chore: retarget upstream portal-tunnel v2.3.6

ada commented

2026-08-16 15:46:53 +00:00

Collaborator

Summary

Retarget the Rust relay compatibility baseline from upstream portal-tunnel v2.3.5 to v2.3.6.
Preserve tunnel/discovery protocol version 8 while accepting opt-in ECH registrations combined with UDP/raw-TCP leases.
Exclude relays after five direct discovery failures and restore them after an authoritative discovery success.
Retarget release assets, fixtures, docs, and official-client/API/JWT smoke defaults.

Upstream inspection

Release: https://github.com/gosuda/portal-tunnel/releases/tag/v2.3.6
Baseline: v2.3.5 79ccc6f2388dd47b0121c4593746150e084f1785
Target: v2.3.6 cf6bfa703ed3c6892ca13784ceb0136ef20eb2b4
Protocol versions remain tunnel 8, discovery 8; Rust SDK/discovery constants stay unchanged.
Relay-scope changes reviewed: optional tunnel ECH, ECH with UDP/raw TCP, dead-relay planning/list exclusion with recovery, hop-route fallback, and ACME ECH maintenance refactoring.

Checks

cargo fmt --check
cargo metadata --locked --no-deps
bash -n scripts/*.sh
git diff --check
Dockerized Linux cargo test --locked (146 passed, 3 ignored)
Dockerized Linux Clippy with -D warnings
ARM64 container runtime smoke
Go v2.3.6 vs Rust API-shape comparison
Go v2.3.6-issued JWT verification in Rust
SHA-verified official v2.3.6 ARM64 client direct HTTP and 45-second lifecycle smokes
SHA-verified official v2.3.6 ARM64 client ECH + raw TCP and ECH + UDP smokes
Forgejo PR CI
Forgejo post-merge target CI

Release audit trail

Target production tag: v2.3.6+rs.1
Dev counter trail: pending authoritative git/registry counter check after merge.
Tagged dev image/digest: pending.
Live Axis A/Axis B verification: pending tagged dev image.
Production image/digest: pending.
Release note link: pending promotion.

## Summary - Retarget the Rust relay compatibility baseline from upstream portal-tunnel v2.3.5 to v2.3.6. - Preserve tunnel/discovery protocol version 8 while accepting opt-in ECH registrations combined with UDP/raw-TCP leases. - Exclude relays after five direct discovery failures and restore them after an authoritative discovery success. - Retarget release assets, fixtures, docs, and official-client/API/JWT smoke defaults. ## Upstream inspection - Release: https://github.com/gosuda/portal-tunnel/releases/tag/v2.3.6 - Baseline: v2.3.5 `79ccc6f2388dd47b0121c4593746150e084f1785` - Target: v2.3.6 `cf6bfa703ed3c6892ca13784ceb0136ef20eb2b4` - Protocol versions remain tunnel `8`, discovery `8`; Rust SDK/discovery constants stay unchanged. - Relay-scope changes reviewed: optional tunnel ECH, ECH with UDP/raw TCP, dead-relay planning/list exclusion with recovery, hop-route fallback, and ACME ECH maintenance refactoring. ## Checks - [x] `cargo fmt --check` - [x] `cargo metadata --locked --no-deps` - [x] `bash -n scripts/*.sh` - [x] `git diff --check` - [x] Dockerized Linux `cargo test --locked` (146 passed, 3 ignored) - [x] Dockerized Linux Clippy with `-D warnings` - [x] ARM64 container runtime smoke - [x] Go v2.3.6 vs Rust API-shape comparison - [x] Go v2.3.6-issued JWT verification in Rust - [x] SHA-verified official v2.3.6 ARM64 client direct HTTP and 45-second lifecycle smokes - [x] SHA-verified official v2.3.6 ARM64 client ECH + raw TCP and ECH + UDP smokes - [ ] Forgejo PR CI - [ ] Forgejo post-merge target CI ## Release audit trail - Target production tag: `v2.3.6+rs.1` - Dev counter trail: pending authoritative git/registry counter check after merge. - Tagged dev image/digest: pending. - Live Axis A/Axis B verification: pending tagged dev image. - Production image/digest: pending. - Release note link: pending promotion.

ada added 1 commit

2026-08-16 15:46:53 +00:00