c86ad8abfd
Chore(deps): Bump github.com/amnezia-vpn/amneziawg-go
...
Bumps [github.com/amnezia-vpn/amneziawg-go](https://github.com/amnezia-vpn/amneziawg-go ) from 0.2.16 to 1.0.4.
- [Commits](https://github.com/amnezia-vpn/amneziawg-go/commits )
---
updated-dependencies:
- dependency-name: github.com/amnezia-vpn/amneziawg-go
dependency-version: 1.0.4
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 14:58:33 +00:00
c83d4b0926
Chore(deps): Bump golang.org/x/text from 0.34.0 to 0.35.0 ( #3227 )
2026-03-13 15:57:47 +01:00
b5b0e01376
Chore(deps): Bump github.com/mdlayher/netlink from 1.7.2 to 1.9.0 ( #3199 )
2026-03-11 21:43:10 +01:00
e6fc792f4f
feat(wireguard): amneziawg implementation ( #3150 )
2026-03-11 14:55:28 +01:00
a98b39a03f
Chore(deps): Bump golang.org/x/sys from 0.41.0 to 0.42.0 ( #3212 )
2026-03-10 13:50:57 +01:00
543d3fa95e
fix(dns): correct error wrapping for DNS listening address validation
...
- Fix #3216
2026-03-10 12:38:56 +00:00
199ad77ec9
chore(dns): remove DNS_SERVER, DNS_KEEP_NAMESERVER and replace DNS_ADDRESS with DNS_UPSTREAM_PLAIN_ADDRESSES ( #2988 )
...
- Remove `DNS_SERVER` (aka DOT) option: the DNS server forwarder part is now always enabled (see below why)
- Remove `DNS_KEEP_NAMESERVER`: the container will always use the built-in DNS server forwarder, because it can handle now local names with local resolvers (see #2970 ), it can use the `plain` upstream type (see https://github.com/qdm12/gluetun/commit/5ed6e8292278b54bb5081de0e8ccd0d63a275b3c ) AND you can use `DNS_UPSTREAM_PLAIN_ADDRESSES` (see below)
- Replace `DNS_ADDRESS` with `DNS_UPSTREAM_PLAIN_ADDRESSES`:
- New CSV format with port, for example `ip1:port1,ip2:port2`
- requires `DNS_UPSTREAM_TYPE=plain` to be set to use `DNS_UPSTREAM_PLAIN_ADDRESSES` (unless using retro `DNS_ADDRESS`)
- retrocompatibility with `DNS_ADDRESS`. If set, force upstream type to plain and empty user-picked providers. 127.0.0.1 is now ignored since it's always set to this value internally.
- Warning log on using private upstream resolvers updated
- Warning log if using a private IP address for the plain DNS server which is not in your local subnets
All in all, this greatly simplifies code and available options (less options for the same features is a win). It also allows you to specify multiple plain DNS resolvers on ports other than 53 if needed.
2026-03-07 14:07:57 +01:00
ede2509132
Chore(deps): Bump gopkg.in/ini.v1 from 1.67.0 to 1.67.1 ( #3090 )
2026-03-07 00:16:20 -05:00
850a91b35f
Chore(deps): Bump github.com/klauspost/compress from 1.18.1 to 1.18.4 ( #3198 )
2026-03-07 00:14:23 -05:00
49317ecb8a
Chore(deps): Bump golang.org/x/net from 0.49.0 to 0.51.0 ( #3200 )
2026-03-06 14:56:57 +01:00
48317a0d55
feat(main): log out OS, kernel version and architecture on start
2026-03-05 16:50:26 +00:00
b9d49e0661
Chore(deps): Bump github.com/breml/rootcerts from 0.3.3 to 0.3.4 ( #3128 )
2026-02-27 02:16:31 +01:00
034f8f6331
hotfix(netlink): specify IP family for conntrack calls and make conntrack failure a warning
2026-02-25 02:44:07 +00:00
625a63e7c2
fix(firewall): flush conntrack table after enabling firewall at container start
...
- prevent leaks for connections made the first ~10 milliseconds when Gluetun starts
- seems critical, but in practice this very rarely happen and it very hard to reproduce
2026-02-22 13:31:38 +00:00
dc78b4ecce
fix(dns): skip blocking if block lists download fails
2026-02-16 15:27:07 +00:00
e828ea1462
feat(dns): allow parent domains to be exempt from rebinding protection
...
- Specify with `*.domain.com` in DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES
- Fix #3135
2026-02-16 14:45:09 +00:00
facc6df3be
chore(all): replace netlink library for more flexibility ( #3107 )
2026-01-27 01:11:39 -08:00
d702ed4122
fix(dns): dns over tls re-uses TCP connections
...
