What's Changed

• fix: error code incremented correctly by @WankkoRee in #1010
• *: fix BoringSSL keylog capture on Android 15/16 by @colorcc1024 in #1008

New Contributors

• @colorcc1024 made their first contribution in #1008

Full Changelog: v2.4.1...v2.4.2

What's Changed

• docs: clarify kernel version requirements for Linux and Android in documentation by @cfc4n in #1002
• fix: add default value to MasterHookFuncs as v1 by @WankkoRee in #1005
• feat: implement probabilistic upgrade check and fix release URL by @cfc4n in #1007
• fix: add newline when write keylog by @WankkoRee in #1004

New Contributors

• @WankkoRee made their first contribution in #1005

Full Changelog: v2.4.0...v2.4.1

What's Changed

• refactor: generalize perf event reorder handling by @skylar2826 in #991
• chore: remove unused tools/ directory (check_dsb.go) by @cfc4n in #997
• feat(android16): support BoringSSL TLS capture on Android 16 by @cfc4n in #998
• fix: prevent data loss on EventProcessor shutdown due to worker abandonment by @Copilot in #1000

New Contributors

Full Changelog: v2.3.0...v2.4.0

What's Changed

• fix(ci): fix PR comment workflow not running for fork PRs by @cfc4n in #983
• feat: disable HTTP server by default by @Xeonacid in #987
• fix: warn when --pid/--uid filters are silently ignored on kernel < 5.2 by @Copilot in #988
• feat: gotls Upload sequence; Fix the issue where disorderly arrival c… by @skylar2826 in #978

New Contributors

• @Xeonacid made their first contribution in #987

Full Changelog: v2.2.2...v2.3.0

What's Changed

• fix: cgroup filtering for TC hook and GoTLS uprobe by @Copilot in #979

Full Changelog: v2.2.1...v2.2.2

What's Changed

• feat: restore --cgroup_path CLI parameter for tls subcommand by @Copilot in #975
• fix: auto-detect active network interface for Android e2e PCAP mode by @Copilot in #976

Full Changelog: v2.2.0...v2.2.1

What's Changed

• chore: add Devin DeepWiki configuration by @cfc4n in #968
• Add AGENTS.md for AI coding agent guidance by @cfc4n in #969
• refactor(kern): deduplicate headers, unify style, translate comments by @cfc4n in #970
• fix(pcapwriter): serialize DSB keylog writes and fix race condition in Close() by @cfc4n in #971
• fix(e2e): fix test failures and improve test reliability by @cfc4n in #972

Full Changelog: v2.1.0...v2.2.0

What's Changed

• feat: gotls Get tuple information by @skylar2826 in #960
• Fix ecaptureQ remote mode: wire event writer to probe dispatcher by @Copilot in #964
• feat: enhance documentation with security and operations guidelines by @cfc4n in #966

Full Changelog: v2.0.1...v2.1.0

What's Changed

• fix: GoVersion After function logic error by @webfrogs in #932
• feat: refactor architecture and enhance TLS probing for eCapture v2.0.0 by @cfc4n in #953
• fix: correct ConnDataEvent Saddr/Daddr size from [32]byte to [16]byte to match C struct by @Copilot in #954
• feat(gotls): add fd extraction from tls.Conn for connection tuple sup… by @skylar2826 in #947
• fix: improve DNS resolution for Android emulator by using custom DNS server by @cfc4n in #957
• fix: adjust test counting logic to handle skipped tests in android_tl… by @cfc4n in #963

Full Changelog: v1.5.2...v2.0.1

What's Changed

⚠️ Breaking Changes

• Architecture refactoring: Completely migrated from the legacy user/ directory to the new internal/probe standardized architecture. The old user/ directory has been deleted. (#911, #912, #913, #914)
• Build tag rename: Build tag androidgki has been renamed to ecap_android. (#930)
• eBPF bytecode directory: eBPF bytecode assets have been relocated to ebpfassets/ directory structure.

🏗️ Architecture Refactoring (v2 Foundation)

• Implement clean architecture foundation — Phase 3 complete + Phase 4 Plan B: All simple probes migrated (Bash, Zsh, MySQL, Postgres) by @Copilot in #911
• feat: Phase 4 TLS probe refactoring — Complete all libraries (OpenSSL, GnuTLS, NSPR, GoTLS) with multi-mode support and factory registration by @Copilot in #912
• Complete eCapture v2 Architecture Refactoring (Phases 5-7): E2E Tests, Deprecation, Migration Guide, Complete eBPF Code Migration, and CLI Integration Plan by @Copilot in #913
• Complete migration to internal/probe architecture: CLI commands, eCaptureQ HTTP server, eBPF bytecode directory, and user/ directory deletion (8/8 probes) by @Copilot in #914
• Refactor pkg/event_processor to remove user/event dependency and fix CLI compilation by @Copilot in #915
• Refactor gotls probe to follow standardized architecture pattern by @Copilot in #916
• Refactor OpenSSL probe to follow standardized architecture pattern by @Copilot in #917
• refactor(nspr): Complete probe refactoring to standardized architecture by @Copilot in #918
• refactor: Refactor the event dispatcher setup and probe initialization process by @cfc4n in #924
• refactor: migrate build tag from androidgki to ecap_android by @cfc4n in #930

✨ New Features

• feat: add ELF path configuration and refactor eBPF filename handling in GoTLS probe by @cfc4n
• feat: implement logger writer and enhance output handling in various components by @cfc4n in #925
• feat: implement buffered pcapng packet writing with interface metadata and improved closure handling by @cfc4n in #928
• feat: Optimize GoTLS event handling, enhance OpenSSL configuration (including Android support), and add configuration validation by @cfc4n in #936
• feat: add connection event handling and enhance TLS event structure with additional fields by @cfc4n in #938

🐛 Bug Fixes & Improvements

• refactor: rename documentation files and update capture mode handling in configuration by @cfc4n in #923
• refactor: rename Chinese documentation files and update links in README by @cfc4n in #927
• Fix E2E test failures: Android arch detection, missing curl fallback, keylog test tolerance by @Copilot in #944
• Revert non-tag changes, keep ebpfassets/dynamic, minimally fix unit tests by @cfc4n in #945

🧪 Testing

• Add comprehensive E2E test suite with 72+ scenarios covering all modules by @Copilot in #919

🔧 CI/CD & Tooling

• feat: enhance release workflow with pre-release detection and Docker tagging by @cfc4n
• docs: add comprehensive documentation for eCapture project and update compilation references by @cfc4n

New Contributors

Full Changelog: v1.5.2...v2.0.0