Skip to content

Releases: nshalman/tailscale

v1.46.1-sunos

31 Jul 23:59
Compare
Choose a tag to compare

Commits

  • 6d28281: illumos/solaris support rebased onto 1.46.0 (Nahum Shalman)
  • mitigation for odd bug (Nahum Shalman)
  • 1670183: tstest/deptest: add test-only package to unify negative dep tests (Brad Fitzpatrick) #8674
  • 0e950af: util/linuxfw: remove yet-unused code to fix linux/arm64 crash (Brad Fitzpatrick) #8674
  • ignore io.EOF from sftp.Server.Serve #8674 (Joe Tsai)
  • guard against key-length panics when verifying signatures (Tom DNetto)
  • 2d3223f: VERSION.txt: this is v1.46.1 (Andrea Gottardo)
  • 7c62ea7: Merge tag 'v1.46.1' into sunos-1.46 (Nahum Shalman)

v1.46.0-sunos

20 Jul 14:24
Compare
Choose a tag to compare

Commits

Read more

v1.44.2-sunos

19 Jul 01:02
Compare
Choose a tag to compare

Commits

  • a377e13: wgengine/magicsock: remove noV4/noV6 check in addrForSendWireGuardLocked (Charlotte Brandhorst-Satzkorn)
  • mitigation for odd bug (Nahum Shalman)
  • add notes about likely bug identity and fix (Nahum Shalman)
  • fix hostname for custom http ports (Will Norris)
  • dcac3ed: VERSION.txt: this is v1.44.2 (salman)
  • cbf59e3: Merge tag 'v1.44.2' into sunos-1.44 (Nahum Shalman)

