5.0.0: remove Uri and the timeouts from the public API, add Shadowsocks - #3

Merged

Titlehhhh merged 35 commits into

feature/robustness-api

Sep 30, 2026

Commits on Sep 6, 2026

make the API usable in bulk and close two holes in the exception contract

Titlehhhh
and
claude
committed
6e4fdef

Commits on Sep 8, 2026

feat: speak Shadowsocks AEAD over TCP

Titlehhhh
and
claude
committed
7feb18a

Commits on Sep 9, 2026

fix(shadowsocks): stop reading a bare password as a cipher name

Titlehhhh
and
claude
committed
4b23f48

Commits on Sep 14, 2026

fix(http): bracket an IPv6 literal target in CONNECT

Titlehhhh
and
claude
committed
d26832f
fix: reach a proxy at an IPv6 address

Titlehhhh
and
claude
committed
1d9f4b1
fix(https): check the proxy's certificate against the proxy's name

Titlehhhh
and
claude
committed
e43e8e4
feat: take the connect target as an EndPoint

Titlehhhh
and
claude
committed
3b1c993
fix(socks): keep an over-long string inside the exception contract

Titlehhhh
and
claude
committed
850a1c3
fix(http): clear the pooled buffers that held credentials

Titlehhhh
and
claude
committed
09ba561
fix: stop leaving tunnel bytes in pooled arrays on synchronous span I/O

Titlehhhh
and
claude
committed
11c1f81
fix(vmess): an '@' in the remark no longer rejects a base64 link

Titlehhhh
and
claude
committed
5065bec
fix: decode escaped credentials in a classic proxy link

Titlehhhh
and
claude
committed
2c406cf
feat!: take Uri out of the public API

Titlehhhh
and
claude
committed
539ac05
fix: one connect path, with the timeout as a cancellation

Titlehhhh
and
claude
committed
a8e7420
perf(reality): expand HKDF as its single block

Titlehhhh
and
claude
committed
491244d
perf: stop boxing async state machines in the tunnel streams

Titlehhhh
and
claude
committed
ef545d3
refactor(transport): Ascii.EqualsIgnoreCase and span Trim for upgrade headers

Titlehhhh
and
claude
committed
5df4932
fix(https): let SslStream's own check say why a certificate is refused

Titlehhhh
and
claude
committed
cdc03da
build: turn on the trim and AOT analyzers

Titlehhhh
and
claude
committed
f18e45e
refactor: throw helpers for argument checks, and a timeout doc that was wrong

Titlehhhh
and
claude
committed
9aec0e3
fix: decode share-link base64 the same on .NET 10 and .NET 11

Titlehhhh
and
claude
committed
8815e6f
fix(vless): refuse an undecodable REALITY key or short id before connecting

Titlehhhh
and
claude
committed
8e6166a
feat!: remove ReadTimeout and WriteTimeout

Titlehhhh
and
claude
committed
9186eeb
fix(reality): be as strict as Go's client around the server's Finished

Titlehhhh
and
claude
committed
234968f
fix(socks): size the request buffer for the largest SOCKS4a request

Titlehhhh
and
claude
committed
969b0d6
fix: refuse control characters in a target host, and a NUL in a SOCKS4 user id

Titlehhhh
and
claude
committed
1e33046
fix(reality): bound the server name and ALPN list where the configuration enters

Titlehhhh
and
claude
committed
6632200
fix: refuse control characters in a ws/httpupgrade request and in a proxy host

Titlehhhh
and
claude
committed
fbb0cf8
chore: assert the internal invariants the stream and record code relies on

Titlehhhh
and
claude
committed
ad3d356
fix: report a socks link without a host as malformed, as an http one already was

Titlehhhh
and
claude
committed
a7ae68e
test: assert the exact exception where a catch-all would pass a failed assert

Titlehhhh
and
claude
committed
624435b
docs: say what a failed Debug.Assert does under dotnet test, and what may be asserted

Titlehhhh
and
claude
committed
0fcbe7e
chore: store SocksHelper.cs as text again

Titlehhhh
and
claude
committed
1acdbad

Commits on Sep 30, 2026

fix(http): clear the response buffer before returning it to the pool

Titlehhhh
and
claude
committed
e88d998
docs: package notes and READMEs for 5.0.0

Titlehhhh
and
claude
committed
dd8a178