Releases: nshalman/tailscale
Releases · nshalman/tailscale
v1.56.0-sunos
Continuous Integration
- report test coverage to coveralls.io #10340 (Percy Wegmann)
- run 'go vet' in golangci-lint; fix errors in tests #10502 (Andrew Dunham)
Commits
- a40e918: VERSION.txt: this is v1.55.0 (Denton Gentry) #10257
- e33bc64: net/dnsfallback: add singleflight to recursive resolver (Andrew Dunham) #9992
- 303a1e8: cmd/tailscale: expose --webclient for all builds (Will Norris) #10258
- remove the preview-webclient node capability #10259 (Will Norris)
- 03e780e: client/web: disable the "disable" button when disabled (Will Norris) #10248
- 855f79f: cmd/tailscaled, util/winutil: changes to process and token APIs in winutil (Aaron Klotz) #10116
- 1ef5bd5: util/osdiag, util/winutil: expose Windows policy key (Adrian Dewhurst) #9934
- b8ac3c5: util/syspolicy: add some additional policy keys (Adrian Dewhurst) #10144
- fix DomainRoutes copy #10260 (James Tucker)
- d5c460e: client/{tailscale,web}: add initial webUI frontend for self-updates (tailscale#10191) (Naman Sood) #10191
- 6f7a1b5: ipn/ipnlocal: rename SetWebLocalClient to ConfigureWebClient (Sonia Appasamy) #10264
- 2dbd546: client/web: remove DebugMode from GET /api/data (Sonia Appasamy) #10266
- 7d4221c: cmd/tsidp: add start of OIDC Tailscale IdP (Maisem Ali) #10265
- 055394f: ipn/ipnlocal: add mutex to webClient struct (Sonia Appasamy) #10269
- 96ad9b6: client/web: remove legacy-client-view.tsx (Sonia Appasamy) #10270
- 5712920: cmd/tailscaled: make tun mode default on gokrazy (Maisem Ali) #10273
- 2ff54f9: wgengine/magicsock: move trustBestAddrUntil forward on non-disco rx (tailscale#10274) (Jordan Whited) #10274
- 3bd382f: wgengine/magicsock: add DERP homeless debug mode for testing (Brad Fitzpatrick) #10272
- d01fa85: client/web: allow login client to still run tailscale up (Will Norris) #10276
- 146c4ba: go.mod: update web-client-prebuilt module (OSS Updater) #10281
- a3c11b8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10268
- 33147c4: .github: build gocross using regular GOPROXY settings (Will Norris) #10282
- 4f40901: client/web: when readonly, add check for TS connection (Sonia Appasamy) #10275
- 90eb537: ipn/ipnlocal: log and don't return full file serve error (tailscale#10174) (Tyler Smalley) #10174
- add option to run integrated web client #10283 (Will Norris)
- 7238586: client/web: fix margins on login popover (Sonia Appasamy) #10285
- 664ebb1: cmd/containerboot: fix unclean shutdown (tailscale#10035) (Irbe Krumina) #10035
- cca27ef: ipn/ipnlocal: add c2n method to check on TLS cert fetch status (Brad Fitzpatrick) #10291
- don't report a warning in DERP homeless mode #10293 (Brad Fitzpatrick)
- bd534b9: {client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint (Sonia Appasamy) #10295
- 719ee44: ssh/tailssh: use control server time instead of local time (Ox Cart) #10255
- b8a2aed: util/syspolicy: add caching handler (tailscale#10288) (Claire Wang) #10288
- fb829ea: control/controlclient: support incremental packet filter updates [capver 81] (Brad Fitzpatrick) #10300
- 980f1f2: client/web: hide unimplemented links (Sonia Appasamy) #10302
- 28684b0: cmd/tailscale/cli: correct app connector help text in set (James Tucker) #10303
- f880c77: client/web: split login from nodeUpdate (Will Norris) #10297
- update tailscale{,d} licenses #10155 (License Updater)
