Beta 3.0.0 release

.github/workflows/golang.yml

@@ -13,14 +13,16 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.25'
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
 
       - name: Build
         working-directory: ./cycletls
         run: go build -v ./...
 
-      - name: Test
+      - name: Test with race detector
         working-directory: ./cycletls
-        run: go test -v ./...
+        run: go test -race -v ./...

.github/workflows/manual_publish.yml

@@ -14,29 +14,32 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [16.x]
-        go-version: ['1.21']
+        node-version: [20.x]
+        go-version: ['1.25']
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: 🟢 Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           registry-url: https://registry.npmjs.org
+          cache: 'npm'
 
       - name: Install jq
         run: sudo apt-get install -y jq
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go-version }}
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
 
       - name: set name
         run: git config --global user.name 'Danny-Dasilva'
 
       - name: set email
-        run: git config --global user.email 'secrets.EMAIL'
+        run: git config --global user.email '${{ secrets.EMAIL }}'
 
       - name: Get Package Name
         run: |
@@ -45,7 +48,7 @@ jobs:
 
       - name: Retrieve Latest Version
         run: |
-          echo "::set-output name=LATEST_VERSION::$(npm view ${{ env.PACKAGE_NAME }} version)"
+          echo "LATEST_VERSION=$(npm view ${{ env.PACKAGE_NAME }} version)" >> $GITHUB_OUTPUT
         id: version
 
       - name: Update to latest version
@@ -61,14 +64,10 @@ jobs:
               npm version prerelease --preid beta
           fi
 
-      - name: Set module-aware mode
-        run: go env -w  GO111MODULE=auto
-
       - name: Install golang dependencies
-        run: while read l; do go get -v "$l"; done < <(go list -f '{{ join .Imports "\n" }}' ./cycletls)
-        shell: bash
+        run: cd cycletls && go mod download && go mod verify
 
-      - name: Install npm depencencies
+      - name: Install npm dependencies
         run: npm ci --unsafe-perm
 
       - name: Tag Submodule

.github/workflows/security.yml

@@ -0,0 +1,47 @@
+name: Security Scan
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: '0 0 * * 0'  # Weekly on Sunday at midnight UTC
+
+jobs:
+  npm-audit:
+    name: NPM Security Audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js 20.x
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run npm audit
+        run: npm audit --audit-level=high
+
+  go-vulncheck:
+    name: Go Vulnerability Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
+
+      - name: Install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+
+      - name: Run vulnerability check
+        working-directory: ./cycletls
+        run: govulncheck ./...

.github/workflows/test_golang.yml

@@ -1,38 +1,145 @@
-name: 🧪 🐹 Go Integration/Unit Tests
+name: 🧪 Go Tests
 
-on: [push]
+on:
+  push:
+    branches: [main, 'version/**']
+  pull_request:
 
 jobs:
-  test:
+  go-unit:
+    name: Go Unit
     strategy:
       matrix:
-        go-version: ['1.24']
+        go-version: ['1.25']
         platform: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.platform }}
 
     steps:
       - uses: actions/checkout@v4
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go-version }}
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
+
       - name: Download Dependencies
         working-directory: ./cycletls
         run: go mod download
+
       - name: Build
         working-directory: ./cycletls
         run: go build -v ./...
 
       - name: Unit Test
         working-directory: ./cycletls
-        run: go test --race -v ./...
+        run: go test -race -v ./...
+
+  go-integration:
+    name: Go Integration (soft-fail)
+    strategy:
+      matrix:
+        go-version: ['1.25']
+        platform: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.platform }}
+    # Non-blocking: failures don't fail the workflow
+    continue-on-error: true
 
-      - name: Start SOCKS Proxy (only on ubuntu)
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
+
+      - name: Download Dependencies
+        working-directory: ./cycletls
+        run: go mod download
+
+      - name: Build
+        working-directory: ./cycletls
+        run: go build -v ./...
+
+      - name: Start SOCKS Proxy (Ubuntu)
         if: matrix.platform == 'ubuntu-latest'
         run: |
-          docker run -d -p 9050:9050 dperson/torproxy
+          # Download pre-built gost binary (simple SOCKS5 proxy, faster than Tor)
+          curl -sL https://github.com/go-gost/gost/releases/download/v3.2.6/gost_3.2.6_linux_amd64.tar.gz | tar xz
+          nohup ./gost -L socks5://127.0.0.1:9050 > /tmp/gost.log 2>&1 &
+          # Wait for proxy to be ready
+          for i in {1..30}; do
+            if nc -z 127.0.0.1 9050 2>/dev/null; then
+              echo "SOCKS proxy is ready on port 9050"
+              break
+            fi
+            sleep 1
+          done
+
+      - name: Start SOCKS Proxy (macOS)
+        if: matrix.platform == 'macos-latest'
+        run: |
+          # Download pre-built gost binary (faster than brew install)
+          ARCH=$(uname -m)
+          if [ "$ARCH" = "arm64" ]; then
+            curl -sL https://github.com/go-gost/gost/releases/download/v3.2.6/gost_3.2.6_darwin_arm64.tar.gz | tar xz
+          else
+            curl -sL https://github.com/go-gost/gost/releases/download/v3.2.6/gost_3.2.6_darwin_amd64.tar.gz | tar xz
+          fi
+          nohup ./gost -L socks5://127.0.0.1:9050 > /tmp/gost.log 2>&1 &
+          # Wait for proxy to be ready
+          for i in {1..30}; do
+            if nc -z 127.0.0.1 9050 2>/dev/null; then
+              echo "SOCKS proxy is ready on port 9050"
+              break
+            fi
+            sleep 1
+          done
+
+      - name: Integration Tests (excluding tlsfingerprint)
+        id: integration-tests
+        working-directory: ./cycletls
+        run: |
+          go test -race -v -tags=integration ./tests/integration/... -skip 'tlsfingerprint'
+
+      - name: Report integration test results
+        if: always()
+        shell: bash
+        run: |
+          if [ "${{ steps.integration-tests.outcome }}" == "failure" ]; then
+            echo "::warning::Integration tests failed - see logs for details"
+          fi
+
+  go-tls-fingerprint:
+    name: Go TLS Fingerprint
+    strategy:
+      matrix:
+        go-version: ['1.25']
+        platform: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.platform }}
+    # Blocking: failures fail the workflow
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+          cache: true
+          cache-dependency-path: ./cycletls/go.sum
+
+      - name: Download Dependencies
+        working-directory: ./cycletls
+        run: go mod download
+
+      - name: Build
+        working-directory: ./cycletls
+        run: go build -v ./...
 
-      - name: Integration Tests
+      - name: TLS Fingerprint Integration Tests
         working-directory: ./cycletls
-        run: go test --race -v -tags=integration ./...
+        run: go test -race -v -tags=integration ./tests/integration/tlsfingerprint/...