Skip to content

deps: bump github.com/apernet/hysteria/core/v2 from 2.9.2 to 2.12.0 in /extra/hysteria2 - #19

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/extra/hysteria2/github.com/apernet/hysteria/core/v2-2.12.0
Open

deps: bump github.com/apernet/hysteria/core/v2 from 2.9.2 to 2.12.0 in /extra/hysteria2#19
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/extra/hysteria2/github.com/apernet/hysteria/core/v2-2.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown

Bumps github.com/apernet/hysteria/core/v2 from 2.9.2 to 2.12.0.

Release notes

Sourced from github.com/apernet/hysteria/core/v2's releases.

app/v2.12.0

  • Added mimic integration, which disguises the connection as TCP for networks that restrict UDP (Linux only, requires mimic to be installed separately)
  • Improved the accuracy of Chrome QUIC fingerprint parroting
  • Fixed a BBR panic on paths with a small MTU, introduced in 2.11.0 by Chrome parroting
  • Various dependency updates

  • 新增 mimic 集成,可将连接伪装成 TCP,用于限制 UDP 的网络环境(仅限 Linux,需另行安装 mimic)
  • 提升 Chrome QUIC 指纹模仿的准确度
  • 修复了小 MTU 下一个 BBR panic 问题,由 2.11.0 的 Chrome 指纹模仿引入
  • 若干依赖更新

app/v2.11.0

  • Added Chrome QUIC fingerprint parroting: the client's QUIC handshake now looks like Google Chrome's. Enabled by default, but can be turned off with the quic.disableChromeParrot option
  • Modernized the ACME stack (CertMagic, ACMEz and the libdns providers)
  • Removed the namedotcom ACME DNS provider, as it has not been updated for the new libdns API
  • Updated quic-go to v0.61.0

  • 新增 Chrome QUIC 指纹模仿:将客户端 QUIC 握手调整至与 Google Chrome 一致。默认启用,可通过 quic.disableChromeParrot 选项关闭
  • 更新 ACME 相关依赖(CertMagic, ACMEz, libdns 等)
  • 移除了 namedotcom ACME DNS 服务商,由于其未针对新的 libdns API 进行更新
  • quic-go 更新至 v0.61.0

app/v2.10.0

  • Added Encrypted Client Hello support
  • Added a bandwidth.disableLossCompensation option for disabling Brutal congestion control's loss compensation mechanism, which can improve stability in some cases
  • Various dependency updates and minor bug fixes

  • 新增 Encrypted Client Hello 支持
  • 新增 bandwidth.disableLossCompensation 选项,用于关闭 Brutal 的速率补偿机制,可以在一些情况下提升稳定性
  • 若干依赖更新与小修复

app/v2.9.3

  • Added Hysteria Realms UPnP/NAT-PMP port mapping support for easier NAT traversal
  • Added a Hysteria Realms ipMode option to restrict connections to IPv4 or IPv6 only
  • Updated quic-go to v0.60.0
  • Fixed + in the authentication credentials being corrupted to a space when parsing hysteria2:// sharing links
  • Fixed the HTTP proxy rejecting valid Basic authentication credentials
  • Fixed the HTTPS proxy outbound using host:port instead of the hostname as the TLS SNI
  • Fixed a data race in the client's HTTP/SOCKS5 listener multiplexer
  • Fixed nftables redirect failure when the server binds to a specific IPv6 address
  • DNS resolver now limits CNAME chain length to prevent unbounded recursion

... (truncated)

Commits
  • 23c9086 chore: bump quic-go
  • 31602dd Merge branch 'feat/mimic'
  • 55d8745 Merge pull request #1651 from apernet/dependabot/go_modules/github.com/databa...
  • f9d534d Merge pull request #1653 from apernet/dependabot/go_modules/github.com/mdp/qr...
  • 7cc24ac Merge pull request #1655 from apernet/dependabot/uv/cryptography-50.0.0
  • e540e28 chore(deps): bump github.com/mdp/qrterminal/v3 from 3.1.1 to 3.2.1
  • fc548ac chore(deps): bump github.com/database64128/tfo-go/v2 from 2.2.2 to 2.3.3
  • e1c8652 Merge pull request #1648 from apernet/dependabot/go_modules/extras/github.com...
  • 8a478e2 feat: mimic support
  • 8856986 chore(deps): bump cryptography from 49.0.0 to 50.0.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/apernet/hysteria/core/v2](https://github.com/apernet/hysteria) from 2.9.2 to 2.12.0.
- [Release notes](https://github.com/apernet/hysteria/releases)
- [Commits](apernet/hysteria@app/v2.9.2...app/v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/apernet/hysteria/core/v2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants