v1.52.0-sunos
·
1808 commits
to sunos-1.78
since this release
Commits
- update win/apple licenses #9519 (License Updater)
- 098d110: VERSION.txt: this is v1.51.0 (Aaron Klotz) #9532
- 530aaa5: net/dns: retry forwarder requests over TCP (Andrew Dunham) #9288
- 6516206: ipn/ipnlocal: close foreground sessions on SetServeConfig (Marwan Sulaiman) #9447
- bdd9eec: cmd/k8s-operator: fix reconcile filters (tailscale#9533) (Irbe Krumina) #9533
- 578b357: wgengine/netstack: use buffer pools for UDP packet forwarding (Val) #9518
- c608660: wgengine,net,ipn,disco: split up and define different types of MTU (Val) #9518
- refactor methods to get values from registry to also return (tailscale#9536) #9536 (Claire Wang)
- 0275afa: ipn/ipnlocal: prevent putting file if file already exists (tailscale#9515) (Rhea Ghosh) #9515
- 3e298e9: go.toolchain.rev: bump go (Brad Fitzpatrick) #9541
- d31460f: net/portmapper: fix invalid UPnP metric name (Andrew Dunham) #9552
- 697f92f: client/web: refactor serveGetNodeData (Sonia Appasamy) #9556
- 2066f9f: util/linuxfw: fix crash in DelSNATRule when no rules are found (James Tucker) #9557
- 80206b5: wgengine/magicsock: add nodeid to panic condition on public key reuse (James Tucker) #9560
- ca43961: types/key: update some doc strings for public key serialization (James Tucker) #9561
- 5c2b2fa: ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes (James Tucker) #9498
- use NodeCapMap in CheckFunnel #9567 (Maisem Ali)
- 5d62b17: client/web: add login client mode to web.Server (Sonia Appasamy) #9311
- 2c0f0ee: tool/gocross: disable Linux static linking if GOCROSS_STATIC=0 (Brad Fitzpatrick) #9571
- 5b3f5ea: control/controlclient: fix leaked http2 goroutines on shutdown (Brad Fitzpatrick) #9572
- 5429ee2: client/web: add debug mode for web client ui updates (Sonia Appasamy) #9562
- 2c92f94: cmd/testwrapper: output machine-readable JSON on test flakes (Brad Fitzpatrick) #9575
- b5b4298: go.mod,*: bump gvisor (Andrea Barisani) #9252
- f50b2a8: wgengine/netstack: refactor address construction and conversion (Andrea Barisani) #9252
- 2a7b3ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9576
- 856d32b: cmd/testwrapper: include flake URL in JSON metadata (Brad Fitzpatrick) #9582
- 4823a7e: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry) #9573
- add a test for restarting a tsnet server, fix Windows #9588 (Brad Fitzpatrick)
- d71184d: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali) #9590
- add syspolicy package (tailscale#9550) #9550 (Claire Wang)
- aae1a28: go.mod: add test that replace directives aren't added in oss (Brad Fitzpatrick) #9594
- 71f2c67: go.mod: bump wingoes for cross-platform HRESULT definition (James Tucker) #9595
- 87bc831: go.mod,cmd/tsconnect: bump esbuild (James Tucker) #9578
- 84acf83: go.mod,net/dnsfallback: bump go4.org/netipx (James Tucker) #9578
- 0c8c374: go.mod: bump all dependencies except go-billy (James Tucker) #9578
- 8833dc5: util/set: add some useful utility functions for Set (tailscale#9535) (Chris Palmer) #9535
- update tailscale{,d} licenses #9577 (License Updater)
- 16fa3c2: wgengine/magicsock: use x/sys/unix constants for UDP GSO (tailscale#9597) (Jordan Whited) #9597
- gonna take some time to add the words we never had #9598 (Charlotte Brandhorst-Satzkorn)
- 41b05e6: go.mod: bump wireguard-go (James Tucker) #9563
- i can't help but rave about these additions #9599 (Charlotte Brandhorst-Satzkorn)
- ee90cd0: cmd/cloner,*: optimize nillable slice cloner (James Tucker) #9601