v1.44.0-sunos

23 Jun 00:58
Compare
Choose a tag to compare

Commits

Read more

v1.42.0-sunos

30 May 16:50
Compare
Choose a tag to compare

Builds

Commits

  • 1145b97: VERSION.txt: this is v1.41.0 (Denton Gentry) #7988
  • 161d1d2: net/ping,netcheck: add v6 pinging capabilities to pinger (tailscale#7971) (Charlotte Brandhorst-Satzkorn) #7971
  • d78b334: cmd/derper: disable http2 (Kyle Carberry) #7701
  • 8032b96: .github/workflows: add recency bias to action cache keys (James Tucker) #7980
  • charlotte 1 spell-checking-linter 0 (tailscale#7993) #7993 (Charlotte Brandhorst-Satzkorn)
  • add documentation to Map.Range #7996 (James Tucker)
  • 633d08b: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7954
  • 042f82e: build_dist.sh: make cross-compilation friendly for env CC specified (ayanamist) #7991
  • add Map.Len to get the length of the Map #7997 (James Tucker)
  • a82f275: cmd/sniproxy: Set App name in tsnet hostinfo (Denton Gentry) #8004
  • 1f4a345: .github: test installer script in CI in docker (Anton Tolchanov) #8001
  • update win/apple licenses #7978 (License Updater)
  • 42fd964: control/controlclient: use dnscache.Resolver for Noise client (Andrew Dunham) #8008
  • c5bf868: ssh/tailssh: improve debug logging around revoked sessions (Tom DNetto) #8014
  • bcf7b63: wgengine/magicsock: add hysteresis to endpoint selection (Andrew Dunham) #7940
  • 3ae7140: net/tstun: handle exit nodes in NAT configs (Maisem Ali) #8021
  • add a README.md with some docs #8019 (Brad Fitzpatrick)
  • ddb4040: wgengine/magicsock: add address selection for wireguard only endpoints (tailscale#7979) (Charlotte Brandhorst-Satzkorn) #7979
  • 4d79270: wgengine/magicsock: annotate, skip flaky TestIsWireGuardOnlyPickEndpointByPing (Brad Fitzpatrick) #8038
  • be190e9: ssh/tailssh: restore support for recording locally (Maisem Ali) #8023
  • update tailscale{,d} licenses #8040 (License Updater)
  • 459744c: .github: mark bots for exemption by issuebot (tailscale#8041) (M. J. Fromberger) #8041
  • 9e9ea6e: go.mod: bump all deps possible that don't break the build (Brad Fitzpatrick) #8044
  • update tailscale{,d} licenses #8046 (License Updater)
  • 5783adc: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8039
  • 787fc41: scripts/installer.sh: check connectivity with pkgs.tailscale.com (Anton Tolchanov) #8002
  • support tailscaled-env.txt on macOS too #8048 (Brad Fitzpatrick)
  • f46c1ae: go.mod: bump k8s libs (Maisem Ali) #8051
  • 4860522: go.mod: bump gvisor (James Tucker) #8049
  • 1c6ff31: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8053
  • 5def4f4: go.mod: bump goreleaser deps (James Tucker) #8050
  • d1ce7a9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8056
  • add detection and Taildrop for Unraid #8029 (Derek Kaser)
  • add package with System type to unify subsystem init, discovery #4754 (Brad Fitzpatrick)
  • 9ed3a06: net/netns: fix segv when no tailscale interface is found (James Tucker) #8064
  • 8864112: ipn/ipnlocal: bound how long cert fetchher checks for existing DNS records (Brad Fitzpatrick) #8068
  • 8d3d48e: ipn/ipnlocal: add NodeKey func to return the public node NodeKey (Charlotte Brandhorst-Satzkorn) #8061
  • update rename SSHFailureNotifyRequest and add EventType #8061 (Charlotte Brandhorst-Satzkorn)
  • 68307c1: ssh/tailssh: send ssh event notifications on recording failures (Charlotte Brandhorst-Satzkorn) #8061
  • 29ded8f: ssh/tailssh,tailcfg: add connID to ssheventnotifyrequest and castheader (Charlotte Brandhorst-Satzkorn) #8061
  • bump capability version #8061 (Charlotte Brandhorst-Satzkorn)
  • 5c38f09: tsweb/promvarz: fix repeated expvar definition in test (James Tucker) #8065
  • b9fb8ac: fix sys.Set(router) issue will crash the daemon in some OSs (Chenyang Gao) #8073
  • update android licenses #8081 (License Updater)
  • update tailscale{,d} licenses #8054 (License Updater)
  • properly handle vcs.modified when it's "false" #8087 (Chenyang Gao)
  • 58ab66e: ssh/tailssh: support LDAP users for Tailscale SSH (Brad Fitzpatrick) #8098
  • a743b66: ssh/tailssh: move some user-related code into new user.go (Brad Fitzpatrick) #8099
  • update win/apple licenses #8012 (License Updater)
  • 827abbe: cmd/k8s-operator: print version in startup logs (Craig Rodrigues) #7814
  • 1ce0825: release/dist: add deb/rpm arch mappings for mipses (salman) #8104
  • ea84fc9: net/sockstats: wait before reporting battery usage (Will Norris) #8105
  • 4f454f4: util/codegen: support embedded fields (Brad Fitzpatrick) #8107
  • d27a6e1: tool/gocross: fix incorrect relpath usage in bootstrap script (David Anderson) #8108
  • cb2fd5b: cmd/tsconnect: fix forgotten API change for wasm (Brad Fitzpatrick) #8109
  • reenable TestLoopbackSOCKS5 on Windows #8114 (James Tucker)
  • da90fab: net/netcheck: reenable TestBasic on Windows (James Tucker) #8113
  • be less aggressive about re-uploads (tailscale#8117) #8117 (Joe Tsai)
  • b690593: util/set: add a basic map-based Set type (Brad Fitzpatrick) #8122
  • 85215ed: cmd/k8s-operator: handle NotFound secrets (Maisem Ali) #8123
  • allow the expiry time to be specified for new keys #7143 (Matt Brown)
  • 678bb92: cmd/tailscale/cl...
Read more

v1.40.1-sunos

11 May 18:44
Compare
Choose a tag to compare

Commits

  • de26c1c: net/tstun: handle exit nodes in NAT configs (Maisem Ali)
  • 0549338: cmd/k8s-operator: print version in startup logs (Craig Rodrigues)
  • 42e993e: release/dist: add deb/rpm arch mappings for mipses (salman)
  • c6ebbdd: ssh/tailssh: restore support for recording locally (Maisem Ali)
  • 176939f: ipn/ipnlocal: bound how long cert fetchher checks for existing DNS records (Brad Fitzpatrick)
  • 2e44616: ssh/tailssh: support LDAP users for Tailscale SSH (Brad Fitzpatrick)
  • ba3ff98: net/sockstats: wait before reporting battery usage (Will Norris)
  • d268486: VERSION.txt: this is v1.40.1 (Rhea Ghosh)
  • 25ef4a6: Merge tag 'v1.40.1' into sunos-1.40 (Nahum Shalman)