- update win/apple licenses #10194 (License Updater)
- update android licenses #10201 (License Updater)
- e75be01: client/web: add exit node selector (Sonia Appasamy) #10262
- 2dc0645: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman) #10298
- 38ea8f8: client/web: add Inter font (Sonia Appasamy) #10287
- 3402998: go.mod: update web-client-prebuilt module (OSS Updater) #10305
- f0613ab: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10306
- 42dc843: client/web: add advanced login options (Will Norris) #10309
- fc8488f: go.mod: update web-client-prebuilt module (OSS Updater) #10310
- e7cad78: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10311
- b88929e: Fix potential goroutine leak in syncs/watchdog.go (Uri Gorelik) #10314
- c4855fe: Fix Empty Resolver Set (Ryan Petris) #10317
- fd22145: cmd/tailscale/cli: make 'debug watch-ipn' play nice with jq (David Anderson) #10322
- f867392: cmd/tailscale/cli: add debug function to print the netmap (David Anderson) #10323
- update android licenses #10324 (License Updater)
- 4f80f40: cmd/k8s-operator: fix chart syntax error (tailscale#10333) (Irbe Krumina) #10333
- dd8bc9b: cmd/k8s-operator: log user/group impersonated by apiserver proxy (tailscale#10334) (Irbe Krumina) #10334
- 2c1f14d: util/set: implement json.Marshaler/Unmarshaler (tailscale#10308) (Andrew Lytvynov) #10308
- 6647171: cmd/k8s-operator: truncate long StatefulSet name prefixes (tailscale#10343) (Irbe Krumina) #10343
- fixup version embedding (tailscale#9997) #9997 (Cole Helbling)
- e1d0d26: go.mod: bump wireguard-go (tailscale#10352) (Jordan Whited) #10352
- 128d3ad: cmd/k8s-operator: helm chart add missing keys (tailscale#10296) (Gabriel Martinez) #10296
- Add TS_ACCEPT_ROUTES (tailscale#10176) #10176 (Claire Wang)
- 5aa7687: util/httpm: don't run test if .git doesn't exist (Andrew Dunham) #10363
- 1af7f5b: wgengine/magicsock: fix typo in Conn.handlePingLocked() (tailscale#10365) (Jordan Whited) #10365
- 611e0a5: appc,ipn/local: support wildcard when matching app-connectors (Tom DNetto) #10364
- crikey! what a beauty of a list #10367 ([Charlotte Brandhorst-Satzkorn](9e63b...
v1.54.1-sunos
Commits
- 7acf781: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman)
- 864484b: Revert "ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile" (Denton Gentry)
- b709a72: ipn/ipnlocal: update hostinfo when app connector state is toggled (Tom DNetto)
- b78b245: VERSION.txt: this is v1.54.1 (Tyler Smalley)
- 5355f31: Merge tag 'v1.54.1' into sunos-1.54 (Nahum Shalman)
v1.54.0-sunos
Builds
- deps: bump @babel/traverse from 7.22.10 to 7.23.2 in /client/web #66,#9822 (dependabot[bot])
- deps: bump get-func-name from 2.0.0 to 2.0.2 in /client/web #66,#9565 (dependabot[bot])
- deps-dev: bump postcss from 8.4.27 to 8.4.31 in /client/web #66,#9708 (dependabot[bot])
- deps: bump github.com/docker/docker #66,#10017 (dependabot[bot])
Commits
- fde2ba5: VERSION.txt: this is v1.53.0 (tailscale#10018) (Tyler Smalley) #66,#10018
- ed1b935: cmd/k8s-operator: allow to install operator via helm (tailscale#9920) (Irbe Krumina) #66,#9920
- download helm CLI (tailscale#9981) #66,#9981 (Irbe Krumina)
- enable use-cases with non-native IPs by setting ns.ProcessSubnets #66,#9958 (Tom DNetto)
- 57c5b5a: net/dns/recursive: update IP for b.root-servers.net (Andrew Dunham) #66,#9998
