app/v2.9.3

renovatebot/renovateapp/v2.9.3Jun 27, 2026by github-actions[bot]

AI Summary

This release focuses on Hysteria Realms improvements, adding UPnP/NAT-PMP support, updating quic-go, and fixing various authentication and networking bugs.

Key Highlights

Added UPnP/NAT-PMP port mapping support for Hysteria Realms
Added Hysteria Realms ipMode option
Updated quic-go to v0.60.0
Fixed parsing of + in authentication credentials

New Features

UPnP/NAT-PMP support for Hysteria Realms
ipMode option for Hysteria Realms
quic-go update to v0.60.0
Fixed parsing of `+` in authentication credentials
Fixed HTTP proxy rejecting valid Basic auth
Fixed HTTPS proxy TLS SNI usage
Fixed data race in HTTP/SOCKS5 listener
Fixed nftables redirect for specific IPv6
DNS resolver CNAME chain length limit

Full Release Notes

- Added [Hysteria Realms](https://hysteria.network/docs/advanced/Realms/) UPnP/NAT-PMP port mapping support for easier NAT traversal
- Added a Hysteria Realms `ipMode` option to restrict connections to IPv4 or IPv6 only
- Updated quic-go to v0.60.0
- Fixed `+` in the authentication credentials being corrupted to a space when parsing `hysteria2://` sharing links
- Fixed the HTTP proxy rejecting valid Basic authentication credentials
- Fixed the HTTPS proxy outbound using `host:port` instead of the hostname as the TLS SNI
- Fixed a data race in the client's HTTP/SOCKS5 listener multiplexer
- Fixed nftables redirect failure when the server binds to a specific IPv6 address
- DNS resolver now limits CNAME chain length to prevent unbounded recursion

---

- 为 [Hysteria Realms](https://hysteria.network/zh/docs/advanced/Realms/) 新增 UPnP/NAT-PMP 支持以加强 NAT 穿透能力
- 为 Hysteria Realms 新增 `ipMode` 选项，可将连接限制为仅使用 IPv4 或 IPv6
- quic-go 更新至 v0.60.0
- 修复了解析 `hysteria2://` 分享链接时密码中的 `+` 被错误转换为空格的问题
- 修复了 HTTP 代理拒绝有效 Basic 验证凭据的问题
- 修复了 HTTPS 代理出站将 `host:port` 而非主机名用作 TLS SNI 的问题
- 修复了客户端 HTTP/SOCKS5 监听多路复用器中的线程安全问题
- 修复了服务端绑定指定 IPv6 地址时 nftables 重定向失效的问题
- DNS 解析器增加 CNAME 链长度限制，防止无限递归