[AutoUpdate] Update GFWList rules and mrs files - 2026-08-03T02:10:09Z

1. add master branch restriction for update workflow, only allow manual trigger on master
2. rewrite ipv6 cidr validation with proper regex patterns, include ipv4-mapped ipv6 check

.github/workflows/update.yml

@@ -0,0 +1,156 @@
+name: Update GFWList Rules
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+    branches:
+      - master
+
+jobs:
+  update:
+    runs-on: ubuntu-slim
+    if: github.ref == 'refs/heads/master'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          ref: master
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: '3.x'
+
+      - name: Parse GFWList
+        run: python scripts/gfwlist_parser.py
+
+      - name: Download mihomo
+        run: |
+          MAX_RETRIES=5
+          RETRY_DELAY=10
+          for ((i=1; i<=MAX_RETRIES; i++)); do
+            echo "Attempt $i/$MAX_RETRIES to download mihomo..."
+            if TAG=$(curl -s --fail https://api.github.com/repos/MetaCubeX/mihomo/releases/latest | grep '"tag_name"' | sed -E 's/.*"([^"]+)".*/\1/'); then
+              echo "Latest mihomo version: $TAG"
+              if curl -L --fail -o mihomo.gz "https://github.com/MetaCubeX/mihomo/releases/download/${TAG}/mihomo-linux-amd64-${TAG}.gz"; then
+                echo "Download succeeded"
+                if gzip -d mihomo.gz; then
+                  chmod +x mihomo
+                  rm -f mihomo.gz
+                  echo "mihomo extracted and ready"
+                  exit 0
+                else
+                  echo "Failed to extract mihomo.gz"
+                fi
+              else
+                echo "Download failed (HTTP error)"
+              fi
+            else
+              echo "Failed to fetch latest release info"
+            fi
+            if [ $i -lt $MAX_RETRIES ]; then
+              echo "Retrying in $RETRY_DELAY seconds..."
+              sleep $RETRY_DELAY
+            fi
+          done
+          echo "ERROR: All download attempts failed"
+          exit 1
+
+      - name: Convert to mrs format
+        run: |
+          mkdir -p Clash/mrs
+          convert_file() {
+            local type=$1
+            local format=$2
+            local input_file=$3
+            local output_file=$4
+            local MAX_RETRIES=3
+            for ((i=1; i<=MAX_RETRIES; i++)); do
+              echo "[Attempt $i/$MAX_RETRIES] Converting $input_file ($type)"
+              if ./mihomo convert-ruleset "$type" "$format" "$input_file" "$output_file"; then
+                echo "Success: $input_file -> $output_file"
+                return 0
+              else
+                echo "Warning: Conversion failed for $input_file (Attempt $i/$MAX_RETRIES)"
+                if [ $i -lt $MAX_RETRIES ]; then
+                  sleep 3
+                fi
+              fi
+            done
+            echo "ERROR: Failed to convert $input_file after $MAX_RETRIES attempts"
+            return 1
+          }
+          
+          # 检查 YAML 文件是否有有效内容（排除 payload: 和空行/注释行）
+          has_yaml_content() {
+            local file=$1
+            local content_lines=$(sed '/^payload:$/d; /^#/d; /^$/d' "$file" | wc -l)
+            [ "$content_lines" -gt 0 ]
+          }
+          
+          # 检查 LIST 文件是否有有效内容（排除注释和空行）
+          has_list_content() {
+            local file=$1
+            local content_lines=$(sed '/^#/d; /^$/d' "$file" | wc -l)
+            [ "$content_lines" -gt 0 ]
+          }
+          
+          # 处理所有分离文件（包括生成的和已存在的）
+          for file in Clash/Providers/*_domain.yaml Clash/Providers/*_ip.yaml Clash/Providers/Ruleset/*_domain.yaml Clash/Providers/Ruleset/*_ip.yaml; do
+            if [ -f "$file" ]; then
+              filename=$(basename "$file")
+              if has_yaml_content "$file"; then
+                if [[ "$filename" == *"_domain.yaml" ]]; then
+                  base=$(basename "$file" _domain.yaml)
+                  convert_file "domain" "yaml" "$file" "Clash/mrs/${base}_domain.mrs"
+                elif [[ "$filename" == *"_ip.yaml" ]]; then
+                  base=$(basename "$file" _ip.yaml)
+                  convert_file "ipcidr" "yaml" "$file" "Clash/mrs/${base}_ip.mrs"
+                fi
+              else
+                echo "Skipping empty or invalid file: $file"
+              fi
+            fi
+          done
+          
+          for file in Clash/Ruleset/*_domain.list Clash/Ruleset/*_ip.list; do
+            if [ -f "$file" ]; then
+              filename=$(basename "$file")
+              if has_list_content "$file"; then
+                if [[ "$filename" == *"_domain.list" ]]; then
+                  base=$(basename "$file" _domain.list)
+                  convert_file "domain" "text" "$file" "Clash/mrs/${base}_domain.mrs"
+                elif [[ "$filename" == *"_ip.list" ]]; then
+                  base=$(basename "$file" _ip.list)
+                  convert_file "ipcidr" "text" "$file" "Clash/mrs/${base}_ip.mrs"
+                fi
+              else
+                echo "Skipping empty or invalid file: $file"
+              fi
+            fi
+          done
+          
+          echo "Conversion completed"
+          
+          # 清理临时文件
+          rm -f Clash/Providers/*_domain.yaml Clash/Providers/*_ip.yaml
+          rm -f Clash/Providers/Ruleset/*_domain.yaml Clash/Providers/Ruleset/*_ip.yaml
+          rm -f Clash/Ruleset/*_domain.list Clash/Ruleset/*_ip.list
+          # 清理 mihomo 二进制文件
+          rm -f mihomo
+          echo "Temporary files cleaned up"
+
+      - name: Get current datetime
+        id: datetime
+        run: echo "datetime=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+
+      - name: Commit and push changes
+        uses: EndBug/add-and-commit@v9
+        with:
+          message: '[AutoUpdate] Update GFWList rules and mrs files - ${{ env.DATETIME }}'
+          push: true
+        env:
+          DATETIME: ${{ steps.datetime.outputs.datetime }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Clash/Providers/Ruleset/GoogleCN.yaml