- 95715c4: ipn/localapi: add endpoint to handle APNS payloads (tailscale#9972) (Andrea Gottardo) #66,#9972
- 93aa8a8: client/web: allow providing logger implementation (Sonia Appasamy) #66,#10028
- 89953b0: ipn/ipnlocal,client/web: add web client to tailscaled (Sonia Appasamy) #66,#10028
- 6f214de: client/web: split out UI components (Sonia Appasamy) #66,#10028
- dd842d4: go.mod: update wireguard-go to enable TUN UDP GSO/GRO (tailscale#10029) (Jordan Whited) #66,#10029
- add user pref for running web client #66,#9987 (Will Norris)
- serve web client requests from LocalBackend #66,#9987 (Will Norris)
- 0d86eb9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #66,#10030
- a7c80c3: cmd/sniproxy: implement support for control configuration, multiple addresses (Tom DNetto) #66,#9892
- df4b730: types/appctype: define the nodeAttrs type for dns-driven app connectors (Tom DNetto) #66,#10032
- 3d7fb6c: derp/derphttp: fix race in mesh watcher (Brad Fitzpatrick) #66,#9977
- 3114a1c: derp/derphttp: add watch reconnection tests from tailscale#9719 (Anton Tolchanov) #66,#9977
- 4417565: ipn/ipnlocal: rename web fields/structs to webClient (Sonia Appasamy) #66,#10034
- mention release track when running latest (tailscale#10039) #66,#10039 (Andrew Lytvynov)
- 00375f5: util/set: add some more Set operations (tailscale#10022) (Chris Palmer) #66,#10022
- bd488e4: go.mod: update wireguard-go (tailscale#10046) (Jordan Whited) #66,#10046
- replace web client debug flag with node capability #66,#10033 (Will Norris)
- c331313: derp/derphttp: close DERP client to avoid data race in test (Anton Tolchanov) #66,#10042
- d601c81: wgengine/netstack: use netip.Prefix as map keys (Maisem Ali) #66,#9950
- eaf8aa6: wgengine/netstack: remove unnecessary map in UpdateNetstackIPs (Maisem Ali) #66,#9950
- d0f2c06: wgengine/netstack: standardize var names in UpdateNetstackIPs (Maisem Ali) #66,#9950
- c2b87fc: cmd/k8s-operator/deploy/chart,.github/workflows: use helm chart API v2 (tailscale#10055) (Irbe Krumina) #66,#10055
- disable on Unraid (tailscale#10048) #66,#10048 (Derek Kaser)
- 3a9f5c0: util/set: make Clone a method (tailscale#10044) (Chris Palmer) #66,#10044
- 32ebc03: client/web: move session logic to auth.go (Sonia Appasamy) #66,#10060
- 09fcbae: net/dnscache: remove completed TODO (James Tucker) #66,#9999
- introduce app connector advertisement preference and flags #66,#9989 (James Tucker)
- 970eb5e: cmd/k8s-operator: sanitize connection headers (tailscale#10063) (Rhea Ghosh) #66,#10063
- 237c6c4: client/web: call /api/auth before rendering any client views (Will Norris) #66,#10062
- 0ee4573: ipn/ipnlocal: fix small typo (James Tucker) #66,#10065
- 3786320: cmd/k8s-operator: strip credentials from client config in noauth mode (David Anderson) #66,#10067
- fix a couple of logic simplification lints #66,#10066 (James Tucker)
- clarify how to run update as Administrator on Windows (tailscale#10043) #66,#10043 (Andrew Lytvynov)
- b1a0caf: .github: Bump actions/checkout from 3 to 4 (dependabot[bot]) #66,#10016
- e5fbe57: web/client: update synology token from /api/auth call (Will Norris) #66,#10068
- 7a725bb: client/web: move more session logic to auth.go (Sonia Appasamy) #66,#10069
- e7482f0: ipn/ipnlocal: prevent deadlock on WebClientShutdown (Will Norris) #66,#10073
- b48b7d8: appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when...
