Bump github.com/apernet/hysteria/extras/v2 from 2.6.4 to 2.9.2

[dependabot]

Bumps github.com/apernet/hysteria/extras/v2 from 2.6.4 to 2.9.2.

Release notes

Sourced from github.com/apernet/hysteria/extras/v2's releases.

app/v2.9.2

This release contains important security fixes and we strongly encourage everyone to upgrade.

• Added Gecko obfuscation: a new experimental obfuscation layer that fragments QUIC handshake packets
• Fixed a security issue where UDP packets could bypass ACL
• Fixed a potential server OOM caused by incomplete or oversized HTTP requests during sniff
• Fixed an ACL bypass via trailing dots in domain names (e.g. example.com.)
• Fixed incorrect destination handling in the SOCKS5 UDP outbound
• Fixed https:// prefix detection in the DoH resolver
• Outbound rules now reject invalid port values
• Minor performance improvements

---

此版本包含重要安全修复，强烈建议更新

• 新增 Gecko：一种实验性的新混淆实现，会对 QUIC 握手包进行分片处理
• 修复了 UDP 包可绕过 ACL 的安全问题
• 修复了启用 sniff 时，不完整或超大 HTTP 请求可能导致服务端 OOM 的问题
• 修复了通过在域名末尾添加点（如 example.com.）绕过 ACL 的问题
• 修复了 SOCKS5 UDP 出站中目标地址处理错误的问题
• 修复了 DoH 解析器对 https:// 前缀的判断错误
• outbound 规则现在会拒绝无效端口号
• 小幅性能改进

app/v2.9.1

No public IP? No problem. Hysteria Realms punches through your NAT to let you host a Hysteria server from home, a cellular network, or even a coffee shop. Clients connect directly, peer-to-peer. No port forwarding, no relay.

• Fixed an issue where the client failed to connect to a server behind symmetric NAT, improving hole punching success rate
• The hysteria cert command now includes sniGuard: disable in its sample server config, so self-signed certs work with Realms out of the box

---

没有公网 IP 也没问题！Hysteria Realms 通过 NAT 打洞，让你从家宽、手机流量甚至咖啡店都能运行 Hysteria 服务端。与客户端 P2P 连接，无需配置端口转发或中转。

• 修复了一个导致服务端位于对称 NAT 后时客户端无法连接的问题，提升打洞成功率
• hysteria cert 命令现在会在示例服务端配置中包含 sniGuard: disable，让自签名证书在 Realms 模式下能正常使用

app/v2.9.0

• Added Hysteria Realms: No public IP? No problem. Punches through your NAT to let you host a Hysteria server from home, a cellular network, or even a coffee shop. Clients connect directly, peer-to-peer. No port forwarding, no relay.

---

• 新增 Hysteria Realms：没有公网 IP 也没问题！通过 NAT 打洞，让你从家宽、手机流量甚至咖啡店都能运行 Hysteria 服务端。与客户端 P2P 连接，无需配置端口转发或中转。

app/v2.8.2

This release contains important security fixes and we strongly encourage everyone to upgrade.

• Fixed a security issue where, when sniff was enabled, an attacker could craft malicious QUIC packets to cause a server OOM crash
• Fixed a compatibility issue with some older versions of nftables when server port hopping was enabled

... (truncated)

Commits

• c3a806b feat: gecko obfs (experimental) (#1584)
• 3b64f66 fix(outbounds): incorrect use of SOCKS5 UDP dst.addr & dst.port (#1583)
• 2412f23 Merge commit from fork
• 02d7b0a fix: format
• d6f24e1 Merge commit from fork
• 89521dd Merge commit from fork
• 9f93125 docs: hyphenate compound modifiers in tagline (#1578)
• 3991117 fix(acl): normalize trailing dot in domain matches (#1574)
• 0e2b37a Reuse 32KB buffers in copyBufferLog with sync.Pool (#1572)
• 6dc0f3f fix: prefix match in DNS https (#1573)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)