- 324f0d5: cmd/cloner,*: revert: optimize nillable slice cloner (James Tucker) #9603
- a56e58c: util/syspolicy: add read boolean setting (tailscale#9592) (Claire Wang) #9592
- e03f0d5: net/dnsfallback: remove net/dnsfallback go:generate line (James Tucker) #9602
- ab810f1: cmd/cloner: add regression test for slice nil/empty semantics (James Tucker) #9604
- d2ea9bb: cmd/cloner: fix typo in test type's name (Brad Fitzpatrick) #9606
- 72e5374: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9596
- 5f5c914: util/slicesx: add EqualSameNil, like slices.Equal but same nilness (Brad Fitzpatrick) #9609
- 425cf9a: tailcfg, all: use []netip.AddrPort instead of []string for Endpoints (Brad Fitzpatrick) #9610
- 67926ed: wgengine/magicsock: add MTU to addrLatency and rename to addrQuality (Val) #9486
- 4130851: wgengine/magicsock: probe but don't use path MTU from CLI ping (Val) #9486
- c26d91d: net/tstun: remove unused function DefaultMTU() (Val) #9621
- 656a77a: net/packet: implement methods for rewriting v6 addresses (Tom DNetto) #9542
- update tailscale{,d} licenses #9600 (License Updater)
- update win/apple licenses #9587 (License Updater)
- 73e53dc: cmd/tailscale,ipn/ipnlocal: print debug component names (Val) #9628
- b775a37: util/httpm, all: add a test to make sure httpm is used consistently (Brad Fitzpatrick) #9635
- efac2cb: tool/gocross: merge user's build tags and implicitly added build tags together (Brad Fitzpatrick) #9639
- eb22c0d: wgengine/magicsock: use binary.NativeEndian for UDP GSO control data (tailscale#9640) (Jordan Whited) #9640
- 286c6ce: net/dns/resolver: race UDP and TCP queries (tailscale#9544) (Andrew Dunham) #9544
- 5902d51: util/race: add test to confirm we don't leak goroutines (Andrew Dunham) #9641
- 3655fb3: control/controlclient: fix deadlock in shutdown (Maisem Ali) #9646
- 730cdfc: Revert "tool/gocross: disable Linux static linking if GOCROSS_STATIC=0" (Brad Fitzpatrick) #9648
- 91b9899: net/dns/resolver: fix flaky test (Andrew Dunham) #9647
- 93c6e1d: tstest/deptest: add check that x/exp/{maps,slices} imported as xfoo (Brad Fitzpatrick) #9650
- e499a6b: release/dist/unixpkgs: revert iptables move to Recommends, make it Depends (Brad Fitzpatrick) #9656
- b29047b: client/web: add browser session cache to web.Server (Sonia Appasamy) #9659
- populate Pid field on Linux #9663 (Brad Fitzpatrick)
- da1b917: net/tstun: finish wiring IPv6 NAT support (Tom DNetto) #9638
- b4816e1: hostinfo, ipnlocal: flesh out Wake-on-LAN support, send MACs, add c2n sender (Brad Fitzpatrick) #9669
- 7868393: net/dns/resolver, ipnlocal: fix ExitDNS on Android and iOS (Brad Fitzpatrick) #9674
- 3befc0e: client/web: restrict full management client behind browser sessions (Sonia Appasamy) #9622
- initial commit of taildrop functionality refactoring (tailscale#9676) #9676 (Rhea Ghosh)
- 3ee7567: cmd/tailscale/cli: add update notification to "up" (tailscale#9644) (Andrew Lytvynov) #9644
- c42398b: ipn/ipnlocal: cleanup incomingFile (tailscale#9678) (Joe Tsai) #9678
- 559f560: go.toolchain.rev: bump go to 1.21.2 (tailscale#9677) (Andrew Lytvynov) #9677
- c761d10: tool/gocross: don't absorb --tags flags passed to subcommand (David Anderson) #9679
- 557ddce: {ipn/ipnlocal, taildrop}: move put logic to taildrop (tailscale#9680) (Rhea Ghosh) #9680
- b7988b3: api.md: remove clientConnectivity.derp field (Brad Fitzpatrick) #9688
- e6aa7b8: clientupdate,cmd/tailscale/cli: use cli.Stdout/Stderr (tailscale#9694) (Andrew Lytvynov) #9694
- document and cleanup the package (tailscale#9699) #9699 (Joe Tsai)
