starred/Cloak

Fork 0

mirror of https://github.com/cbeuw/Cloak.git synced 2026-04-25 04:25:59 +03:00

utls from 1.6.6 to 1.7.0 #309

New issue

Closed

opened 2026-02-26 12:34:34 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 12:34:34 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/cbeuw/Cloak/pull/305
Author: @dependabot[bot]
Created: 4/23/2025
Status: ❌ Closed

Base: master ← Head: dependabot/go_modules/github.com/refraction-networking/utls-1.7.0

📝 Commits (1)

d7b6c0d Bump github.com/refraction-networking/utls from 1.6.6 to 1.7.0

📊 Changes

2 files changed (+3 additions, -4 deletions)

View changed files

📝 go.mod (+1 -2)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/refraction-networking/utls from 1.6.6 to 1.7.0.

Release notes

Sourced from github.com/refraction-networking/utls's releases.

v1.7.0

What's Changed

Fix Config.InsecureSkipTimeVerify not being respected by @adotkhan in refraction-networking/utls#303

Fixes session ticket / PSK not set by @adotkhan in refraction-networking/utls#302

fix: generate ClientHelloSpec only once by @adotkhan in refraction-networking/utls#306

fix: extMasterSecret mismatch with extended_master_secret extension by @adotkhan in refraction-networking/utls#307

Merge changes from go 1.23.4 by @mingyech in refraction-networking/utls#323

build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 by @dependabot in refraction-networking/utls#326

Merge changes from go 1.24.0 by @mingyech in refraction-networking/utls#329

Add Chrome 131 parrot and ML-KEM support by @BRUHItsABunny in refraction-networking/utls#322

feat: add support for ECH when using custom clienthello specs by @mingyech in refraction-networking/utls#331

Fix check for TLS downgrade canary by @mingyech in refraction-networking/utls#337

build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 by @dependabot in refraction-networking/utls#336

New Contributors

@mingyech made their first contribution in refraction-networking/utls#323

@BRUHItsABunny made their first contribution in refraction-networking/utls#322

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.7...v1.7.0

v1.6.7 Allow inspecting Client Hello before locking Session/PSK

What's Changed

Allow BuildHandshakeState to inspect ClientHello before setting SessionTicket/PSK by @adotkhan in refraction-networking/utls#301

Full Changelog: https://github.com/refraction-networking/utls/compare/v1.6.6...v1.6.7