v1.40.0-sunos

27 Apr 13:03
Compare
Choose a tag to compare

Continuous Integration

Commits

  • 6d3490f: VERSION.txt: this is 1.39 (Denton Gentry) #7564
  • 9ebab96: version/mkversion: don't break on tagged go.mod entries (David Anderson) #7566
  • remove per-interface stats from Get #7565 (Mihai Parparita)
  • df3996c: tool/gocross: bootstrap correctly on an older toolchain (David Anderson) #7395
  • 9526858: control/controlclient: fix accidental backoff reset (Kurnia D Win) #7570
  • 1f95bfe: tool/gocross: adjust Xcode flags to match new Xcode env (David Anderson) #7448
  • 0498d5e: tool/gocross: delete bootstrap tarball downloads after use (David Anderson) #7579
  • do not start logtail in tests #7580 (Maisem Ali)
  • add test for Funnel connections #7519 (Maisem Ali)
  • 9534783: tailscale/cmd: Warn for up --force-reauth over SSH without accepting the risk (tailscale#7575) (James 'zofrex' Sanderson) #7575
  • 95494a1: .github: use unique names for jobs (Maisem Ali) #7586
  • 82e067e: build_dist.sh: make cross-compilation friendly (Nahum Shalman) #7583
  • 927e2e3: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7612
  • 60a028a: .github: Bump peter-evans/create-pull-request from 4.1.4 to 4.2.4 (dependabot[bot]) #7611
  • log client pubkeys on derp mesh probe failures #7614 (Anton Tolchanov)
  • 50d211d: cmd/derpprobe: allow running all probes at the same time (Anton Tolchanov) #7614
  • add optional debug logging for prober clients #7614 (Anton Tolchanov)
  • e1fb687: cmd/tailscale/cli: fix inconsistency between serve text and example command (Mihai Parparita) #7593
  • ccace1f: ssh/tailssh: fix privilege dropping on FreeBSD; add tests (Andrew Dunham) #7615
  • ebc630c: net/interfaces: also allow link-local for AzureAppServices. (Denton Gentry) #7604
  • df02bb0: tool/gocross: fail if the toolchain revision isn't findable (David Anderson) #7618
  • e7a78bc: tool/gocross: support running from outside the repo dir (David Anderson) #7618
  • d2dec13: net/sockstats: export cellular-only clientmetrics (Mihai Parparita) #7624
  • f11c270: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #7628
  • c9a4dbe: tool/gocross: correctly embed the git commit into gocross (David Anderson) #7629
  • 39b2895: ssh/tailssh: make uid an int instead of uint64 (Andrew Dunham) #7630
  • what?! a llama?! he's supposed to be dead! (tailscale#7623) #7623 (Sam Linville)
  • add recorders field to SSHRule struct #7636 (Charlotte Brandhorst-Satzkorn)
  • move recorders field from SSHRule to SSHAction #7639 (Charlotte Brandhorst-Satzkorn)
  • 60cd4ac: cmd/tailscale/cli: move tskey-wrap functionality under lock sign (Tom DNetto) #7622
  • 916aa78: ssh/tailssh: stream SSH recordings to configured recorders (Maisem Ali) #7640
  • cc38060: scripts/installer.sh: Add Ubuntu Lunar Lobster 23.04. (Denton Gentry) #7641
  • 7a97e64: ssh/tailssh: add more metadata to recording header (Maisem Ali) #7643
  • d92047c: ssh/tailssh: allow recorders to be configured on the first or final action (Maisem Ali) #7644
  • only record latency for successful probes #7632 (Anton Tolchanov)
  • 731688e: ipn/localapi: add endpoint for adding debug log entries (Mihai Parparita) #7642
  • use logtail to log and upload sockstat logs #7654 (Will Norris)
  • c350cd1: ssh/tailssh: use background context for uploading recordings (Maisem Ali) #7647
  • 9de8287: ssh/tailssh: lock OS thread during incubator (Andrew Dunham) #7660
  • 13377e6: ssh/tailssh: always assert our final uid/gid (Andrew Dunham) #7659
  • pass log IDs as the proper type rather than strings #7661 (Will Norris)
  • 9d8b7a7: ipn/store/kubestore: handle "/" in ipn.StateKeys (Maisem Ali) #7663
  • 8765568: ssh/tailssh: add docs to CastHeader fields (Maisem Ali) #7667
  • 8a24648: ssh/tailssh: enable recording of non-pty sessions (Maisem Ali) #7667
  • df89b7d: cmd/k8s-operator: disable HTTP/2 for the auth proxy (Maisem Ali) #7664
  • 583e86b: ssh/tailssh: handle session recording when running in userspace mode (Maisem Ali) #7670
  • add Node.SelfNodeV4MasqAddrForThisPeer #7437 (Maisem Ali)
  • 535fad1: net/tstun: rename filterIn/filterOut methods to be more descriptive (Maisem Ali) #7437
  • bb31fd7: net/tstun: add inital support for NAT v4 (Maisem Ali) #7437
  • f6ea686: tstest/integration: add ping test w/ masquerades (Maisem Ali) #7437
  • 0bf8c8e: net/tstun: use p.Buffer() in more places (Maisem Ali) #7437
  • 0e203e4: net/packet: add checksum update tests (Maisem Ali) #7437
  • ec90522: ipn/ipnlocal: also store ACME keys in the certStore (Maisem Ali) #7669
  • 8a11f76: ipn/ipnlocal: fix cert storage in Kubernetes (Maisem Ali) #7669
  • 9e81db5: ipn/ipnlocal: use atomicfile.WriteFile in certFileStore (Maisem Ali) #7669
  • 4a89642: log/sockstatlog: make shutdown close idle connections (Maisem Ali) #7674
  • 4cb1bfe: net/netcheck: improve determinism in hairpinning test (Andrew Dunham) #7682
  • use pkg server to determine supported deb/rpm distros #7127 (Anton Tolchanov)
  • 33b3596: net/dns: don't send on closed channel in resolvedManager (Andrew Dunham) #7683
  • ca19cf1: log/sockstatlog: add resource cleanup test (Maisem Ali) #7675
  • split out DialContext into a func #7675 (Maisem Ali)
  • do not upload logs in tests #7675 (Maisem Ali)
  • d2fd101: net/tstun: only log natConfig on changes (Maisem Ali) #7688
  • support TS_AUTH_KEY variant too [tailscale#7689](https://githu...
Read more

