xray 25.10.15

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

• resource blocks have been checked for updates.

release notes

## VLESS Reverse Proxy: Transfer real Source & Local (IP & port), enabled by default https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3404979909
本次重点更新内容：

VLESS Reverse Proxy 默认加了传递公网端的 Source & Local (IP & port) 到内网端，详见 VLESS protocol: Add Reverse Proxy (4) Command and extremely simple config XTLS/Xray-core#5101 (comment)
升级了 uTLS 库以修复 Chrome 指纹的问题，客户端应当尽快升级，详见 [Critical] [Pending] uTLS fingerprint leakage, and how to disable uTLS XTLS/Xray-core#5230 (comment)
看到很多小白不会配置 XHTTP XMUX 还抱怨测速不理想，索性把 maxConcurrency 默认改为了 1 试试
@KobeArthurScofield 参考 VLESS 出站简化了所有协议的出站配置，并且现在每个出站只能有一个 end point 和 user

VLESS NFT
VLESS NFT 自成一个系列，每个图片都不同且只有一个，你可以选择自己喜欢的图片来收藏，先到先得
https://opensea.io/collection/vless 首发放出了二十个不同的 VLESS NFT 图片
本次还放出了两个稀缺的 Project X NFT，如果你有余力，请支持一下：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
该版本升级了一些依赖，并使用 Go 1.25.3 拉满 inline 编译，已 tag v1.251015.0，感谢所有贡献者，详见下方 change log
What's Changed

app/dispatcher/default.go: Add comment on run-time rejecting non-existent outbound tag by @RPRX in XTLS/Xray-core@5148c57
app/dispatcher/default.go: Close link when routedDispatch() failed by @patterniha in app/dispatcher/default.go: Close link when routedDispatch() failed XTLS/Xray-core#5131
Config: Outbound proxy config no need to be nested by @KobeArthurScofield in Config: Outbound proxy config no need to be nested XTLS/Xray-core#5124
Outbound: One endpoint and at most one user only by @KobeArthurScofield in Outbound: One endpoint and at most one user only XTLS/Xray-core#5144
Fix vless reverse panic in vision by @Fangliding in Fix vless reverse panic in vision XTLS/Xray-core#5189
External config: Add unix socket HTTP loader support by @kastov in External config: Add unix socket HTTP loader support XTLS/Xray-core#5200
fix: darwin arm64 always has AESGCMHardwareSupport by @wwqgtxx in fix: darwin arm64 always has AESGCMHardwareSupport XTLS/Xray-core#5176
Fix shadowsocks2022 memory leak by @Fangliding in Fix shadowsocks2022 memory leak XTLS/Xray-core#5166
transport/internet/reality/reality.go: Safely get negotiated CurveID in VerifyPeerCertificate() by @RPRX in XTLS/Xray-core@40f0a54
README.md: Add PasarGuard to Web Panels by @M03ED in README.md: Add PasarGuard to Web Panels XTLS/Xray-core#5224
Router: Use built-in-dns only once for all rules (in "IPOnDemand"/"IPIfNonMatch" mode) by @patterniha in Router: Use built-in-dns only once for all rules (in "IPOnDemand"/"IPIfNonMatch" mode) XTLS/Xray-core#5210
XHTTP client: Change default maxConcurrency to 1 for speed testing by @RPRX in XTLS/Xray-core@9cc7907
VLESS Reverse Proxy: Transfer real Source & Local (IP & port), enabled by default by @RPRX in XTLS/Xray-core@12f4a01

New Contributors

@wwqgtxx made their first contribution in fix: darwin arm64 always has AESGCMHardwareSupport XTLS/Xray-core#5176

Full Changelog: XTLS/Xray-core@v25.9.11...v25.10.15

View the full release notes at https://github.com/XTLS/Xray-core/releases/tag/v25.10.15.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.