Upgrade engine to v3.4.6 — TLS fronting fixes, full ServerHello default, ALPN fingerprinting

Author: SamNet-dev

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '30e73ad'
+        default: '8874396'
       version_tag:
-        description: 'Version tag (e.g. 3.4.5-30e73ad)'
+        description: 'Version tag (e.g. 3.4.6-8874396)'
         required: true
-        default: '3.4.5-30e73ad'
+        default: '3.4.6-8874396'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -729,9 +729,9 @@ mtproxymax telegram remove              # Remove bot completely
 - Fix bot uptime always 0m ([#70](https://github.com/SamNet-dev/MTProxyMax/issues/70))
 - Telegram bot: instant response, no temp files ([#62](https://github.com/SamNet-dev/MTProxyMax/issues/62))
 
-### v1.0.5 — Engine v3.4.5, Clone, Bulk-Extend, Doctor, Stats & More
+### v1.0.5 — Engine v3.4.6, Clone, Bulk-Extend, Doctor, Stats & More
 
-- Engine v3.4.5 — fairness scheduler regression fixes, unlimited `mask_relay_max_bytes`, configurable Telegram infrastructure URLs, FakeTLS fidelity improvements
+- Engine v3.4.6 — TLS 1.2/1.3 fronting correctness, full ServerHello default (better DPI camouflage), ALPN in TLS fetcher, fairness regression fixes, unlimited `mask_relay_max_bytes`, configurable Telegram infrastructure URLs
 - `secret clone <src> <new>` — duplicate a secret with all its limits
 - `secret bulk-extend <days>` — extend all secrets' expiry at once
 - `secret extend <label> <days>` — extend a single secret's expiry

mtproxymax.sh

@@ -26,8 +26,8 @@ REPLICATION_FILE="${INSTALL_DIR}/replication.conf"
 REPLICATION_SSH_DIR="${INSTALL_DIR}/.ssh"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.4.5"
-TELEMT_COMMIT="30e73ad"  # Pinned: v3.4.5 — fairness regression fixes, unlimited mask_relay_max_bytes
+TELEMT_MIN_VERSION="3.4.6"
+TELEMT_COMMIT="8874396"  # Pinned: v3.4.6 — TLS 1.2/1.3 fronting fixes, full ServerHello default, ALPN fingerprinting
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="ghcr.io/samnet-dev/mtproxymax-telemt"