eCapture v2.2.1

What's Changed

• feat: restore --cgroup_path CLI parameter for tls subcommand by @Copilot in #975
• fix: auto-detect active network interface for Android e2e PCAP mode by @Copilot in #976

Full Changelog: v2.2.0...v2.2.1

eCapture v2.2.0

What's Changed

• chore: add Devin DeepWiki configuration by @cfc4n in #968
• Add AGENTS.md for AI coding agent guidance by @cfc4n in #969
• refactor(kern): deduplicate headers, unify style, translate comments by @cfc4n in #970
• fix(pcapwriter): serialize DSB keylog writes and fix race condition in Close() by @cfc4n in #971
• fix(e2e): fix test failures and improve test reliability by @cfc4n in #972

Full Changelog: v2.1.0...v2.2.0

eCapture v2.1.0

What's Changed

• feat: gotls Get tuple information by @skylar2826 in #960
• Fix ecaptureQ remote mode: wire event writer to probe dispatcher by @Copilot in #964
• feat: enhance documentation with security and operations guidelines by @cfc4n in #966

Full Changelog: v2.0.1...v2.1.0

eCapture v2.0.1

What's Changed

• fix: GoVersion After function logic error by @webfrogs in #932
• feat: refactor architecture and enhance TLS probing for eCapture v2.0.0 by @cfc4n in #953
• fix: correct ConnDataEvent Saddr/Daddr size from [32]byte to [16]byte to match C struct by @Copilot in #954
• feat(gotls): add fd extraction from tls.Conn for connection tuple sup… by @skylar2826 in #947
• fix: improve DNS resolution for Android emulator by using custom DNS server by @cfc4n in #957
• fix: adjust test counting logic to handle skipped tests in android_tl… by @cfc4n in #963

Full Changelog: v1.5.2...v2.0.1

eCapture v2.0.0

What's Changed

⚠️ Breaking Changes

• Architecture refactoring: Completely migrated from the legacy user/ directory to the new internal/probe standardized architecture. The old user/ directory has been deleted. (#911, #912, #913, #914)
• Build tag rename: Build tag androidgki has been renamed to ecap_android. (#930)
• eBPF bytecode directory: eBPF bytecode assets have been relocated to ebpfassets/ directory structure.

🏗️ Architecture Refactoring (v2 Foundation)

• Implement clean architecture foundation — Phase 3 complete + Phase 4 Plan B: All simple probes migrated (Bash, Zsh, MySQL, Postgres) by @Copilot in #911
• feat: Phase 4 TLS probe refactoring — Complete all libraries (OpenSSL, GnuTLS, NSPR, GoTLS) with multi-mode support and factory registration by @Copilot in #912
• Complete eCapture v2 Architecture Refactoring (Phases 5-7): E2E Tests, Deprecation, Migration Guide, Complete eBPF Code Migration, and CLI Integration Plan by @Copilot in #913
• Complete migration to internal/probe architecture: CLI commands, eCaptureQ HTTP server, eBPF bytecode directory, and user/ directory deletion (8/8 probes) by @Copilot in #914
• Refactor pkg/event_processor to remove user/event dependency and fix CLI compilation by @Copilot in #915
• Refactor gotls probe to follow standardized architecture pattern by @Copilot in #916
• Refactor OpenSSL probe to follow standardized architecture pattern by @Copilot in #917
• refactor(nspr): Complete probe refactoring to standardized architecture by @Copilot in #918
• refactor: Refactor the event dispatcher setup and probe initialization process by @cfc4n in #924
• refactor: migrate build tag from androidgki to ecap_android by @cfc4n in #930

✨ New Features

• feat: add ELF path configuration and refactor eBPF filename handling in GoTLS probe by @cfc4n
• feat: implement logger writer and enhance output handling in various components by @cfc4n in #925
• feat: implement buffered pcapng packet writing with interface metadata and improved closure handling by @cfc4n in #928
• feat: Optimize GoTLS event handling, enhance OpenSSL configuration (including Android support), and add configuration validation by @cfc4n in #936
• feat: add connection event handling and enhance TLS event structure with additional fields by @cfc4n in #938

🐛 Bug Fixes & Improvements

• refactor: rename documentation files and update capture mode handling in configuration by @cfc4n in #923
• refactor: rename Chinese documentation files and update links in README by @cfc4n in #927
• Fix E2E test failures: Android arch detection, missing curl fallback, keylog test tolerance by @Copilot in #944
• Revert non-tag changes, keep ebpfassets/dynamic, minimally fix unit tests by @cfc4n in #945

🧪 Testing

• Add comprehensive E2E test suite with 72+ scenarios covering all modules by @Copilot in #919

🔧 CI/CD & Tooling

• feat: enhance release workflow with pre-release detection and Docker tagging by @cfc4n
• docs: add comprehensive documentation for eCapture project and update compilation references by @cfc4n

New Contributors

Full Changelog: v1.5.2...v2.0.0

eCapture v2.0.0-rc.4

What's Changed

• feat: add connection event handling and enhance TLS event structure with additional fields by @cfc4n in #938

Full Changelog: v2.0.0-rc.3...v2.0.0-rc.4

eCapture v2.0.0-rc.3

What's Changed

• feat: Optimize GoTLS event handling, enhance OpenSSL configuration (including Android support), and add configuration validation by @cfc4n in #936

Full Changelog: v2.0.0-rc.2...v2.0.0-rc.3

eCapture v2.0.0-rc.2

What's Changed

• refactor: migrate build tag from androidgki to ecap_android by @cfc4n in #930

Full Changelog: v2.0.0-rc.1...v2.0.0-rc.2

eCapture v2.0.0-rc.1

What's Changed

• refactor: rename Chinese documentation files and update links in README by @cfc4n in #927
• feat: implement buffered pcapng packet writing with interface metadata and improved closure handling by @cfc4n in #928

Full Changelog: v2.0.0-beta.2...v2.0.0-rc.1

eCapture v2.0.0-beta.2

What's Changed

• feat: implement logger writer and enhance output handling in various components by @cfc4n in #925

Full Changelog: v2.0.0-beta.1...v2.0.0-beta.2