What's Changed

• 06387d50 feat: support fake-ip-filter-mode: rule mode (#2469) by @David
• 06f5fbac feat: add path-root for sudoku (#2511) by @saba-futai
• 0ad9ac32 feat: support aes-128-gcm, ratelimit and framesize for kcptun by @wwqgtxx
• 19a6b5d6 feat: support rule disabling and hit/miss count/at tracking in restful api (#2502) by @potoo0
• 487de9b5 feat: add PROCESS-NAME-WILDCARD and PROCESS-PATH-WILDCARD by @wwqgtxx
• 498f81aa feat: add header support for rule provider (#2463) by @joshua
• 4d767033 feat: all dns client support disable-qtype-<int> params by @wwqgtxx
• 7daf37bc feat: support http-mask-mode, http-mask-tls and http-mask-host for sudoku (#2456) by @saba-futai
• d6b12632 feat: support http-mask-multiplex for suduko (#2482) by @saba-futai
• f38fc202 feat: add grpc-user-agent to grpc-opts (#2512) by @Shaw
• 97bce45e chore: deprecated global-client-fingerprint, please set client-fingerprint directly on the proxy instead by @wwqgtxx
• Note: This version includes fixes for several security vulnerabilities in the utls and Golang tls standard libraries.

BUG & Fix

• 10f4bebd fix: only clear dstIP if it is confirmed to be a fake IP by @wwqgtxx
• 1a6230ec chore: update mieru version (#2484) by @enfein
• 4f0a6fa1 fix: gvisor panic by @wwqgtxx
• c393e917 fix: gvisor compatibility on go1.26 by @wwqgtxx
• c456370f fix: missing context cancel in pullLoop by @wwqgtxx
• c5b0f00b fix: logic issues with BBR impl by @Toby
• e6bf56b9 fix: os.(*Process).Wait not working on Windows7 by @wwqgtxx
• e6c0e3b1 fix: handle geoip:lan when GetRecodeSize() (#2460) by @HolgerHuo
• edbfebea fix: CVE-2025-68121 for crypto/tls by @wwqgtxx
• ee37a353 fix: incorrect timestamp conversion in brutal by @wwqgtxx

Maintenance

• 0818aa54 chore: provider a common entrance for YAML package by @wwqgtxx
• 0cf37de1 chore: better time storage in rule wrapper by @wwqgtxx
• 0cffc8d7 chore: revert "chore: update quic-go to 0.58.0" by @wwqgtxx
• 0f2baca2 chore: refactored the implementation of suduko mux (#2486) by @saba-futai
• 10ef29f5 chore: apply global ca in sudoku code by @wwqgtxx
• 11000dcc chore: add common/deque package by @wwqgtxx
• 1a6230ec chore: update mieru version (#2484) by @enfein
• 1f8bee97 chore: force to disable mptcp for tproxy by @wwqgtxx
• 287f9e51 chore: temporarily skip mieru inbound test in go1.26 on windows by @wwqgtxx
• 4f9bfd21 chore: add some comments for the finalizer by @wwqgtxx
• 64015b76 chore: update quic-go to 0.58.0 by @wwqgtxx
• 85ba7f6a chore: change import paths in sudoku code by @wwqgtxx
• 9168bee6 chore: align internal logic by @wwqgtxx
• 94c8d60f chore: simplified logic rule parsing by @wwqgtxx
• ae6069c1 chore: moving rules disabled and hit/miss counts data to extra for restful api (#2503) by @potoo0
• b18a3355 chore: remove unused pointer in rules implements by @wwqgtxx
• c128d23d chore: update quic-go to 0.59.0 by @wwqgtxx
• c8e33a43 chore: decrease rule wrapper memory usage by @wwqgtxx
• cdabd1e8 chore: update utls by @wwqgtxx
• eb30d3f3 chore: add a code comment for tproxy listener by @wwqgtxx
• efb80086 chore: update quic-go to 0.58.1 by @wwqgtxx

Full Changelog: https://github.com/MetaCubeX/mihomo/compare/v1.19.18...v1.19.19