Mitmproxy

* Fix compatibility with Windows Schannel clients, which previously got
confused by CA and leaf certificate sharing the same Subject Key Identifier.
([6549](https://github.com/mitmproxy/mitmproxy/pull/6549), driuba and mhils)
* Change keybinding for exporting flow from "e" to "x" to avoid conflict with "edit" keybinding.
([6225](https://github.com/mitmproxy/mitmproxy/issues/6225), Llama1412)
* Fix bug where response flows from HAR files had incorrect `content-length` headers
([6548](https://github.com/mitmproxy/mitmproxy/pull/6548), zanieb)
* Improved handling for `allow_hosts`/`ignore_hosts` options in WireGuard mode (5930).
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix a bug where TCP connections were not closed properly.
([6543](https://github.com/mitmproxy/mitmproxy/pull/6543), mhils)
* DNS resolution is now exempted from `ignore_hosts` in WireGuard Mode.
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix case sensitivity of URL added to blocklist
([6493](https://github.com/mitmproxy/mitmproxy/pull/6493), emanuele-em)
* Fix a bug where logging was stopped prematurely during shutdown.
([6541](https://github.com/mitmproxy/mitmproxy/pull/6541), mhils)
* For plaintext traffic, `ignore_hosts` now also takes HTTP/1 host headers into account.
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix empty cookie attributes being set to `Key=` instead of `Key`
([5084](https://github.com/mitmproxy/mitmproxy/pull/5084), Speedlulu)
* Scripts with relative paths are now loaded relative to the config file and not where the command is ran
([4860](https://github.com/mitmproxy/mitmproxy/pull/4860), Speedlulu)
* Fix `mitmweb` splitter becoming drag and drop.
([6492](https://github.com/mitmproxy/mitmproxy/pull/6492), xBZZZZ)
* Enhance documentation and add alert log messages when stream_large_bodies and modify_body are set
([6514](https://github.com/mitmproxy/mitmproxy/pull/6514), rosydawn6)

Breaking Changes

* Subject Alternative Names are now represented as `cryptography.x509.GeneralNames` instead of `list[str]`
across the codebase. This fixes a regression introduced in mitmproxy 10.1.1 related to punycode domain encoding.
([6537](https://github.com/mitmproxy/mitmproxy/pull/6537), mhils)

* Remove stray `replay-extra` from CLI status bar.
([37d62ce](https://github.com/mitmproxy/mitmproxy/commit/37d62ce73ebd57780cff5ecf8b2ee57ec7d8ab30), mhils)

* Fix a hang/freeze in the macOS distributions when doing TLS negotiation.
([6480](https://github.com/mitmproxy/mitmproxy/pull/6480), mhils)
* Update savehar addon to fix creating corrupt har files caused by empty response content
([6459](https://github.com/mitmproxy/mitmproxy/pull/6459), lain3d)
* Update savehar addon to handle scenarios where "path" key in cookie
attrs dict is missing.
([6458](https://github.com/mitmproxy/mitmproxy/pull/6458), pogzyb)
* Add `server_replay_extra` option to serverplayback to define behaviour
when replayable response is missing.
([6465](https://github.com/mitmproxy/mitmproxy/pull/6465), dkarandikar)

* Fix a bug introduced in mitmproxy 10.1.2 where mitmweb would fail to establish
a WebSocket connection. Affected users may need to clear their browser cache
or hard-reload mitmweb (Ctrl+Shift+R).
([6454](https://github.com/mitmproxy/mitmproxy/pull/6454), mhils)

* Add a raw hex stream contentview.
([6389](https://github.com/mitmproxy/mitmproxy/pull/6389), mhils)
* Add a contentview for DNS-over-HTTPS.
([6389](https://github.com/mitmproxy/mitmproxy/pull/6389), mhils)
* Replaced standalone mitmproxy binaries on macOS with an app bundle
that contains the mitmproxy/mitmweb/mitmdump CLI tools.
This change was necessary to support macOS code signing requirements.
Homebrew remains the recommended installation method.
([6447](https://github.com/mitmproxy/mitmproxy/pull/6447), mhils)
* Fix certificate generation to work with strict mode OpenSSL 3.x clients
([6410](https://github.com/mitmproxy/mitmproxy/pull/6410), mmaxim)
* Fix path() documentation that the return value might include the query string
([6412](https://github.com/mitmproxy/mitmproxy/pull/6412), tddschn)
* mitmproxy now officially supports Python 3.12.
([6434](https://github.com/mitmproxy/mitmproxy/pull/6434), mhils)
* Fix root-relative URLs so that mitmweb can run in subdirectories.
([6411](https://github.com/mitmproxy/mitmproxy/pull/6411), davet2001)
* Add an optional parameter(ldap search filter key) to ProxyAuth-LDAP.
([6428](https://github.com/mitmproxy/mitmproxy/pull/6428), outlaws-bai)
* Fix a regression when using the proxyauth addon with clients that (rightfully) reuse connections.
([6432](https://github.com/mitmproxy/mitmproxy/pull/6432), mhils)

* Fix certificate generation for punycode domains.
([6382](https://github.com/mitmproxy/mitmproxy/pull/6382), mhils)
* Fix a bug that would crash mitmweb when opening options.
([6386](https://github.com/mitmproxy/mitmproxy/pull/6386), mhils)