v1.52.1-sunos
Commits
- 2855ad9: cmd/tailscaled: pre-load wintun.dll using a fully-qualified path (Aaron Klotz)
- cleanup SPK and MSI downloads (tailscale#10085) (Andrew Lytvynov)
- do not recursively delete dirs in cleanupOldDownloads (tailscale#10093) (Andrew Lytvynov)
- 16c59d2: VERSION.txt: this is v1.52.1 (Tyler Smalley)
- 79be16d: Merge tag 'v1.52.1' into sunos-1.52 (Nahum Shalman)
v1.52.0-sunos
Commits
- update win/apple licenses #9519 (License Updater)
- 098d110: VERSION.txt: this is v1.51.0 (Aaron Klotz) #9532
- 530aaa5: net/dns: retry forwarder requests over TCP (Andrew Dunham) #9288
- 6516206: ipn/ipnlocal: close foreground sessions on SetServeConfig (Marwan Sulaiman) #9447
- bdd9eec: cmd/k8s-operator: fix reconcile filters (tailscale#9533) (Irbe Krumina) #9533
- 578b357: wgengine/netstack: use buffer pools for UDP packet forwarding (Val) #9518
- c608660: wgengine,net,ipn,disco: split up and define different types of MTU (Val) #9518
- refactor methods to get values from registry to also return (tailscale#9536) #9536 (Claire Wang)
- 0275afa: ipn/ipnlocal: prevent putting file if file already exists (tailscale#9515) (Rhea Ghosh) #9515
- 3e298e9: go.toolchain.rev: bump go (Brad Fitzpatrick) #9541
- d31460f: net/portmapper: fix invalid UPnP metric name (Andrew Dunham) #9552
- 697f92f: client/web: refactor serveGetNodeData (Sonia Appasamy) #9556
- 2066f9f: util/linuxfw: fix crash in DelSNATRule when no rules are found (James Tucker) #9557
- 80206b5: wgengine/magicsock: add nodeid to panic condition on public key reuse (James Tucker) #9560
- ca43961: types/key: update some doc strings for public key serialization (James Tucker) #9561
- 5c2b2fa: ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes (James Tucker) #9498
- use NodeCapMap in CheckFunnel #9567 (Maisem Ali)
- 5d62b17: client/web: add login client mode to web.Server (Sonia Appasamy) #9311
- 2c0f0ee: tool/gocross: disable Linux static linking if GOCROSS_STATIC=0 (Brad Fitzpatrick) #9571
- 5b3f5ea: control/controlclient: fix leaked http2 goroutines on shutdown (Brad Fitzpatrick) #9572
- 5429ee2: client/web: add debug mode for web client ui updates (Sonia Appasamy) #9562
- 2c92f94: cmd/testwrapper: output machine-readable JSON on test flakes (Brad Fitzpatrick) #9575
- b5b4298: go.mod,*: bump gvisor (Andrea Barisani) #9252
- f50b2a8: wgengine/netstack: refactor address construction and conversion (Andrea Barisani) #9252
- 2a7b3ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9576
- 856d32b: cmd/testwrapper: include flake URL in JSON metadata (Brad Fitzpatrick) #9582
- 4823a7e: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry) #9573
- add a test for restarting a tsnet server, fix Windows #9588 (Brad Fitzpatrick)
- d71184d: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali) #9590
- add syspolicy package (tailscale#9550) #9550 (Claire Wang)
- aae1a28: go.mod: add test that replace directives aren't added in oss (Brad Fitzpatrick) #9594
- 71f2c67: go.mod: bump wingoes for cross-platform HRESULT definition (James Tucker) #9595
- 87bc831: go.mod,cmd/tsconnect: bump esbuild (James Tucker) #9578
- 84acf83: go.mod,net/dnsfallback: bump go4.org/netipx (James Tucker) #9578
- 0c8c374: go.mod: bump all dependencies except go-billy (James Tucker) #9578
- 8833dc5: util/set: add some useful utility functions for Set (tailscale#9535) (Chris Palmer) #9535
- update tailscale{,d} licenses #9577 (License Updater)
- 16fa3c2: wgengine/magicsock: use x/sys/unix constants for UDP GSO (tailscale#9597) (Jordan Whited) #9597
- gonna take some time to add the words we never had #9598 (Charlotte Brandhorst-Satzkorn)
- 41b05e6: go.mod: bump wireguard-go (James Tucker) #9563
- i can't help but rave about these additions #9599 (Charlotte Brandhorst-Satzkorn)
- ee90cd0: cmd/cloner,*: optimize nillable slice cloner (James Tucker) #9601
- 324f0d5: cmd/cloner,*: revert: optimize nillable slice cloner (James Tucker) #9603
- a56e58c: util/syspolicy: add read boolean setting (tailscale#9592) (Claire Wang) #9592
- e03f0d5: net/dnsfallback: remove net/dnsfallback go:generate line (James Tucker) #9602
- ab810f1: cmd/cloner: add regression test for slice nil/empty semantics (James Tucker) #9604
