Patch release to restore the broken v2.3.0 release pipeline. No functional changes to proxying behavior beyond a hardening fix.
- v2.3.0 published no binaries: Go 1.26 removed the windows/arm port, that build failed, and fail-fast cancelled all other targets. The matrix now excludes windows/arm and no longer fail-fasts (#187)
go installinstructions fixed: the main package isgithub.com/mosajjal/sniproxy/v2/cmd/sniproxy(#187)- install.sh now aborts on a failed download instead of installing a broken systemd service (#187)
- ACL refresh workers are now waited on during shutdown (fixes a teardown race)
- DoH server bounds request body size before form parsing
- docs: CIDR ACL gotchas — IPv4 CIDRs don't match IPv6 clients, and docker bridge NAT can hide real client IPs (#186)
Note: windows/arm (32-bit) binaries are no longer published since Go itself dropped the port. windows/arm64 is still built.