feat: reorganize networking action, add Wireguard/BBRv3, update release notes

- Split networking action into categorized config steps (IP Set/Firewall, TCP Congestion, Qdisc, connmark, TTL/Hop Limit, Wireguard)
- Add Wireguard VPN configs (Wireguard, ChaCha20, AES, GCM)
- Add TTL/Hop Limit target configs (IPv4 TTL, IPv6 HL)
- Move BBRv3 from build workflow to networking action
- Fix KSUN_BRANCH variable bug in main.yml release step
- Update release notes: add NTSync, BBRv3, Ptrace/Unicode fixes, changelog section

.github/actions/bbrv3/action.yml

@@ -1,55 +0,0 @@
-name: 'Apply BBRv3 Patches'
-description: 'Apply BBRv3 TCP congestion control patches with version-specific patch selection'
-inputs:
-  version:
-    description: 'Kernel config version (e.g., android15-6.6)'
-    required: true
-  sublevel:
-    description: 'Kernel sublevel'
-    required: true
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Apply BBRv3 Patch
-      shell: bash
-      working-directory: ${{ github.workspace }}/kernel/common
-      run: |
-        set -euo pipefail
-        if [[ ${{ inputs.version }} == "android16-6.12" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android15-6.6.patch" temp.patch
-          #patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android15-6.6" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android15-6.6.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android14-6.1" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android14-6.1.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android14-5.15" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android13-5.15.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android13-5.15" && ${{ inputs.sublevel }} -ge "74" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android13-5.15.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android13-5.10" && ${{ inputs.sublevel }} -ge "186" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android12-5.10.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        elif [[ ${{ inputs.version }} == "android12-5.10" && ${{ inputs.sublevel }} -ge "185" ]]; then
-          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android12-5.10.patch" temp.patch
-          patch -p1 -F 3 < temp.patch
-          rm temp.patch
-        fi
-
-        echo "✅ BBRv3 patches applied"
-
-    - name: Enable BBRv3 Kernel Config
-      uses: ./.github/actions/set-kernel-config
-      with:
-        config_list: |
-          CONFIG_TCP_CONG_BBR3=y

.github/actions/networking/action.yml

@@ -17,7 +17,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: Enable Kernel Configs
+    - name: Enable IP Set & Firewall Configs
       uses: ./.github/actions/set-kernel-config
       with:
         config_list: |
@@ -46,7 +46,7 @@ runs:
           CONFIG_IP6_NF_NAT=y
           CONFIG_IP6_NF_TARGET_MASQUERADE=y
 
-    - name: Enable Kernel Configs
+    - name: Enable TCP Congestion Control Configs
       uses: ./.github/actions/set-kernel-config
       with:
         config_list: |
@@ -58,10 +58,34 @@ runs:
           CONFIG_TCP_CONG_HTCP=y
           CONFIG_DEFAULT_BBR=y
           CONFIG_DEFAULT_TCP_CONG="bbr"
+
+    - name: Enable Traffic Shaping (Qdisc) Configs
+      uses: ./.github/actions/set-kernel-config
+      with:
+        config_list: |
           CONFIG_NET_SCH_FQ=y
           CONFIG_NET_SCH_FQ_CODEL=y
-          CONFIG_NET_ACT_CONNMARK=y
           CONFIG_NET_SCH_CAKE=y
+
+    - name: Enable Connection Marking Configs
+      uses: ./.github/actions/set-kernel-config
+      with:
+        config_list: |
+          CONFIG_NET_ACT_CONNMARK=y
+
+    - name: Enable TTL/Hop Limit Target Configs
+      uses: ./.github/actions/set-kernel-config
+      with:
+        config_list: |
+          CONFIG_IP_NF_TARGET_TTL=y
+          CONFIG_IP6_NF_TARGET_HL=y
+          CONFIG_IP6_NF_MATCH_HL=y
+
+    - name: Enable Wireguard VPN Configs
+      uses: ./.github/actions/set-kernel-config
+      with:
+        config_list: |
+          CONFIG_WIREGUARD=y
         