- d2ea9bb: cmd/cloner: fix typo in test type's name (Brad Fitzpatrick) #9606
- 72e5374: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9596
- 5f5c914: util/slicesx: add EqualSameNil, like slices.Equal but same nilness (Brad Fitzpatrick) #9609
- 425cf9a: tailcfg, all: use []netip.AddrPort instead of []string for Endpoints (Brad Fitzpatrick) #9610
- 67926ed: wgengine/magicsock: add MTU to addrLatency and rename to addrQuality (Val) #9486
- 4130851: wgengine/magicsock: probe but don't use path MTU from CLI ping (Val) #9486
- c26d91d: net/tstun: remove unused function DefaultMTU() (Val) #9621
- 656a77a: net/packet: implement methods for rewriting v6 addresses (Tom DNetto) #9542
- update tailscale{,d} licenses #9600 (License Updater)
- update win/apple licenses #9587 (License Updater)
- 73e53dc: cmd/tailscale,ipn/ipnlocal: print debug component names (Val) #9628
- b775a37: util/httpm, all: add a test to make sure httpm is used consistently (Brad Fitzpatrick) #9635
- efac2cb: tool/gocross: merge user's build tags and implicitly added build tags together (Brad Fitzpatrick) #9639
- eb22c0d: wgengine/magicsock: use binary.NativeEndian for UDP GSO control data (tailscale#9640) (Jordan Whited) #9640
- 286c6ce: net/dns/resolver: race UDP and TCP queries (tailscale#9544) (Andrew Dunham) #9544
- 5902d51: util/race: add test to confirm we don't leak goroutines (Andrew Dunham) #9641
- 3655fb3: control/controlclient: fix deadlock in shutdown (Maisem Ali) #9646
- 730cdfc: Revert "tool/gocross: disable Linux static linking if GOCROSS_STATIC=0" (Brad Fitzpatrick) #9648
- 91b9899: net/dns/resolver: fix flaky test (Andrew Dunham) #9647
- 93c6e1d: tstest/deptest: add check that x/exp/{maps,slices} imported as xfoo (Brad Fitzpatrick) #9650
- e499a6b: release/dist/unixpkgs: revert iptables move to Recommends, make it Depends (Brad Fitzpatrick) [tailscale#9656]...
v1.50.1-sunos
Commits
- 027b455: net/portmapper: fix invalid UPnP metric name (Andrew Dunham)
- use NodeCapMap in CheckFunnel (Maisem Ali)
- d9e8f6b: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry)
- 95e1c84: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali)
- 8749388: VERSION.txt: this is v1.50.1 (Denton Gentry)
- 596cf05: Merge tag 'v1.50.1' into sunos-1.50 (Nahum Shalman)
v1.50.0-sunos
Commits
- remove wasm file, no-op stubs, make OS-specific funcs consistent #9059 (Brad Fitzpatrick)
- 5b6a90f: types/logger, cmd/tailscale/cli: flesh out, simplify some non-unix build tags (Brad Fitzpatrick) #9060
- 7825074: .github: fix flakehub-publish-tagged.yml glob (tailscale#9066) (shayne) #9066
- 46b0c91: .github: update flakehub workflow to support existing tags (tailscale#9067) (shayne) #9067
- 824cd02: client/web: cache csrf key when running in CGI mode (Will Norris) #9055
- 349c05d: client/web: refresh on tab focus (Sonia Appasamy) #9069
- 5fb1695: util/osdiag, util/osdiag/internal/wsc: add code to probe the Windows Security Center for installed software (Aaron Klotz) #8997
- d45af7c: release/dist/cli: add sign-key and verify-key-signature commands (tailscale#9041) (Andrew Lytvynov) #9041
- a61a9ab: cmd/containerboot: reapply known args on restart (Maisem Ali) #9073
- ff7f4b4: cmd/testwrapper: fix off-by-one error in maxAttempts check (Maisem Ali) #9078
- 05486f0: client/web: move synology and qnap logic into separate files (Will Norris) #9075
- 0c3d343: client/web: invert auth logic for synology and qnap (Will Norris) #9075
- dc8287a: client/web: enforce full path for CGI platforms (Will Norris) #9075
- b42c4e2: cmd/dist,release/dist: add distsign signing hooks (tailscale#9070) (Andrew Lytvynov) #9070
- remove Arch support (tailscale#9081) #9081 (Andrew Lytvynov)
- f3077c6: client/web: add self node cache (Sonia Appasamy) #9077
- de9ba1c: clientupdate/distsign/roots: add temporary dev root key (tailscale#9080) (Andrew Lytvynov) #9080
- adjust some build tags for plan9 #9082 (Brad Fitzpatrick)
- 24d41e4: cmd/sniproxy: add port forwarding and prometheus metrics (Denton Gentry) #8979
- 12ac672: cmd/k8s-operator: handle changes to services w/o teardown (Maisem Ali) #9076