@@ -30,3 +30,22 @@ payload:
   - DOMAIN-SUFFIX,tools.google.com
   - DOMAIN-SUFFIX,tools.l.google.com
   - DOMAIN-SUFFIX,www-googletagmanager.l.google.com
+  - DOMAIN-SUFFIX,ci.android.com
+  - DOMAIN-SUFFIX,g2.gstatic.com
+  - DOMAIN-SUFFIX,g1.gstatic.com
+  - DOMAIN-SUFFIX,g0.gstatic.com
+  - DOMAIN-SUFFIX,checkin.gstatic.com
+  - DOMAIN-SUFFIX,i.pki.goog
+  - DOMAIN-SUFFIX,c.pki.goog
+  - DOMAIN-SUFFIX,o.pki.goog
+  - DOMAIN-SUFFIX,clientservices.googleapis.com
+  - DOMAIN-SUFFIX,imasdk.googleapis.com
+  - DOMAIN-SUFFIX,fonts.googleapis.com
+  - DOMAIN-SUFFIX,update.googleapis.com
+  - DOMAIN-SUFFIX,safebrowsing.googleapis.com
+  - DOMAIN-SUFFIX,connectivitycheck.gstatic.com
+  - DOMAIN-SUFFIX,csi.gstatic.com
+  - DOMAIN-SUFFIX,fonts.gstatic.com
+  - DOMAIN-SUFFIX,ssl.gstatic.com
+  - DOMAIN-SUFFIX,www.gstatic.com
+  - DOMAIN-SUFFIX,redirector.gvt1.com

Clash/Providers/Ruleset/GoogleFCM.yaml

@@ -10,6 +10,15 @@ payload:
   - DOMAIN,alt7-mtalk.google.com
   - DOMAIN,alt8-mtalk.google.com
   - DOMAIN,mtalk.google.com
+  - DOMAIN,alt1.mobile-gtalk.l.google.com
+  - DOMAIN,alt2.mobile-gtalk.l.google.com
+  - DOMAIN,alt3.mobile-gtalk.l.google.com
+  - DOMAIN,alt4.mobile-gtalk.l.google.com
+  - DOMAIN,alt5.mobile-gtalk.l.google.com
+  - DOMAIN,alt6.mobile-gtalk.l.google.com
+  - DOMAIN,alt7.mobile-gtalk.l.google.com
+  - DOMAIN,alt8.mobile-gtalk.l.google.com
+  - DOMAIN,mobile-gtalk.l.google.com
   - IP-CIDR,64.233.177.188/32,no-resolve
   - IP-CIDR,64.233.186.188/32,no-resolve
   - IP-CIDR,64.233.187.188/32,no-resolve