     - name: Apply Kernel Config for 5.10
       shell: bash
@@ -69,3 +93,46 @@ runs:
       if: inputs.kernel_version == '5.10'
       run: |
         sed -i 's/CONFIG_IP_SET_MAX/65534/g' net/netfilter/ipset/ip_set_core.c
+
+    - name: Apply BBRv3 Patch
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel/common
+      run: |
+        set -euo pipefail
+        if [[ ${{ inputs.version }} == "android16-6.12" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android15-6.6.patch" temp.patch
+          #patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android15-6.6" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android15-6.6.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android14-6.1" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android14-6.1.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android14-5.15" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android13-5.15.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android13-5.15" && ${{ inputs.sublevel }} -ge "74" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android13-5.15.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android13-5.10" && ${{ inputs.sublevel }} -ge "186" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android12-5.10.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        elif [[ ${{ inputs.version }} == "android12-5.10" && ${{ inputs.sublevel }} -ge "185" ]]; then
+          cp "${{ github.workspace }}/kernel_patches/common/bbrv3/0001-net-tcp-backport-BBRv3-to-android12-5.10.patch" temp.patch
+          patch -p1 -F 3 < temp.patch
+          rm temp.patch
+        fi
+
+        echo "✅ BBRv3 patches applied"
+
+    - name: Enable BBRv3 Kernel Config
+      uses: ./.github/actions/set-kernel-config
+      with:
+        config_list: |
+          CONFIG_TCP_CONG_BBR3=y

.github/config/RELEASE_NOTES.md

@@ -11,6 +11,8 @@ Join the telegram here: https://t.me/WildKernelsTG
 - [Baseband Guard (BBG)](#baseband-guard-bbg)
 - [DroidSpaces-OSS](#droidspaces-oss)
 - [Networking Improvements](#networking)
+- [NTSync](#ntsync)
+- [Misc](#misc)
 
 ## [KernelSU-Next](https://github.com/pershoot/KernelSU-Next)
 
@@ -64,15 +66,38 @@ A lightweight, LXC-inspired container runtime for Android and Linux. Run full Li
 ## Networking
 
 - BBRv1 - Improved TCP congestion control
+- BBRv3 - Improved TCP congestion control (5.10-6.6, 6.12 coming soon!)
 - Wireguard - Built-in VPN support
 - IP Set & IPv6 NAT Support - Advanced firewall capabilities
 - TTL Target Support - Network packet manipulation
+- CAKE, fq, fq_codel - Traffic shaping and fair queuing for reduced lag and balanced bandwidth
+- connmark - Connection marking for packet classification
+- TCP congestion control - CUBIC, BIC, Westwood, and HTCP for optimized performance across different network conditions
 
 ## Other Features
 
 - TMPFS_XATTR - Extended attributes for tmpfs (Mountify support)
 - TMPFS_POSIX_ACL - POSIX ACLs for tmpfs
 
+## [NTSync](#ntsync)
+
+Provide high-performance, low-latency synchronization primitives compatible with the Windows NT kernel API
+
+## [Misc](#misc)
+
+- Ptrace Leak Fix: For kernels < 5.16
+- Unicode Fix: Prevent path traversal and other detections using non-printable Unicode codepoints [Experimental]
+- TMPFS_XATTR: Extended attributes for tmpfs (Mountify support)
+- TMPFS_POSIX_ACL: POSIX ACLs for tmpfs
+
+## Changelog
+
+### This Release
+- Added BBRv3 (5.10-6.6, 6.12 coming soon!)
+- Added NTSync
+- Ptrace Leak Fix - For kernels < 5.16
+- Unicode Fix - Prevent path traversal and other detections using non-printable Unicode codepoints [Experimental]
+
 ## Recommended Tools
 
 [Kernel Flasher](https://github.com/fatalcoder524/KernelFlasher)

.github/workflows/build.yml

@@ -151,13 +151,6 @@ jobs:
       if: (contains(inputs.feature_set, 'BBG') || inputs.feature_set == 'FULL')
       uses: ./.github/actions/bbg
 
-    - name: Apply BBRv3 Patches
-      uses: ./.github/actions/bbrv3
-      if: false
-      with:
-        version: ${{ inputs.version }}
-        sublevel: ${{ steps.extract.outputs.sublevel }}
-
     - name: Setup Networking
       if: contains(inputs.feature_set, 'NET') || inputs.feature_set == 'FULL'
       uses: ./.github/actions/networking

.github/workflows/main.yml

@@ -535,7 +535,7 @@ jobs:
         echo "KSU Manager: $KSU_MANAGER"
 
         # Export as environment for next step
-        echo "KSUN_BRANCH=$KSUN_BRANCH" >> $GITHUB_ENV
+        echo "KSUN_BRANCH=$KSU_INPUT" >> $GITHUB_ENV
         echo "KSUN_COMMIT=$KSUN_COMMIT" >> $GITHUB_ENV
         echo "KSU_COMMITS_COUNT=$COMMITS_COUNT" >> $GITHUB_ENV
         echo "KSU_VERSION=$KSU_VERSION" >> $GITHUB_ENV