- add Map.LoadOrInit for lazily initialized values #9689 (James Tucker)
- make ResourceCheck panic on parallel tests #9701 (Brad Fitzpatrick)
- 13767e5: docs/sysv: add a sysv style init script (James Tucker) #9700
- 6f36f88: cmd/tailscale, magicsock: add debug command to flip DERP homes (Brad Fitzpatrick) #9703
- 553f657: sniproxy allows configuration of hostname (Simon Leonhardt) #9712
- add PostureChecks to Prefs #9629 (Kristoffer Dalby)
- 623926a: cmd/tailscale: add --posture-checking flag to set (Kristoffer Dalby) #9629
- add get serial stub for all platforms #9629 (Kristoffer Dalby)
- b4e587c: tailcfg,ipn: add c2n endpoint for posture identity (Kristoffer Dalby) #9629
- 893bdd7: disco,net/tstun,wgengine/magicsock: probe peer MTU (Val) #9657
- 249edaa: wgengine/magicsock: add probed MTU metrics (Val) #9657
- add get serial support for Windows/Linux #9665 (Kristoffer Dalby)
- add get serial support for macOS #9631 (Kristoffer Dalby)
- 7f54004: ipn/ipnlocal: use syspolicy to determine collection of posture data (Kristoffer Dalby) #9684
- 70de16b: ipn/localapi: make whois take IP or IP:port as documented, fix capmap netstack lookup (Brad Fitzpatrick) #9729
- 6b1ed73: go.mod: bump x/net to 0.17 for CVE-2023-39325 (Brad Fitzpatrick) #9730
- 3749a3b: go.toolchain.rev: bump for CVE-2023-39325 (Brad Fitzpatrick) #9731
- update tailscale{,d} licenses #9718 (License Updater)
- 00977f6: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9717
- add type for web client auth response #9732 (Will Norris)
- abort if current version is newer than latest (tailscale#9733) #9733 (Andrew Lytvynov)
- ba6ec42: util/linuxfw: add missing input rule to the tailscale tun (James Tucker) #9085
- 56c0a75: tool/gocross: handle VERSION file not found (Maisem Ali) #9735
- 05a1f5b: util/linuxfw: move detection logic (Maisem Ali) #9737
- 78a083e: types/ipproto: drop IPProto from IPProtoVersion (Maisem Ali) #9739
- 4e083e4: util/cmpver: only consider ascii numerals (tailscale#9741) (Paul Scott) #9741
- 04a8b8b: net/dns: properly detect newer debian resolvconf (Galen Guyer) #9744
- 9f05018: clientupdate/distsign: add new prod root signing key to keychain (David Anderson) #9745
- support registering fallback TCP flow handlers #9749 (Tom DNetto)
- aad3584: util/linuxfw: move fake runner into pkg (Maisem Ali) #9746
- 7a0de29: client/web: remove unused context param from NewServer (Sonia Appasamy) #9751
- fbfee6a: cmd/containerboot: use linuxfw.NetfilterRunner (Maisem Ali) #9747
- 11348fb: util/nocasemaps: import nocasemaps from corp (James Tucker) #9752
- Na na na na na na na na na na na na na na na na (tailscale#9753) #9753 (James 'zofrex' Sanderson)
- 8b630c9: wgengine/filter: use slices.Contains in another place (Brad Fitzpatrick) #9754
- 9d96e05: net/packet: split off checksum munging into different pkg (Maisem Ali) #9755
- 3196076: ipn/ipnlocal: fix log spam from now expected paths (Maisem Ali) #9682
- c1ef552: types/ipproto: import and test string parsing for ipproto (James Tucker) #9759
- 1cb9e33: cmd/k8s-operator: update env var in manifest to APISERVER_PROXY (Maisem Ali) #9765
- flappy birds, but real life #9758 (Charlotte Brandhorst-Satzkorn)
- import ProtoPortRange for local use #9692 (James Tucker)
- implement text encoding for ProtoPortRange #9693 (James Tucker)
- 2d4f808: cmd/containerboot: fix time based serveConfig watcher (Maisem Ali) #9757
- 1294b89: cmd/k8s-operator: allow setting same host value for tls and ingress rules (Maisem Ali) #9761
- improve the functionality and reliability of put (tailscale#9762) #9762 (Joe Tsai)
