Starstruk Logo MarkStarstruk

v1.0.0

devicons/deviconv1.0.0Feb 10, 2026by github-actions[bot]

AI Summary

Version 1.0.0 introduces significant networking enhancements including eBPF-based ICMP tracking, PCAP export with process attribution, and GeoIP location support. The release also improves stability with process detection warnings and adds ARM64 static builds for broader deployment.

Key Highlights

  • eBPF-based ICMP PID Tracking
  • PCAP Export with Process Attribution
  • GeoIP Location Support
  • ARM64 Musl Static Builds
  • Process Detection Degradation Warnings

New Features

  • GeoIP Location Support
  • PCAP Export with Process Attribution
  • eBPF-based ICMP PID Tracking
  • Process Detection Degradation Warnings
  • ARM64 Musl Static Builds

Full Release Notes


### Added
- **GeoIP Location Support**: Show country codes for remote IPs using GeoLite2 databases with auto-discovery (#151)
- **PCAP Export with Process Attribution**: Export captured packets to PCAP files with a process attribution JSONL sidecar for Wireshark enrichment (#137)
- **eBPF-based ICMP PID Tracking**: Track process IDs for ICMP connections using eBPF on Linux (#136)
- **Process Detection Degradation Warnings**: Show warnings in the UI when process detection falls back to a less accurate method (#128)
- **ARM64 Musl Static Builds**: CI now produces arm64 musl static Linux builds with eBPF support

### Fixed
- **Service Name Precedence**: Corrected ordering when multiple service name sources conflict (#150)
- **Pointer Dereference Safety**: Use `as_ref()` for safer pointer dereference in macOS/FreeBSD interface stats (#147)
- **Clippy Warnings**: Resolve `unnecessary_unwrap` errors flagged by clippy (#144)
- **ICMP Dead Code**: Remove dead code warning in ICMP handling (#138)
- **GitHub Actions Permissions**: Add explicit permissions to all GitHub Actions workflows (#131)
- **Logging Initialization**: Set up logging level before privileges check for earlier diagnostic output (#143)

### Changed
- **SSH Heuristic Tightened**: Tighten SSH packet structure heuristic to reduce false positives (#135)
- **CI Reusable Workflows**: Share build logic via reusable workflow, remove redundant test-static-builds workflow
- **Chocolatey Automation**: Trigger Chocolatey package publish on release automatically
- **Code Alignment**: Refactoring and code alignment improvements (#149)
- **Dependencies**: Updated libbpf-rs to 0.26, bumped clap, time, zip, lru, and libc
- **Documentation**: Clarified RustNet vs Wireshark positioning, added PowerShell font troubleshooting, added JSON logging to feature comparison, added bandwhich to acknowledgments (#129, #130, #132, #133)