- 320f77b: cmd/containerboot: add support for setting ServeConfig (Maisem Ali) #9074
- c8dea67: cmd/k8s-operator: add support for Ingress resources (Maisem Ali) #9048
- 535db01: scripts/installer: add Kaisen, Garuda, Fedora-Asahi. (Denton Gentry) #9061
- 6b6a8cf: util/osdiag: add query for Windows page file configuration and status (Aaron Klotz) #9091
- check for key-based debug access before XFF check (tailscale#9093) #9093 (Dave Anderson)
- 4828e4c: client/web: move api handler into web.go (Sonia Appasamy) #8826
- ce5909d: release/dist: remove extra Close on a signed file (tailscale#9094) (Andrew Lytvynov) #9094
- 9430481: cmd/containerboot: account for k8s secret reflection in fsnotify (Maisem Ali) #9095
- e80ba4c: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9019
- fe91160: flake.nix: use Go 1.21 to build tailscale flake (David Anderson) #9101
- b407fde: flake.nix: use Go 1.21 to build tailscale, for real this time (David Anderson) #9102
- e7d1538: types/views: add SliceEqual, like std slices.Equal (Brad Fitzpatrick) #9105
- 4af22f3: util/deephash: add IncludeFields, ExcludeFields HasherForType Options (Brad Fitzpatrick) #9104
- ce4bf41: cmd/k8s-operator: support being the default loadbalancer controller (Mike Beaumont) #8922
- 3451b89: cmd/k8s-operator: put Tailscale IPs in Service ingress status (Mike Beaumont) #8817
- c86a610: cmd/tailscale, net/portmapper: add --log-http option to "debug portmap" (Andrew Dunham) #8998
- 18d9c92: release/dist/cli: add verify-package-signature command (tailscale#9110) (Andrew Lytvynov) #9110
- be5bd1e: client/web: skip authorization checks for static assets (Will Norris) #9083
- d74c771: client/web: always use new web client; remove old client (Will Norris) #9083
- 346dc5f: ipn/ipnlocal: move C2NUpdateResponse to c2ntypes.go (tailscale#9112) (Chris Palmer) #9112
- fcbb2bf: net/memnet: export the network name (tailscale#9111) (Joe Tsai) #9111
- f92e6a1: cmd/k8s-operator: update RBAC to allow creating events (Maisem Ali) #9116
- 0c6fe94: cmd/k8s-operator: add matching family addresses to status (Maisem Ali) #9117
- download SPK and MSI packages with distsign (tailscale#9115) #9115 (Andrew Lytvynov)
- use SPKsVersion instead of Version (tailscale#9118) #9118 (Andrew Lytvynov)
- a79b1d2: control/controlclient: convert PeersChanged nodes to patches internally (Brad Fitzpatrick) #9021
- 590c693: types/logger: add AsJSON (Brad Fitzpatrick) #9119
- a64593d: types/logger: fix test failure I missed earlier (Brad Fitzpatrick) #9124
- 55bb731: control/controlclient: replace a status func with Observer interface (Brad Fitzpatrick) #9120
- 8ba07aa: ipn/iplocale: remove unused argument to shouldUseOneCGNATRoute (Val) #9127
- 3bce963: derp/derphttp: fix data race and crash in proxy dial error path (Brad Fitzpatrick) #9133
- 6b882a1: control/controlclient: clean up a few little things (Brad Fitzpatrick) #9125
- 7aea219: client/web: pull SynoToken logic into apiFetch (Sonia Appasamy) #9136
- 6dfa403: cmd/tailscaled: default to userspace-networking on plan9 (Brad Fitzpatrick) #9138
- 11ece02: net/{interfaces,netmon}: remove "interesting", EqualFiltered API (Brad Fitzpatrick) #9100
- 930e6f6: types/opt: use switch in Bool.UnmarshalJSON (tailscale#9140) (Joe Tsai) #9140
- c919ff5: cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating (Maisem Ali) #9139
- da6eb07: client/web: add localapi proxy (Sonia Appasamy) #9097
- 1cd03bc: client/web: remove self node on server (Sonia Appasamy) #9142
- e952564: client/web: pipe unraid csrf token through apiFetch (Sonia Appasamy) #9143
- 8b492b4: net/wsconn: accept a remote addr string and plumb it through (David Anderson) #9146
- detect when tailscale is installed without package manager (tailscale#9137) #9137 (Andrew Lytvynov)
- 7538f38: cmd/containerboot: fix broken tests (Maisem Ali) #9147
- b90b9b4: client/web: fix data race (Maisem Ali) #9151
- ae747a2: cmd/testwrapper: handle timeouts as test failures (Maisem Ali) #9149
- fe709c8: cmd/k8s-operator,cmd/containerboot: add kube egress proxy (tailscale#9031) (Irbe Krumina) #9031
- 29a35d4: cmd/sniproxy: switch to peterbourgon/ff for flags (Denton Gentry) #9148
- 17438a9: cm/k8s-operator,cmd/contain...
