From 7352811eefd381cd9481abecdde4e87211d2f3d7 Mon Sep 17 00:00:00 2001 From: Maximilian Hils Date: Sat, 19 Mar 2022 14:52:14 +0100 Subject: [PATCH] bump to 8.0.0 --- CHANGELOG.md | 17 +++++++++++++++-- mitmproxy/version.py | 2 +- release/README.md | 2 +- 3 files changed, 17 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index dce13fadb..b3222190f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,9 +2,22 @@ ## Unreleased: mitmproxy next +### Major Changes + +* Major improvements to the web interface (@gorogoroumaru) +* Event hooks can now be async (@nneonneo, [#5106](https://github.com/mitmproxy/mitmproxy/issues/5106)) +* New [`tls_{established,failed}_{client,server}` event hooks](https://docs.mitmproxy.org/dev/api/events.html#TLSEvents) + to record negotiation success/failure (@mhils, [#4790](https://github.com/mitmproxy/mitmproxy/pull/4790)) + +### Security Fixes + +* [CVE-2022-24766](https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-gcx2-gvj7-pxv3): + Fix request smuggling vulnerability reported by @zeyu2001 (@mhils) + +### Full Changelog + * Support proxy authentication for SOCKS v5 mode (@starplanet) * Make it possible to ignore connections in the tls_clienthello event hook (@mhils) -* Add `tls_established/failed_client/server` event hooks to record negotiation success/failure (@mhils) * fix some responses not being decoded properly if the encoding was uppercase (#4735, @Mattwmaster58) * Trigger event hooks for flows with semantically invalid requests, for example invalid content-length headers (@mhils) * Improve error message on TLS version mismatch (@mhils) @@ -28,7 +41,6 @@ * Add example addon for saving streamed data to individual files (@EndUser509) * Change connection event hooks to be blocking. Processing will only resume once the event hook has finished. (@Prinzhorn) -* Allow addon hooks to be async (@nneonneo, #4207) * Reintroduce `Flow.live`, which signals if a flow belongs to a currently active connection. (#4207, @mhils) * Speculative fix for some rare HTTP/2 connection stalls (#5158, @EndUser509) * Add ability to specify custom ports with LDAP authentication (#5068, @demonoidvk) @@ -38,6 +50,7 @@ * Lowercase user-added header names and emit a log message to notify the user when using HTTP/2 (#4746, @mhils) * Exit early if there are errors on startup (#4544, @mhils) * Fixed encoding guessing: only search for meta tags in HTML bodies (##4566, @Prinzhorn) +* Binaries are now built with Python 3.10 (@mhils) ## 28 September 2021: mitmproxy 7.0.4 diff --git a/mitmproxy/version.py b/mitmproxy/version.py index ffaffc731..686fdf134 100644 --- a/mitmproxy/version.py +++ b/mitmproxy/version.py @@ -2,7 +2,7 @@ import os import subprocess import sys -VERSION = "8.0.0.dev" +VERSION = "8.0.0" MITMPROXY = "mitmproxy " + VERSION # Serialization format version. This is displayed nowhere, it just needs to be incremented by one diff --git a/release/README.md b/release/README.md index fbb6820d6..b14737122 100644 --- a/release/README.md +++ b/release/README.md @@ -3,7 +3,7 @@ These steps assume you are on the correct branch and have a git remote called `origin` that points to the `mitmproxy/mitmproxy` repo. If necessary, create a major version branch starting off the release tag (e.g. `git checkout -b v4.x v4.0.0`) first. - Update CHANGELOG. -- Verify that the compiled mitmweb assets are up-to-date. +- Verify that the compiled mitmweb assets are up-to-date (`npm start prod`). - Verify that all CI tests pass. - Verify that `mitmproxy/version.py` is correct. Remove `.dev` suffix if it exists. - Tag the release and push to GitHub.