Upgrade core engine to v3.0.15

Author: SamNet-dev

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '1a525f7'
+        default: 'ad1940b'
       version_tag:
-        description: 'Version tag (e.g. 3.0.7-1a525f7)'
+        description: 'Version tag (e.g. 3.0.15-ad1940b)'
         required: true
-        default: '3.0.7-1a525f7'
+        default: '3.0.15-ad1940b'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -5,7 +5,7 @@
     One script. Full control. Zero hassle.
   </p>
   <p align="center">
-    <img src="https://img.shields.io/badge/version-1.2.0-brightgreen" alt="Version"/>
+    <img src="https://img.shields.io/badge/version-1.0.0-brightgreen" alt="Version"/>
     <img src="https://img.shields.io/badge/license-MIT-blue" alt="License"/>
     <img src="https://img.shields.io/badge/engine-Rust_(telemt_3.x)-orange" alt="Engine"/>
     <img src="https://img.shields.io/badge/platform-Linux-lightgrey" alt="Platform"/>
@@ -500,7 +500,20 @@ mtproxymax telegram remove              # Remove bot completely
 
 ## 📋 Changelog
 
-### v1.2.0 — Engine v3.0.7 + Custom IP
+### v1.0.0 — Engine v3.0.15
+
+**Engine Upgrade (v3.0.7 → v3.0.15):**
+
+- **ME Connection Hardening** — Better error handling and recovery for lost middle-end connections
+- **Secure Payload Fixes** — Payload length validation and ME protocol hardening
+- **Bounded Backpressure** — Semaphore-based global gate prevents overload, ME buffer reuse for efficiency
+- **TLS Full Certificate** — New TLS fetcher drafts real certificates in ServerHello, with TTL-based refresh
+- **ME Pool Reinit** — Soft-staged reinit without reconcile, plus reinit polishing for smoother reconnects
+- **Desync Forensics** — Full forensics for desync detection and debugging
+- **ME Pool Hardswap** — Hard connection swap with softer fallback for graceful pool rotation
+- **ME Pool Health + Rotation** — Active health checking with automatic rotation of unhealthy connections
+
+### v1.0.0 — Engine v3.0.7 + Custom IP
 
 **Engine Upgrade (v3.0.4 → v3.0.7):**
 
@@ -525,7 +538,7 @@ mtproxymax telegram remove              # Remove bot completely
 - **LTO builds** — Engine compiled with Link-Time Optimization (`LTO=true`, `codegen-units=1`) for ~10-20% faster throughput
 - **No default resource caps** — Docker CPU/memory limits now default to unlimited instead of 1 core / 256MB
 
-### v1.1.0 — Per-User Limits + Telegram Bot
+### v1.0.0 — Per-User Limits + Telegram Bot
 
 - Per-user connection, IP, quota, and expiry limits
 - Telegram bot with 17 commands for remote management
@@ -550,6 +563,14 @@ Built on top of **telemt** — a high-performance MTProto proxy engine written i
 
 ---
 
+## 💖 Donate
+
+If you find MTProxyMax useful, consider supporting its development:
+
+[**samnet.dev/donate**](https://www.samnet.dev/donate/)
+
+---
+
 ## 📄 License
 
 MIT License — see [LICENSE](LICENSE) for details.

mtproxymax.sh

@@ -22,8 +22,8 @@ UPSTREAMS_FILE="${INSTALL_DIR}/upstreams.conf"
 BACKUP_DIR="${INSTALL_DIR}/backups"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.0.7"
-TELEMT_COMMIT="1a525f7"  # Pinned: v3.0.7 — Fake TLS V2, config reload, ME frame fixes
+TELEMT_MIN_VERSION="3.0.15"
+TELEMT_COMMIT="ad1940b"  # Pinned: v3.0.15 — ME Pool Health/Rotation, TLS cert TTL, desync forensics
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="ghcr.io/samnet-dev/mtproxymax-telemt"