- Bump dns to v2.0.0-rc10
- DNS over HTTPs not affected since it did re-use connections already
2025-12-22 21:09:22 +00:00
57d8eb03c5
Chore(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 ( #2999 )
2025-11-26 00:29:02 +01:00
2afa988174
hotfix(dns): resolve .site and .network domain names as non-local
2025-11-23 21:39:49 +00:00
843bf08aa1
chore(deps): bump dns to https://github.com/qdm12/dns/commit/248acd28339f329b0f51c7da987f8f7c72e59e45
2025-11-14 16:14:46 +00:00
0fddbc54a2
Chore(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 ( #2977 )
2025-11-13 23:27:51 +01:00
11fcfb7d19
Chore(deps): Bump golang.org/x/net from 0.46.0 to 0.47.0 ( #2976 )
2025-11-13 23:27:10 +01:00
3cd7d7edcb
Chore(deps): Bump golang.org/x/text from 0.30.0 to 0.31.0 ( #2975 )
2025-11-13 23:26:55 +01:00
8a0921748b
fix(protonvpn): authenticated servers data updating ( #2878 )
...
- `-proton-username` flag for cli update
- `-proton-password` flag for cli update
- `UPDATER_PROTONVPN_USERNAME` option for periodic updates
- `UPDATER_PROTONVPN_PASSWORD` option for periodic updates
2025-11-13 20:05:26 +01:00
596faef8f2
Chore(deps): Bump golang.org/x/sys from 0.37.0 to 0.38.0 ( #2973 )
2025-11-13 16:47:26 +01:00
7b25fdfee8
chore(deps): bump dns to v2.0.0-rc9
2025-11-05 20:56:37 +00:00
96d8b53338
Chore(deps): Bump github.com/breml/rootcerts from 0.3.2 to 0.3.3 ( #2964 )
2025-11-04 20:34:22 -05:00
e03f545e07
Chore(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 ( #2959 )
2025-11-04 15:33:12 +01:00
942f1f2c0f
Chore(deps): Bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 ( #2958 )
2025-11-04 15:33:00 +01:00
baf566d7a5
Chore(deps): Bump github.com/klauspost/compress from 1.17.11 to 1.18.1 ( #2957 )
2025-11-04 15:32:46 +01:00
2b513dd43d
Chore(deps): Bump github.com/vishvananda/netlink from 1.2.1 to 1.3.1 ( #2932 )
2025-10-30 17:02:32 +01:00
c70c2ef932
Chore(deps): Bump golang.org/x/net from 0.34.0 to 0.46.0 ( #2937 )
2025-10-30 17:00:30 +01:00
9d40564734
chore(deps): bump breml/rootcerts from v0.2.20 to v0.3.2
2025-10-30 15:59:20 +00:00
1394be5143
Chore(deps): Bump golang.org/x/sys from 0.29.0 to 0.37.0 ( #2939 )
2025-10-30 03:45:16 +01:00
d85402050b
Chore(deps): Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.15 ( #2955 )
2025-10-30 01:57:18 +01:00
b1c62cb525
Chore(deps): Bump golang.org/x/text from 0.21.0 to 0.30.0 ( #2938 )
2025-10-30 01:56:53 +01:00
340016521e
Chore(deps): Bump github.com/breml/rootcerts from 0.2.19 to 0.2.20 ( #2683 )
2025-10-06 13:36:00 +02:00
13532c8b4b
Chore(deps): Bump golang.org/x/net from 0.31.0 to 0.34.0 ( #2648 )
2025-01-22 09:26:57 +01:00
61b053f0e1
Chore(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 ( #2619 )
2024-12-27 21:15:31 +01:00
7e58b4baee
Chore(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 ( #2600 )
2024-12-14 21:19:30 +01:00
a21fbb9a4f
Chore(deps): Bump github.com/breml/rootcerts from 0.2.18 to 0.2.19 ( #2601 )
2024-12-14 21:19:11 +01:00
68ddbfc0fe
Chore(deps): Bump golang.org/x/net from 0.30.0 to 0.31.0 ( #2578 )
2024-11-18 10:46:04 +01:00
f9bdb219d0
chore(deps): update gosettings to v0.4.4
...
- Better support for quote expressions especially for commands such as VPN_PORT_FORWARDING_UP_COMMAND
2024-11-12 09:11:48 +00:00
c9707646bd
Chore(deps): Bump golang.org/x/sys from 0.26.0 to 0.27.0 ( #2573 )
2024-11-08 17:33:30 +01:00
c50705736b
Chore(deps): Bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 ( #2549 )
2024-11-08 17:33:18 +01:00
ec284c17f4
Chore(deps): Bump github.com/klauspost/compress from 1.17.9 to 1.17.11 ( #2550 )
2024-11-07 12:28:04 -08:00
ddd3876f92
chore(dns): upgrade dependency from v2.0.0-rc7 to v2.0.0-rc8
...
- do not log dial error twice
- DNS subserver shuts down without waiting for connections to finish (UDP server would hang sometimes)
- DNS over TLS dialer uses tls.Dialer instead of wrapping connection with tls.Client
- connection type is just `tls` instead of `dns over tls` to reduce repetition in logs
- exchange errors contain the request question in their context
2024-11-03 12:35:01 +00:00
30640eefe2
chore(deps): upgrade dns to v2.0.0-cr7
2024-10-25 14:01:29 +00:00
3daf15a612
chore(lint): fix gopls govet errors
2024-10-11 19:14:50 +00:00
dependabot[bot]