Commits

9dd2a0b build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
f889276 fix: add check for tls downgrade canary in utls
bd6a9be test: add test for checking tls downgrade canary
65ca559 fix: check nil dereference in keySharePrivateKey
f1c485f fix: fix tls versions for non-ech connections
167c602 fix: ech with hrr and add tests
f156fea feat: add support for ECH when using custom clienthello specs
e430876 feat: add latest chrome to auto
9d151db fix: Chrome 131 parrot needs to send ML-KEM keyshare too
877cd49 feat: Add Chrome 131 parrot
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/cbeuw/Cloak/pull/305 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/23/2025 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/refraction-networking/utls-1.7.0` --- ### 📝 Commits (1) - [`d7b6c0d`](https://github.com/cbeuw/Cloak/commit/d7b6c0d068c4675f44015ffcc18576dd642807b0) Bump github.com/refraction-networking/utls from 1.6.6 to 1.7.0 ### 📊 Changes **2 files changed** (+3 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -2) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/refraction-networking/utls](https://github.com/refraction-networking/utls) from 1.6.6 to 1.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/refraction-networking/utls/releases">github.com/refraction-networking/utls's releases</a>.</em></p> <blockquote> <h2>v1.7.0</h2> <h2>What's Changed</h2> <ul> <li>Fix Config.InsecureSkipTimeVerify not being respected by <a href="https://github.com/adotkhan"><code>@adotkhan</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/303">refraction-networking/utls#303</a></li> <li>Fixes session ticket / PSK not set by <a href="https://github.com/adotkhan"><code>@adotkhan</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/302">refraction-networking/utls#302</a></li> <li>fix: generate ClientHelloSpec only once by <a href="https://github.com/adotkhan"><code>@adotkhan</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/306">refraction-networking/utls#306</a></li> <li>fix: extMasterSecret mismatch with extended_master_secret extension by <a href="https://github.com/adotkhan"><code>@adotkhan</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/307">refraction-networking/utls#307</a></li> <li>Merge changes from go 1.23.4 by <a href="https://github.com/mingyech"><code>@mingyech</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/323">refraction-networking/utls#323</a></li> <li>build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/326">refraction-networking/utls#326</a></li> <li>Merge changes from go 1.24.0 by <a href="https://github.com/mingyech"><code>@mingyech</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/329">refraction-networking/utls#329</a></li> <li>Add Chrome 131 parrot and ML-KEM support by <a href="https://github.com/BRUHItsABunny"><code>@BRUHItsABunny</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/322">refraction-networking/utls#322</a></li> <li>feat: add support for ECH when using custom clienthello specs by <a href="https://github.com/mingyech"><code>@mingyech</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/331">refraction-networking/utls#331</a></li> <li>Fix check for TLS downgrade canary by <a href="https://github.com/mingyech"><code>@mingyech</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/337">refraction-networking/utls#337</a></li> <li>build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/336">refraction-networking/utls#336</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mingyech"><code>@mingyech</code></a> made their first contribution in <a href="https://redirect.github.com/refraction-networking/utls/pull/323">refraction-networking/utls#323</a></li> <li><a href="https://github.com/BRUHItsABunny"><code>@BRUHItsABunny</code></a> made their first contribution in <a href="https://redirect.github.com/refraction-networking/utls/pull/322">refraction-networking/utls#322</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/refraction-networking/utls/compare/v1.6.7...v1.7.0">https://github.com/refraction-networking/utls/compare/v1.6.7...v1.7.0</a></p> <h2>v1.6.7 Allow inspecting Client Hello before locking Session/PSK</h2> <h2>What's Changed</h2> <ul> <li>Allow BuildHandshakeState to inspect ClientHello before setting SessionTicket/PSK by <a href="https://github.com/adotkhan"><code>@adotkhan</code></a> in <a href="https://redirect.github.com/refraction-networking/utls/pull/301">refraction-networking/utls#301</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/refraction-networking/utls/compare/v1.6.6...v1.6.7">https://github.com/refraction-networking/utls/compare/v1.6.6...v1.6.7</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/refraction-networking/utls/commit/9dd2a0b12d85d6f751b48ce52ae79e7069b3b46f"><code>9dd2a0b</code></a> build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0</li> <li><a href="https://github.com/refraction-networking/utls/commit/f8892761e2a4d29054264651d3a86fda83bc83f9"><code>f889276</code></a> fix: add check for tls downgrade canary in utls</li> <li><a href="https://github.com/refraction-networking/utls/commit/bd6a9be3c4eac30c8bf679fe136ee9ee35673adf"><code>bd6a9be</code></a> test: add test for checking tls downgrade canary</li> <li><a href="https://github.com/refraction-networking/utls/commit/65ca559f9db69b7eb82e56ed749f746070087335"><code>65ca559</code></a> fix: check nil dereference in keySharePrivateKey</li> <li><a href="https://github.com/refraction-networking/utls/commit/f1c485fe02db690e4cd7165b25c609cf212dee8c"><code>f1c485f</code></a> fix: fix tls versions for non-ech connections</li> <li><a href="https://github.com/refraction-networking/utls/commit/167c602e40acaf83833d8eb395aa4787383f2ad4"><code>167c602</code></a> fix: ech with hrr and add tests</li> <li><a href="https://github.com/refraction-networking/utls/commit/f156fea2705ce47d50154e10789a280e455db882"><code>f156fea</code></a> feat: add support for ECH when using custom clienthello specs</li> <li><a href="https://github.com/refraction-networking/utls/commit/e430876b1d82fdf582efc57f3992d448e7ab3d8a"><code>e430876</code></a> feat: add latest chrome to auto</li> <li><a href="https://github.com/refraction-networking/utls/commit/9d151db9ddb7c4599afb46f6adb71acdce3656ad"><code>9d151db</code></a> fix: Chrome 131 parrot needs to send ML-KEM keyshare too</li> <li><a href="https://github.com/refraction-networking/utls/commit/877cd4985cd55b008d708abb58cf5b19ab7981ca"><code>877cd49</code></a> feat: Add Chrome 131 parrot</li> <li>Additional commits viewable in <a href="https://github.com/refraction-networking/utls/compare/v1.6.6...v1.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/refraction-networking/utls&package-manager=go_modules&previous-version=1.6.6&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/cbeuw/Cloak/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem

2026-02-26 12:34:34 +03:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/Cloak#309

No description provided.

Rows
Columns