- introduce a configuration schema for app connectors #9696 (James Tucker)
- 7783a96: client/web: add metric for exit node advertising (tailscale#9781) (Naman Sood) #9781
- add DefaultClock (tailscale#9691) #9691 (Joe Tsai)
- 24f322b: ipn/ipnlocal: do unexpired cert renewals in the background (Maisem Ali) #9784
- add logic for resuming partial files (tailscale#9785) #9785 (Joe Tsai)
- minor cleanups and fixes (tailscale#9786) #9786 (Joe Tsai)
- add tailnet field to register request (tailscale#9675) #9675 (Claire Wang)
- af5a586: ipn/ipnlocal: include AutoUpdate prefs in HostInfo.AllowsUpdate (tailscale#9792) (Andrew Lytvynov) #9792
- 9cb6c5b: util/httphdr: add new package for parsing HTTP headers (tailscale#9797) (Joe Tsai) #9797
- 8c71691: ipn/{ipnlocal/peerapi, localapi}: cleaning up http statuses for consistency and readability (tailscale#9796) (Rhea Ghosh) #9796
- 5c555cd: tstest/integration: set race flag when cross compiling, conditionally fail on race (Brad Fitzpatrick) #9799
- 5297bd2: cmd/tailscaled,net/tstun: fix data race on start-up in TUN mode (Maisem Ali) #9794
- a627082: wgengine/magicsock: fix data race regression in disco ping callbacks (Brad Fitzpatrick) #9795
- c363b90: tstest/integration: add tests for tun mode (requiring root) (Brad Fitzpatrick) #9795
- 18e2936: github/workflows: move race tests to their own job (Brad Fitzpatrick) #9803
- fix data race in TestFallbackTCPHandler #9806 (Brad Fitzpatrick)
- 56ebcd1: .github/workflows: break up race builder a bit more (Brad Fitzpatrick) #9807
- 97ee389: net/dns: use direct when NetworkManager has no systemd-resolved (Denton Gentry) #9812
- e06f2f1: ipn/ipnlocal: change serial number policy to be PreferenceOption (Kristoffer Dalby) #9816
- feabb34: ipn/localapi: add debug-web-client endpoint (Sonia Appasamy) #9690
- 7fd6cc3: go.mod: bump alexbrainman/sspi (Brad Fitzpatrick) #9821
- 51078b6: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9824
- return ErrUnsupported for macSys clients (tailscale#9793) #9793 (Andrew Lytvynov)
- 95faefd: net/dnsfallback: disable recursive resolver for now (Brad Fitzpatrick) #9826
- 71271e4: ipn/{ipnlocal/peerapi, localapi} initial taildrop resume api plumbing (tailscale#9798) (Rhea Ghosh) #9798
- 18bd98d: cmd/tailscaled,*: add start of configuration file support (Brad Fitzpatrick) #9820
- b949e20: ipn/ipnlocal: fix AllowsUpdate disable after enable (tailscale#9827) (Andrew Lytvynov) #9827
- 4899c2c: cmd/containerboot: revert to using tailscale up (Maisem Ali) #9814
- 9d3c6bf: ipn/ipnlocal/peerapi: refactoring taildrop to just one endpoint (tailscale#9832) (Rhea Ghosh) #9832
- e6ab7d3: cmd/testwrapper: parse args better (Maisem Ali) #9804
- 4dec0c6: tstest, tstest/integration, github/workflows: shard integration tests (Brad Fitzpatrick) #9840
- 6ca8650: tstest/tstest: add t.Parallel that can be disabled by TS_SERIAL_TESTS=true (Brad Fitzpatrick) #9842
- 1fc3573: ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key (Brad Fitzpatrick) #9835
- f53c3be: cmd/k8s-operator: use our own container image instead of busybox (Maisem Ali) #9839
- ddb2a6e: cmd/tailscale: promote new serve/funnel CLI to be default (tailscale#9833) (Tyler Smalley) #9833
- cac290d: cmd/k8s-operator: users can configure firewall mode for kube operator proxies (tailscale#9769) (Irbe Krumina) #9769
- 33bb2bb: tailcfg,cmd/tailscale: add UrgentSecurityUpdate flag to ClientVersion (tailscale#9848) (Andrew Lytvynov) #9848
- implement asynchronous file deletion (tailscale#9844) #9844 (Joe Tsai)