v1.38.4-sunos

18 Apr 14:31
Compare
Choose a tag to compare

Commits

  • add recorders field to SSHRule struct (Charlotte Brandhorst-Satzkorn)
  • move recorders field from SSHRule to SSHAction (Charlotte Brandhorst-Satzkorn)
  • dbbc465: ssh/tailssh: stream SSH recordings to configured recorders (Maisem Ali)
  • d216363: ssh/tailssh: add more metadata to recording header (Maisem Ali)
  • 40091d0: ssh/tailssh: allow recorders to be configured on the first or final action (Maisem Ali)
  • 2474bd2: ssh/tailssh: use background context for uploading recordings (Maisem Ali)
  • 0651c1a: ssh/tailssh: add docs to CastHeader fields (Maisem Ali)
  • 8414c59: ssh/tailssh: enable recording of non-pty sessions (Maisem Ali)
  • e6b81f9: ssh/tailssh: handle session recording when running in userspace mode (Maisem Ali)
  • 1b1ac05: ssh/tailssh: add session recording test for non-pty sessions (Maisem Ali)
  • 71a5f2a: ssh/tailssh: add tests for recording failure (Maisem Ali)
  • 49e305f: ssh/tailssh: fix race in errors returned when starting recorder (Maisem Ali)
  • c3301ab: go.toolchain.rev: update for go 1.20.3 (David Anderson) #7789
  • 383b7c7: cmd/tailscale/cli: make serve and funnel visible in list (tailscale#7737) (shayne)
  • 296d682: cmd/tailscale/cli: fix inconsistency between serve text and example command (Mihai Parparita)
  • 61f36aa: cmd/tailscale/cli: do not allow turning Funnel on while shields-up (tailscale#7770) (shayne)
  • 00205f0: ssh/tailssh: handle output matching better in tests (tailscale#7799) (Maisem Ali)
  • 214217d: cmd/tailscale/cli: [serve] add support for proxy paths (tailscale#7800) (shayne)
  • 043a345: VERSION.txt: this is v1.38.4 (Rhea Ghosh)
  • 1ef27eb: Merge tag 'v1.38.4' into sunos-1.38 (Nahum Shalman)

v1.38.3-sunos

30 Mar 18:33
Compare
Choose a tag to compare

Commits

  • d47b74e: ipn/ipnlocal: also store ACME keys in the certStore (Maisem Ali)
  • 26bf7c4: ipn/ipnlocal: fix cert storage in Kubernetes (Maisem Ali)
  • 068ed7d: ipn/ipnlocal: use atomicfile.WriteFile in certFileStore (Maisem Ali)
  • change references from alpha to beta (tailscale#7613) (shayne)
  • d7bbd4f: ipn/ipnlocal: [serve/funnel] use actual SrcAddr as X-Forwarded-For (tailscale#7600) (shayne)
  • c750186: ipn/ipnlocal: [serve] Trim mountPoint prefix from proxy path (tailscale#7334) (shayne)
  • 47ebe6f: VERSION.txt: this is v1.38.3 (Shayne Sweeney)
  • d02885d: Merge tag 'v1.38.3' into sunos-1.38 (Nahum Shalman)

v1.38.2-sunos

24 Mar 12:58
Compare
Choose a tag to compare

Commits

  • fd558e2: net/interfaces: also allow link-local for AzureAppServices. (Denton Gentry)
  • aad01c8: cmd/tailscale/cli: move tskey-wrap functionality under lock sign (Tom DNetto)
  • d00c046: ssh/tailssh: fix privilege dropping on FreeBSD; add tests (Andrew Dunham)
  • 817aa28: net/sockstats: export cellular-only clientmetrics (Mihai Parparita)
  • 3db61d0: VERSION.txt: this is v1.38.2 (Denton Gentry)
  • 7db9e12: Merge tag 'v1.38.2' into sunos-1.38 (Nahum Shalman)