v1.48.2-sunos
Commits
- 7a1205d: wgengine/magicsock: clear endpoint state in noteConnectivityChange (James Tucker) #9350
- 572b0a4: wgengine/magicsock: update lastfullping comment to include wg only (Charlotte Brandhorst-Satzkorn) #9350
- 8b36386: wgengine/magicsock: clear out endpoint statistics when it becomes bad (James Tucker) #9350
- ffd89ac: wgengine/magicsock: improve endpoint selection for WireGuard peers with rx time (James Tucker) #9350
- ab970fe: VERSION.txt: this is v1.48.2 (James Tucker)
- 386046f: Merge tag 'v1.48.2' into sunos-1.48 (Nahum Shalman)
v1.48.1-sunos
Commits
- parse /etc/synoinfo.conf to get CPU arch (tailscale#8940) (tailscale#8950) #8950 (Andrew Lytvynov)
- 7286226: 1.48 cherry-picks for nftables (tailscale#8989) (Andrew Lytvynov) #8989
- bd914d5: net/portmapper: never select port 0 in UPnP (tailscale#8996) (Andrew Lytvynov) #8996
- 0e9f04c: VERSION.txt: this is v1.48.1 (Andrew Lytvynov)
- 0ae65c2: Merge tag 'v1.48.1' into sunos-1.48 (Nahum Shalman)
v1.48.0-sunos
Commits
- 486ab42: VERSION.txt: this is v1.47.0 (tailscale#8654) (Andrea Gottardo) #66,#8654
- guard against key-length panics when verifying signatures #66,#8653 (Tom DNetto)
- 3f6b0d8: cmd/tailscale/cli: make
tailscale update
querysoftwareupdate
(tailscale#8641) (Chris Palmer) #66,#8641 - efd6d90: cmd/tailscale/cli: implement update for arch-based distros (tailscale#8655) (Andrew Lytvynov) #66,#8655
- 388b124: net/dns: detect when libnss_resolve is used (Anton Tolchanov) #8640
- 3c53bed: cmd/tailscale/cli: limit Darwin-only option to Darwin (tailscale#8657) (Chris Palmer) #8657
- 32d486e: cmd/tailscale/cli: ensure custom UsageFunc is always set (tailscale#8665) (Chris Palmer) #8665
- 7560435: tstest/deptest: add test-only package to unify negative dep tests (Brad Fitzpatrick) #8668
- 88cc0ad: util/linuxfw: remove yet-unused code to fix linux/arm64 crash (Brad Fitzpatrick) #8668
- ignore io.EOF from sftp.Server.Serve #8670 (Joe Tsai)
- use tstime (tailscale#8607) #8607 (Claire Wang)
- 907c56c: api.md: add documentation to API endpoint about SCIM group warnings (Jenny Zhang) #8676
- deprecate Debug, flesh out Node.DERP docs #8681 (Brad Fitzpatrick)
- 453620d: go.toolchain.rev: bump Go version (Brad Fitzpatrick) #8685
- 2a6c237: net/dns: overwrite /tmp/resolv.conf on gokrazy (Michael Stapelberg) #8688
- add UserProfile.Groups #8693 (Brad Fitzpatrick)
- 894b237: cmd/tailscale/cli: implement update for dnf/yum-based distros (tailscale#8678) (Andrew Lytvynov) #8678
- update tailscale{,d} licenses #8610 (License Updater)
- 45b5d09: net/art: fix running tests outside of CI (David Anderson) #8611
- 486195e: net/art: make each strideTable track the IP prefix it represents (David Anderson) #8611
- fcf4d04: net/art: implement path compression optimization (David Anderson) #8611
- ac657ca: net/art: add debug hooks to strideTable (David Anderson) #8611
- 9cc3f7a: net/art: fix format of debug output (David Anderson) #8611
- b145a22: net/art: add more exhaustive table testing (David Anderson) #8611
- aaca911: net/art: add another consistency test for insert/delete (David Anderson) #8611
- 1e6f0bb: net/art: fix slowPrefixTable bugs found by fuzzing (David Anderson) #8611