Clash/Providers/UnBan.yaml

@@ -1,59 +1,53 @@
 payload:
-  # Unbreak 白名单 不应该被广告链接的网站
+  - DOMAIN-SUFFIX,*.tokenplus.app
-
-  # Epicgames
-  - DOMAIN-SUFFIX,ol.epicgames.com
-
-  # Getui
-  - DOMAIN-SUFFIX,dizhensubao.getui.com
-
-  # Google
-  - DOMAIN,dl.google.com
-  - DOMAIN-SUFFIX,googletraveladservices.com
-
-  # Mozilla
-  - DOMAIN-SUFFIX,tracking-protection.cdn.mozilla.net
-
-  # Origin
-  - DOMAIN,origin-a.akamaihd.net
-
-  # Tencent
-  - DOMAIN,fairplay.l.qq.com
-  - DOMAIN,livew.l.qq.com
-  - DOMAIN,vd.l.qq.com
-
-  # Strava
-
-  # Umeng
-  - DOMAIN,errlog.umeng.com
-  - DOMAIN,msg.umeng.com
-  - DOMAIN,msg.umengcloud.com
-
-  # Miui 小米
-  - DOMAIN,tracking.miui.com
-
-  # General
-  - DOMAIN,app.adjust.com
-  - DOMAIN,bdtj.tagtic.cn
-
-  # Hypixel Network
-  - DOMAIN,rewards.hypixel.net
-
-  # Koodo Mobile
-  - DOMAIN-SUFFIX,koodomobile.com
-  - DOMAIN-SUFFIX,koodomobile.ca
-
-  # 群晖ddns
-  - DOMAIN-SUFFIX,synology.me
-  - DOMAIN-SUFFIX,DiskStation.me
-  - DOMAIN-SUFFIX,i234.me
-  - DOMAIN-SUFFIX,myDS.me
   - DOMAIN-SUFFIX,DSCloud.biz
   - DOMAIN-SUFFIX,DSCloud.me
   - DOMAIN-SUFFIX,DSCloud.mobi
   - DOMAIN-SUFFIX,DSmyNAS.com
   - DOMAIN-SUFFIX,DSmyNAS.net
   - DOMAIN-SUFFIX,DSmyNAS.org
+  - DOMAIN-SUFFIX,DiskStation.me
   - DOMAIN-SUFFIX,FamilyDS.com
   - DOMAIN-SUFFIX,FamilyDS.net
   - DOMAIN-SUFFIX,FamilyDS.org
+  - DOMAIN-SUFFIX,adservice.google.com
+  - DOMAIN-SUFFIX,c.pki.goog
+  - DOMAIN-SUFFIX,cdn-china.ampproject.org
+  - DOMAIN-SUFFIX,cdn.ampproject.org
+  - DOMAIN-SUFFIX,checkin.gstatic.com
+  - DOMAIN-SUFFIX,ci.android.com
+  - DOMAIN-SUFFIX,clientservices.googleapis.com
+  - DOMAIN-SUFFIX,cn.investing.com
+  - DOMAIN-SUFFIX,connectivitycheck.gstatic.com
+  - DOMAIN-SUFFIX,crl.pki.goog
+  - DOMAIN-SUFFIX,csi.gstatic.com
+  - DOMAIN-SUFFIX,dizhensubao.getui.com
+  - DOMAIN-SUFFIX,dl.google.com
+  - DOMAIN-SUFFIX,firebase-settings.crashlytics.com
+  - DOMAIN-SUFFIX,fonts.googleapis.com
+  - DOMAIN-SUFFIX,fonts.gstatic.com
+  - DOMAIN-SUFFIX,g0.gstatic.com
+  - DOMAIN-SUFFIX,g1.gstatic.com
+  - DOMAIN-SUFFIX,g2.gstatic.com
+  - DOMAIN-SUFFIX,googletraveladservices.com
+  - DOMAIN-SUFFIX,i.pki.goog
+  - DOMAIN-SUFFIX,i234.me
+  - DOMAIN-SUFFIX,imasdk.googleapis.com
+  - DOMAIN-SUFFIX,koodomobile.ca
+  - DOMAIN-SUFFIX,koodomobile.com
+  - DOMAIN-SUFFIX,myDS.me
+  - DOMAIN-SUFFIX,o.pki.goog
+  - DOMAIN-SUFFIX,ocsp.pki.goog
+  - DOMAIN-SUFFIX,ol.epicgames.com
+  - DOMAIN-SUFFIX,redirector.gvt1.com
+  - DOMAIN-SUFFIX,safebrowsing.googleapis.com
+  - DOMAIN-SUFFIX,ssl.gstatic.com
+  - DOMAIN-SUFFIX,static.typepad.com
+  - DOMAIN-SUFFIX,synology.me
+  - DOMAIN-SUFFIX,tools.google.com
+  - DOMAIN-SUFFIX,tracking-protection.cdn.mozilla.net
+  - DOMAIN-SUFFIX,update.googleapis.com
+  - DOMAIN-SUFFIX,www.ampproject.org
+  - DOMAIN-SUFFIX,www.gov.tw
+  - DOMAIN-SUFFIX,www.gstatic.com
+  - DOMAIN-SUFFIX,www.typepad.com

