* Fix compatibility with Windows Schannel clients, which previously got
confused by CA and leaf certificate sharing the same Subject Key Identifier.
([6549](https://github.com/mitmproxy/mitmproxy/pull/6549), driuba and mhils)
* Change keybinding for exporting flow from "e" to "x" to avoid conflict with "edit" keybinding.
([6225](https://github.com/mitmproxy/mitmproxy/issues/6225), Llama1412)
* Fix bug where response flows from HAR files had incorrect `content-length` headers
([6548](https://github.com/mitmproxy/mitmproxy/pull/6548), zanieb)
* Improved handling for `allow_hosts`/`ignore_hosts` options in WireGuard mode (5930).
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix a bug where TCP connections were not closed properly.
([6543](https://github.com/mitmproxy/mitmproxy/pull/6543), mhils)
* DNS resolution is now exempted from `ignore_hosts` in WireGuard Mode.
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix case sensitivity of URL added to blocklist
([6493](https://github.com/mitmproxy/mitmproxy/pull/6493), emanuele-em)
* Fix a bug where logging was stopped prematurely during shutdown.
([6541](https://github.com/mitmproxy/mitmproxy/pull/6541), mhils)
* For plaintext traffic, `ignore_hosts` now also takes HTTP/1 host headers into account.
([6513](https://github.com/mitmproxy/mitmproxy/pull/6513), dsphper)
* Fix empty cookie attributes being set to `Key=` instead of `Key`
([5084](https://github.com/mitmproxy/mitmproxy/pull/5084), Speedlulu)
* Scripts with relative paths are now loaded relative to the config file and not where the command is ran
([4860](https://github.com/mitmproxy/mitmproxy/pull/4860), Speedlulu)
* Fix `mitmweb` splitter becoming drag and drop.
([6492](https://github.com/mitmproxy/mitmproxy/pull/6492), xBZZZZ)
* Enhance documentation and add alert log messages when stream_large_bodies and modify_body are set
([6514](https://github.com/mitmproxy/mitmproxy/pull/6514), rosydawn6)
Breaking Changes
* Subject Alternative Names are now represented as `cryptography.x509.GeneralNames` instead of `list[str]`
across the codebase. This fixes a regression introduced in mitmproxy 10.1.1 related to punycode domain encoding.
([6537](https://github.com/mitmproxy/mitmproxy/pull/6537), mhils)