- 736a442: net/art: fix comment typo (David Anderson) #8611
- de5c6ed: net/art: document valid values of strideTable.prefix (David Anderson) #8611
- 8478358: net/art: use "index", not "idx" in function names (David Anderson) #8611
- b242e2c: net/art: reword confusing function docstring (David Anderson) #8611
- b76d8a8: net/art: document return value of strideTable.delete (David Anderson) #8611
- 125b982: net/art: make Table.Get alloc-free (David Anderson) #8611
- 44ad7b3: net/art: factor out picking the right strideTable for addr family (David Anderson) #8611
- f1cd674: net/art: move slice closer to its use (David Anderson) #8611
- 4f14ed2: net/art: use encoding/binary for address bit twiddling (David Anderson) #8611
- 6afffec: net/art: use more intelligible, go-ish state tracking in table.Get (David Anderson) #8611
- 306deea: cmd/tailscale/cli,version/distro: update support for Alpine (tailscale#8701) (Andrew Lytvynov) #8701
- 1ecc16d: tailcfg,ipn/ipnlocal,wgengine: add values to PeerCapabilities (Maisem Ali) #8709
- 9edb848: cmd/tailscale/cli: implement update on FreeBSD (tailscale#8710) (Andrew Lytvynov) #8710
- c2831f6: wgengine/magicsock: delete unused stuff (David Anderson) #8716
- f7016d8: wgengine/magicsock: factor out endpoint into its own file (David Anderson) #8717
- cde37f5: wgengine/magicsock: factor out peerMap into separate file (David Anderson) #8718
- move disco pcap helper to disco package #8718 (David Anderson)
- 8477735: wgengine/magicsock: factor out more separable parts (David Anderson) #8721
- 9d89e85: wgengine/magicsock: document mysterious-looking assignment (David Anderson) #8722
- introduce exit-node subcommand to list and filter exit nodes #8617 (Charlotte Brandhorst-Satzkorn)
- aa37be7: api.md: update device authorize API docs to allow for deauth (tailscale#8728) (tinku-tailscale) #8728
- c1ecae1: ipn/{ipnlocal,localapi}: actually renew certs before expiry (tailscale#8731) (Andrew Lytvynov) #8731
- use tstime (tailscale#8597) #8597 (Claire Wang)
- use tstime (tailscale#8634) #8634 (Claire Wang)
- update exp/slices and fix call sites #8740 (David Anderson)
- 6114247: types/logid: add a Compare method (David Anderson) #8742
- update tailscale{,d} licenses #8741 (License Updater)
- 68f8e56: wgengine/magicsock: remove dead code (tailscale#8745) (salman aljammaz) #8745
- add helper to unmarshal PeerCap values #8747 (Maisem Ali)
- 5ebb271: derp/derphttp: add optional Client.BaseContext hook (Brad Fitzpatrick) #8752
- ed46442: client/tailscale/apitype: document never-nil property of WhoIsResponse (David Anderson) #8758
- eef15b4: cmd/dist,release/dist: sign release tarballs with an ECDSA key (tailscale#8759) (Andrew Lytvynov) #8759
- ec9213a: cmd/sniproxy: add client metrics (Denton Gentry) #8755
- 7adf15f: cmd/tailscale/cli, util/winutil/authenticode: flesh out authenticode support (Aaron Klotz) #8285
- implement lock revoke-keys command #8644 (Tom DNetto)
- update tailscale{,d} licenses #8764 (License Updater)
- 66e46bf: ipnlocal, net/*: deprecate interfaces.GetState, use netmon more for it (Brad Fitzpatrick) #8765
- add CapabilityHTTPS const...