v3.38.1

ℹ️ This is a bugfix release for v3.38.0. If you can, please instead use release v3.39.0

## Fixes

- `VPN_PORT_FORWARDING_LISTENING_PORT` fixed
- IPv6 support detection ignores loopback route destinations
- Custom provider:
  - handle `port` option line for OpenVPN
  - ignore comments in an OpenVPN configuration file
  - assume port forwarding is always supported by a custom server
- VPN Unlimited:
  - change default UDP port from 1194 to 1197
  - allow OpenVPN TCP on port 1197
- Private Internet Access Wireguard and port forwarding
  - Set server name if names filter is set with the custom provider (see #2147)
- PrivateVPN: updater now sets openvpn vpn type for the no-hostname server
- Torguard: update OpenVPN configuration
  - add aes-128-gcm and aes-128-cbc ciphers
  - remove mssfix, sndbuf, rcvbuf, ping and reneg options
- VPNSecure: associate `N / A` with no data for servers
- AirVPN: set default mssfix to 1320-28=1292
- Surfshark: remove outdated hardcoded retro servers
- Public IP echo:
  - ip2location parsing for latitude and longitude fixed
  - abort ip data fetch if vpn context is canceled (prevents requesting the public IP address N times after N VPN failures)
- `internal/server`: `/openvpn` route status get and put
  - get status return stopped if running Wireguard
  - put status changes vpn type if running Wireguard
- Log out if `PORT_FORWARD_ONLY` is enabled in the server filtering tree of settings
- Log last Gluetun release by tag name alphabetically instead of by release date
- `format-servers` fixed missing VPN type header for providers supporting Wireguard: NordVPN and Surfshark
- `internal/tun`: only create tun device if it does not exist, do not create if it exists and does not work