module +# ("module mihomo-test") driving docker containers, so ./... never reaches it. +go test -mod=vendor -tags with_gvisor -skip V2RayInterop ./... >gotest.log 2>&1 || { + cat gotest.log + exit 1 +} +cat gotest.log +# A suite that collects zero tests also exits 0, so assert it really ran +# (55 packages report "ok" as of 1.19.30). +test "$(grep -c '^ok ' gotest.log)" -ge 50 %pre %service_add_pre %{name}.service ++++++ _service ++++++ --- /var/tmp/diff_new_pack.2O39av/_old 2026-08-17 17:02:39.391798926 +0200 +++ /var/tmp/diff_new_pack.2O39av/_new 2026-08-17 17:02:39.398799173 +0200 @@ -3,7 +3,7 @@ <service name="tar_scm" mode="manual"> <param name="url">https://github.com/MetaCubeX/mihomo.git</param> <param name="scm">git</param> - <param name="revision">v1.19.29</param> + <param name="revision">v1.19.30</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="match-tag">v*</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.2O39av/_old 2026-08-17 17:02:39.444800799 +0200 +++ /var/tmp/diff_new_pack.2O39av/_new 2026-08-17 17:02:39.450801011 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/MetaCubeX/mihomo.git</param> - <param name="changesrevision">e26714a181ac0e2fa803453c0a8e9a9ce94e31cb</param></service></servicedata> + <param name="changesrevision">ac017cdd246ce8bd547653d927e7bf77d7ee73d5</param></service></servicedata> (No newline at EOF) ++++++ mihomo-1.19.29.tar.gz -> mihomo-1.19.30.tar.gz ++++++ ++++ 17070 lines of diff (skipped) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/mihomo/vendor.tar.gz /work/SRC/openSUSE:Factory/.mihomo.new.1258/vendor.tar.gz differ: char 5, line 1