Clash/Ruleset/GoogleCN.list

@@ -29,3 +29,22 @@ DOMAIN-SUFFIX,toolbarqueries.google.com
 DOMAIN-SUFFIX,tools.google.com
 DOMAIN-SUFFIX,tools.l.google.com
 DOMAIN-SUFFIX,www-googletagmanager.l.google.com
+DOMAIN-SUFFIX,ci.android.com
+DOMAIN-SUFFIX,g2.gstatic.com
+DOMAIN-SUFFIX,g1.gstatic.com
+DOMAIN-SUFFIX,g0.gstatic.com
+DOMAIN-SUFFIX,checkin.gstatic.com
+DOMAIN-SUFFIX,i.pki.goog
+DOMAIN-SUFFIX,c.pki.goog
+DOMAIN-SUFFIX,o.pki.goog
+DOMAIN-SUFFIX,clientservices.googleapis.com
+DOMAIN-SUFFIX,imasdk.googleapis.com
+DOMAIN-SUFFIX,fonts.googleapis.com
+DOMAIN-SUFFIX,update.googleapis.com
+DOMAIN-SUFFIX,safebrowsing.googleapis.com
+DOMAIN-SUFFIX,connectivitycheck.gstatic.com
+DOMAIN-SUFFIX,csi.gstatic.com
+DOMAIN-SUFFIX,fonts.gstatic.com
+DOMAIN-SUFFIX,ssl.gstatic.com
+DOMAIN-SUFFIX,www.gstatic.com
+DOMAIN-SUFFIX,redirector.gvt1.com

Clash/Ruleset/GoogleFCM.list

@@ -9,6 +9,15 @@ DOMAIN,alt6-mtalk.google.com
 DOMAIN,alt7-mtalk.google.com
 DOMAIN,alt8-mtalk.google.com
 DOMAIN,mtalk.google.com
+DOMAIN,alt1.mobile-gtalk.l.google.com
+DOMAIN,alt2.mobile-gtalk.l.google.com
+DOMAIN,alt3.mobile-gtalk.l.google.com
+DOMAIN,alt4.mobile-gtalk.l.google.com
+DOMAIN,alt5.mobile-gtalk.l.google.com
+DOMAIN,alt6.mobile-gtalk.l.google.com
+DOMAIN,alt7.mobile-gtalk.l.google.com
+DOMAIN,alt8.mobile-gtalk.l.google.com
+DOMAIN,mobile-gtalk.l.google.com
 IP-CIDR,64.233.177.188/32,no-resolve
 IP-CIDR,64.233.186.188/32,no-resolve
 IP-CIDR,64.233.187.188/32,no-resolve