- c27870e: client/web: refactor authorizeRequest (Sonia Appasamy) #9851
- fix background install for linux tarballs (tailscale#9852) #9852 (Andrew Lytvynov)
- fix localapi and peerapi protocol for taildrop resume (tailscale#9860) #9860 (Joe Tsai)
- switch hashing to be streaming based (tailscale#9861) #9861 (Joe Tsai)
- update win/apple licenses #9643 (License Updater)
- fix theoretical race condition (tailscale#9866) #9866 (Joe Tsai)
- b47cf04: util/linuxfw: fix broken tests (Maisem Ali) #9846
- c3a8e63: util/linuxfw: add additional nftable detection logic (Maisem Ali) #9846
- 8515360: client/web: add tests for authorizeRequest (Sonia Appasamy) #9867
- afb72ec: .github/workflows: update golangci-lint (James Tucker) #9772
- add Map.LoadFunc (tailscale#9869) #9869 (Joe Tsai)
- disable TestResume (tailscale#9873) #9873 (Joe Tsai)
- cf27761: cmd/tsconnect/wasm: add missing tstun.Wrapper.Start call (Brad Fitzpatrick) #9877
- fix TestResume (tailscale#9874) #9874 (Joe Tsai)
- 891d964: wgengine/magicsock: simplify tryEnableUDPOffload() (tailscale#9872) (Jordan Whited) #9872
- 09b5bb3: ipn/ipnlocal: proxy gRPC requests over h2c if needed. (tailscale#9847) (Irbe Krumina) #9847
- 73bbf94: client/web: hook up auth flow (Sonia Appasamy) #9838
- f09cb45: ipn/ipnlocal: initiate proxy transport once (tailscale#9883) (Irbe Krumina) #9883
- 35376d5: cmd/tailscale/cli: [serve/funnel] provide correct command for disabling (tailscale#9859) (Tyler Smalley) #9859
- 7a3ae39: cmd/tailscale/cli: [serve/funnel] support omitting scheme for TCP (tailscale#9856) (Tyler Smalley) #9856
- 469b7ca: cmd/tailscale: improve taildrop progress printer on Linux (tailscale#9878) (Joe Tsai) #9878
- implement app connector Server type #9834 (Tom DNetto)
- move to types/appctype #9885 (Tom DNetto)
- add ID field to WebClientAuthResponse #9886 (Sonia Appasamy)
- 25b6974: ipn/ipnlocal: send ClientVersion to Apple frontends (tailscale#9887) (Andrew Lytvynov) #9887
- fix theoretical race condition in fileDeleter.Init (tailscale#9876) #9876 (Joe Tsai)
- 1df2d14: client/web: use auth ID in browser sessions (Sonia Appasamy) #9888
- eced054: ipn/ipnlocal: close connections for removed proxy transports (tailscale#9884) (Irbe Krumina) #9884
- change Mac App Store support (tailscale#9891) #9891 (Andrew Lytvynov)
- 68da155: ipn/localapi,client/web: clean up auth error handling (Sonia Appasamy) #9897
- 5347e6a: control/controlclient: support certstore without cgo (Adrian Dewhurst) #9899
- d9081d6: cmd/tailscale/cli: update serve/funnel CLI help text (tailscale#9895) (Tyler Smalley) #9895
- f398712: ipn/ipnlocal: prevent changing serve config if conf.Locked (Maisem Ali) #9904
- e87862b: go.toolchain.rev: bump Tailscale Go toolchain (Brad Fitzpatrick) #9915
- e995641: cmd/k8s-operator: allow cleanup of cluster resources for deleted devices (tailscale#9917) (Irbe Krumina) #9917
- manually restart Windows GUI after update (tailscale#9906) #9906 (Andrew Lytvynov)
- 60e768f: cmd/tailscale: allow serve|funnel off to delete an entire port (Marwan Sulaiman) #9924
- 152390e: ipn/localapi: avoid unkeyed literal (tailscale#9933) (Joe Tsai) #9933
- 0e89245: ipn/ipnlocal: drop hostinfo param from doSetHostinfoFilterServices (Maisem Ali) #9931
- 17b2072: ipn/ipnlocal: set the push device token correctly (Maisem Ali) #9931
- 62d08d2: client/web: set Server.cgiMode field (Sonia Appasamy) #9935
- f232d45: cmd/tailscale: translate old serve commands to new ones (Marwan Sulaiman) #9925
