v1.19.33

What's Changed

• 2df147b feat: support dns-mode for tun (#3288) by @chenx Dust

BUG & Fix

• 349af19 fix: the embedded shadowsocks listener can't be closed (#3314) by @token
• 8010193 fix: bound doh dials so ones the query gave up on cannot pile up (#3274) by @Cassian433
• 94b13ae fix: dialer-proxy cycle check takes quadratic time and memory (#3315) by @token
• c4e8186 fix: CVE-2026-97031 for crypto/tls by @wwqgtxx
• df1b07a fix: a sub-millisecond URL test is reported as a failure (#3316) by @token
• e4dd968 fix: keep fake-ip allocation state when cloning the pool on reload (#3283) by @younes Beriane
• 1354e52 fix: unpassed loadbalance test by @wwqgtxx

Maintenance

• 3f27ef3 chore: refactored and fixed issues for sudoku while also improving performance (#3333) by @saba-futai
• 9f053c4 chore: lazy init wireguard device and stack by @wwqgtxx
• bc76c13 chore: update mieru version (#3304) by @enfein

Full Changelog: v1.19.32...v1.19.33