Clash/Ruleset/UnBan.list

@@ -0,0 +1,54 @@
+# 内容：GFWList 白名单
+# 数量：52条
+DOMAIN-SUFFIX,*.tokenplus.app
+DOMAIN-SUFFIX,DSCloud.biz
+DOMAIN-SUFFIX,DSCloud.me
+DOMAIN-SUFFIX,DSCloud.mobi
+DOMAIN-SUFFIX,DSmyNAS.com
+DOMAIN-SUFFIX,DSmyNAS.net
+DOMAIN-SUFFIX,DSmyNAS.org
+DOMAIN-SUFFIX,DiskStation.me
+DOMAIN-SUFFIX,FamilyDS.com
+DOMAIN-SUFFIX,FamilyDS.net
+DOMAIN-SUFFIX,FamilyDS.org
+DOMAIN-SUFFIX,adservice.google.com
+DOMAIN-SUFFIX,c.pki.goog
+DOMAIN-SUFFIX,cdn-china.ampproject.org
+DOMAIN-SUFFIX,cdn.ampproject.org
+DOMAIN-SUFFIX,checkin.gstatic.com
+DOMAIN-SUFFIX,ci.android.com
+DOMAIN-SUFFIX,clientservices.googleapis.com
+DOMAIN-SUFFIX,cn.investing.com
+DOMAIN-SUFFIX,connectivitycheck.gstatic.com
+DOMAIN-SUFFIX,crl.pki.goog
+DOMAIN-SUFFIX,csi.gstatic.com
+DOMAIN-SUFFIX,dizhensubao.getui.com
+DOMAIN-SUFFIX,dl.google.com
+DOMAIN-SUFFIX,firebase-settings.crashlytics.com
+DOMAIN-SUFFIX,fonts.googleapis.com
+DOMAIN-SUFFIX,fonts.gstatic.com
+DOMAIN-SUFFIX,g0.gstatic.com
+DOMAIN-SUFFIX,g1.gstatic.com
+DOMAIN-SUFFIX,g2.gstatic.com
+DOMAIN-SUFFIX,googletraveladservices.com
+DOMAIN-SUFFIX,i.pki.goog
+DOMAIN-SUFFIX,i234.me
+DOMAIN-SUFFIX,imasdk.googleapis.com
+DOMAIN-SUFFIX,koodomobile.ca
+DOMAIN-SUFFIX,koodomobile.com
+DOMAIN-SUFFIX,myDS.me
+DOMAIN-SUFFIX,o.pki.goog
+DOMAIN-SUFFIX,ocsp.pki.goog
+DOMAIN-SUFFIX,ol.epicgames.com
+DOMAIN-SUFFIX,redirector.gvt1.com
+DOMAIN-SUFFIX,safebrowsing.googleapis.com
+DOMAIN-SUFFIX,ssl.gstatic.com
+DOMAIN-SUFFIX,static.typepad.com
+DOMAIN-SUFFIX,synology.me
+DOMAIN-SUFFIX,tools.google.com
+DOMAIN-SUFFIX,tracking-protection.cdn.mozilla.net
+DOMAIN-SUFFIX,update.googleapis.com
+DOMAIN-SUFFIX,www.ampproject.org
+DOMAIN-SUFFIX,www.gov.tw
+DOMAIN-SUFFIX,www.gstatic.com
+DOMAIN-SUFFIX,www.typepad.com

Clash/config/ACL4SSR_Online_MultiCountry.ini

@@ -20,6 +20,8 @@ ruleset=🎯 全球直连,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/mast
 ruleset=Ⓜ️ 微软服务,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Microsoft.list
 ruleset=🍎 苹果服务,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Apple.list
 ruleset=📲 电报信息,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Telegram.list
+ruleset=💬 Ai平台,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/AI.list
+ruleset=💬 Ai平台,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list
 ruleset=🌍 国外媒体,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyMedia.list
 ruleset=🚀 节点选择,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyLite.list
 ruleset=🎯 全球直连,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaDomain.list
@@ -33,6 +35,7 @@ custom_proxy_group=🚀 手动切换`select`.*
 custom_proxy_group=♻️ 自动选择`url-test`.*`http://www.gstatic.com/generate_204`300,,50
 custom_proxy_group=🌍 国外媒体`select`[]🚀 节点选择`[]♻️ 自动选择`[]🎯 全球直连`.*
 custom_proxy_group=📲 电报信息`select`[]🚀 节点选择`[]🎯 全球直连`.*
+custom_proxy_group=💬 Ai平台`select`[]🚀 节点选择`[]🎯 全球直连`.*
 custom_proxy_group=Ⓜ️ 微软服务`select`[]🎯 全球直连`[]🚀 节点选择`.*
 custom_proxy_group=🍎 苹果服务`select`[]🚀 节点选择`[]🎯 全球直连`.*
 custom_proxy_group=📢 谷歌FCM`select`[]🚀 节点选择`[]🎯 全球直连`[]♻️ 自动选择`.*