- c53ee37: cmd/tailscale: add set-raw to the new serve funnel commands (Marwan Sulaiman) #9927
- 35d7b3a: cmd/tailscale/cli: updates help and background messaging (tailscale#9929) (Tyler Smalley) #9929
- 7df6f87: wgengine/netstack: only add addresses to correct protocols (James Tucker) #9944
- distinguish when auto-updates are possible (tailscale#9896) #9896 (Andrew Lytvynov)
- 514539b: wgengine/magicsock: close disco listeners on Conn.Close, fix Linux root TestNewConn (Brad Fitzpatrick) #9946
- b2ae8fd: derp/derphttp: strip port numbers from URL hostname (Thomas Kosiewski) #9949
- 269a498: cmd/tailscale/cli: serve --set-path should not force background mode (tailscale#9905) (Tyler Smalley) #9905
- remove unused field in userspaceEngine #9953 (James Tucker)
- d3bc575: cmd/tailscale/cli: set Sparkle auto-update on macsys (tailscale#9952) (Andrew Lytvynov) #9952
- f5a7551: cmd/tailscale: fix help message for serve funnel (Marwan Sulaiman) #9951
- 32194cd: ipn/ipnlocal: add new DNS and subnet router policies (Adrian Dewhurst) #9936
- 21b6d37: cmd/tailscale/cli: unhide auto-update flags and mark update as Beta (tailscale#9954) (Andrew Lytvynov) #9954
- e0a4a02: client/web: pipe Server.timeNow() through session funcs (Sonia Appasamy) #9926
- d79e0fd: client/web: split errTaggedSelf resp from getTailscaleBrowserSession (Sonia Appasamy) #9957
- a7e4ceb: cmd/tailscale/cli: refactor TestServeDevConfigMutations (Marwan Sulaiman) #9959
- 741d7bc: Revert "ipn/ipnlocal: add new DNS and subnet router policies" (tailscale#9962) (Andrea Gottardo) #9962
- 5f3cdaf: cmd/tailscale/cli: chage port flags to uint for serve and funnel (Marwan Sulaiman) #9960
- 143bda8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9900
- disable auto-updates on Synology for now (tailscale#9965) #9965 (Andrew Lytvynov)
- 19e5f24: net/portmapper: convert UPnP metrics to new syncs.Map.LoadOrInit method (Val) #9704
- 1873bc4: cmd/tailscale/cli: remove http flag for funnel command (tailscale#9955) (Tyler Smalley) #9955
- 131518e: cmd/tailscale/cli: improve error when bg serve config is present (tailscale#9961) (Tyler Smalley) #9961
- 237b4b5: .github/workflows: add checklocks (James Tucker) #9185
- ef596ae: net/portmapper: avoid alloc in getUPnPErrorsMetric (Andrew Dunham) #9974
- 95671b7: ipn, safesocket: use Windows token in LocalAPI (Aaron Klotz) #9049
- make clear which net.Conns are winio types #9983 (Brad Fitzpatrick)
- 42abf13: .github: run tests on all PRs, regardless of branch name (Will Norris) #9986
- baa1fd9: ipn/localapi: require local Windows admin to set serve path (tailscale#9969) (Tyler Smalley) #9969
- update tailscale{,d} licenses #9823 (License Updater)
- update android licenses #9942 (License Updater)
- 9107b5e: cmd/tailscale/cli: use status before doing interactive feature query (Maisem Ali) #9985
- drop unnecessary fileContents binding #9991 (Cole Helbling)
- set a default package #9991 (Cole Helbling)
- 9e71851: go.mod.sri: update (Cole Helbling) #9991
- fix systemd service by hardcoding $PORT #9991 (Cole Helbling)
- drop unnecessary git input #9991 (Cole Helbling)
- f9fafe2: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9982
- check for privileges earlier (tailscale#9964) #9964 (Chris Palmer)
- 387a98f: ipn/ipnlocal: exclude tvOS devices from taildrop file targets (tailscale#10002) (Rhea Ghosh) #10002
- 62d580f: util/linuxfw: add missing error checks in tests (Maisem Ali) #10005
- 31e1690: VERSION.txt: this is v1.52.0 (Tyler Smalley)
- 0338d13: illumos/solaris support rebased onto 1.50.0 (Nahum Shalman)