Mihomo（Clash.Meta 内核） v1.19.6

Incompatible changes:

• For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the SAFE_PATHS environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)
• In addition, support for specifying routing-mark and interface-name for proxy-groups has been removed. Please specify the relevant parameters in proxies directly.

What's Changed

• 5c40a634 feat: not inline rule-provider can also set payload as fallback rules when file/http parsing fails by @wwqgtxx
• 99aa1b0d feat: inbound support shadow-tls by @wwqgtxx
• f328203b feat: not inline proxy-provider can also set payload as fallback proxies when file/http parsing fails by @wwqgtxx

BUG & Fix

• 2b4726b9 fix: build on go1.24.3 https://github.com/golang/go/issues/73617 by @wwqgtxx
• 2fb93312 fix: some resources are not released in listener by @wwqgtxx
• 468cfc3c fix: set sni to servername if not specified for trojan outbound (#1991) by @WeidiDeng
• 48d8efb3 fix: do NOT reset the quic-go internal state when only port is different by @wwqgtxx
• 52ad793d fix: shadowtls v1 not work by @wwqgtxx
• 61d6a9ab fix: fetcher does not start the pull loop when local file parsing errors occur and the first remote update fails by @wwqgtxx
• 7de4af28 fix: shadowtls test by @wwqgtxx
• 86c127db fix: missing read waiter for cancelers by @wwqgtxx
• e6e7aa5a fix: alpn apply on shadowtls by @wwqgtxx
• f7742768 fix: ensure wait group completes by @Larvan2
• febb6021 fix: hysteria2 inbound not set UDPTimeout by @wwqgtxx

Maintenance

• 26e6d83f chore: make select display the specified testUrl for https://github.com/MetaCubeX/mihomo/issues/2013 by @xishang0128
• 4ecb49b3 chore: dynamic fetch remoteAddr in hysteria2 service by @wwqgtxx
• 50d7834e chore: change the separator of the SAFE_PATHS environment variable to the default separator of the operating system platform (i.e., ; in Windows and : in other systems) by @wwqgtxx
• 791ea5e5 chore: allow setting addition safePaths by environment variable SAFE_PATHS package managers can allow for pre-defined safe paths without disabling the entire security check feature for https://github.com/MetaCubeX/mihomo/issues/2004 by @wwqgtxx
• 793ce45d chore: update quic-go to 0.51.0 by @wwqgtxx
• 7e7016b5 chore: removed routing-mark and interface-name of the group, please set it directly on the proxy instead by @wwqgtxx
• 936df90a chore: update dependencies by @wwqgtxx
• 9e57b298 chore: update dependencies by @wwqgtxx
• a013ac32 chore: give better error messages for some stupid config files by @wwqgtxx
• aa51b9fa chore: replace using internal batch package to x/sync/errgroup by @wwqgtxx
• b4fe6698 chore: better path checks by @wwqgtxx
• c2301f66 chore: rebuild fingerprint and keypair handle by @wwqgtxx
• cad26ac6 chore: fetcher will change duration to achieve fast retry when the update failed with a 2x factor step from 1s to interval by @wwqgtxx
• d55b0471 chore: ignore interfaces not with FlagUp in local interface finding by @wwqgtxx
• ee5d77cf chore: cleanup tls clientFingerprint code by @wwqgtxx

Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.5...v1.19.6