v1.58.0-sunos

Documentation

• add Windows administrative template #10721 (Adrian Dewhurst)

Commits

• 971fa8d: VERSION.txt: this is v1.57.0 (Sonia Appasamy) #10587
• bac4890: net/portmapper: be smarter about selecting a UPnP device (Andrew Dunham) #10489
• 727acf9: net/netcheck: use DERP frames as a signal for home region liveness (Andrew Dunham) #10528
• b62a3fc: client/web: keep redirects on-site (tailscale#10525) (Chris Palmer) #10525
• 1a08ea5: cmd/k8s-operator: operator can create subnetrouter (tailscale#9505) (Irbe Krumina) #9505
• 3ae5623: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham) #10601
• 685b853: wgengine/magicsock: fix handling of derp.PeerGoneMessage (tailscale#10589) (Jordan Whited) #10589
• c6a2746: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10603
• correct noun for nacl box type in disco docs #10608 (James Tucker)
• 3a635db: cmd/connector-gen: add helper tool for wide app connector configurations (James Tucker) #10609
• 3fb6ee7: tailscale/logtail: redact public ipv6 and ipv4 ip addresses within tailscaled. (tailscale#10531) (as2643) #10531
• dc2792a: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10598
• 38b4eb9: cmd/k8s-operator/deploy/chart: document passing multiple proxy tags + log level values (tailscale#10624) (Irbe Krumina) #10624
• d05a572: net/portmapper: handle multiple UPnP discovery responses (Andrew Dunham) #10623
• apply tailnet-wide default for auto-updates (tailscale#10508) #10508 (Andrew Lytvynov)
• a661287: util/cmpx: remove code that's in the stdlib now (Andrew Dunham) #10643
• 865ee25: cmd/tailscale/cli: update debug.go (tailscale#10644) (Gavin Greenwalt) #10644
• 0957258: appc,ipn: prevent undesirable route advertisements (James Tucker) #10649
• 5e3126f: tool/gocross: make all Windows DLLs build with static libgcc (Nick Khyl) #10621
• 03f22cd: client/tailscale: add Device.PostureIdentity field (Paul Scott) #10021
• 65f2d32: api.md: add device.postureIdentity field (Paul Scott) #10021
• 09136e5: net/netutil: add function to check rp_filter value (tailscale#5703) (Andrew Dunham) #5703
• remove use of reflect.MethodByName (tailscale#10652) #10652 (Andrew Lytvynov)
• 01286af: net/interfaces: better handle multiple interfaces in LikelyHomeRouterIP (Andrew Dunham) #10653
• f815d66: api.md: add docs for setting an IP address (David Crawshaw) #10650
• 3c333f6: net/portmapper: add logs about obtained mapping(s) (Andrew Dunham) #10663
• cleanup unused code, part 1 (tailscale#10661) #10661 (Andrew Lytvynov)
• remove ConnectionStrategy (tailscale#10662) #10662 (Andrew Lytvynov)
• c9836b4: net/netmon: fix goroutine leak in winMon if the monitor is never started (Nick Khyl) #10668
• cleanup unused code, part 2 (tailscale#10670) #10670 (Andrew Lytvynov)
• cae6edf: ipn/ipnlocal: fix data race with capForcedNetfilter field (Andrew Dunham) #10672
• 5812093: util/winutil: publicize existing functions for opening read-only connections to the Windows Service Control Manager (Aaron Klotz) #10678
• 5deeb56: cmd/tailscale/cli: document usage more clearly (tailscale#10681) (Chris Palmer) #10681
• add shebang to the debian postinst script #10717 (Anton Tolchanov)
• e72f2b7: go.{mod,sum}: bump mkctr (tailscale#10722) (Irbe Krumina) #10722
• 1406a9d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10723
• use syspolicy to override LogTarget #10720 (Adrian Dewhurst)
• use object-src instead of plugin-types (tailscale#10719) #10719 (Chris Palmer)
• b084888: wgengine/magicsock: fix typos in docs (tailscale#10729) (Jordan Whited) #10729
• fa36397: net/portmapper: check returned epoch from PMP and PCP protocols (Andrew Dunham) #10673
• e32a064: cmd/tailscaled: don't create a network monitor in the parent tailscaled on Windows (Aaron Klotz) #10733
• 5a2eb26: cmd/containerboot: ensure that subnet routes can be unset. (tailscale#10734) (Irbe Krumina) #10734
• 3a9450b: cmd/containerboot: don't parse empty subnet routes (tailscale#10738) (Irbe Krumina) #10738
• 10c595d: ipn/ipnlocal: refresh node key without blocking if cap enabled (tailscale#10529) (James 'zofrex' Sanderson) #10529
• d9aeb30: net/interfaces: handle iOS network transitions (tailscale#10680) (Andrea Gottardo) #10680
• 124dc10: controlclient,tailcfg,types: expose MaxKeyDuration via localapi (tailscale#10401) (James 'zofrex' Sanderson) #10401
• 29e98e1: ssh/tailssh: use a local error instead of gossh.ErrDenied (tailscale#10743) (Andrew Lytvynov) #10743
• 46bdbb3: cmd/tailscaled, tsnet: don't return an interface containing a nil pointer (Andrew Dunham) #10752
• aed2cfe: util/winutil: add some missing docs to restartmgr errors (Aaron Klotz) #10754
• d3574a3: cmd/tailscale, ipn/ipnlocal: add 'debug dial-types' command (Andrew Dunham) #10753
• Allow category Z unicode characters (tailscale#10750) #10750 (Rhea Ghosh)
• 35c3032: net/dns/resolver: add ID to verbose logs in forwarder (Andrew Dunham) #10751
• apply ControlURL policy before login #10765 (Adrian Dewhurst)
• 1336992: cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passing tailscaled config in a file (tailscale#10759) (Irbe Krumina) #10759
• 55d302b: client/web: rename Disconnect to Log out (Sonia Appasamy) #10756
• d96e0a5: tstest/integration: add tests for auto-update defaulting behavior (tailscale#10763) (Andrew Lytvynov) #10763
• update tailscale{,d} licenses #10520 (License Updater)
• update win/apple licenses #10476 (License Updater)
• 569b914: client/web: ensure path prefix has a leading slash (Will Norris) #10784
• 953fa80: cmd/{derper,stund},net/stunserver: add standalone stun server (James Tucker) #10757
• 05093ea: cmd/k8s-operator,k8s-operator: allow the operator to deploy exit nodes via Connector custom resource (tailscale#10724) (...

v1.56.1-sunos

Commits

• e9125c4: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10607
• 067b145: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham)
• f1ea316: VERSION.txt: this is v1.56.1 (Sonia Appasamy)
• c82e4a4: Merge tag 'v1.56.1' into sunos-1.56 (Nahum Shalman)

v1.56.0-sunos

Continuous Integration

• report test coverage to coveralls.io #10340 (Percy Wegmann)
• run 'go vet' in golangci-lint; fix errors in tests #10502 (Andrew Dunham)

Commits

• a40e918: VERSION.txt: this is v1.55.0 (Denton Gentry) #10257
• e33bc64: net/dnsfallback: add singleflight to recursive resolver (Andrew Dunham) #9992
• 303a1e8: cmd/tailscale: expose --webclient for all builds (Will Norris) #10258
• remove the preview-webclient node capability #10259 (Will Norris)
• 03e780e: client/web: disable the "disable" button when disabled (Will Norris) #10248
• 855f79f: cmd/tailscaled, util/winutil: changes to process and token APIs in winutil (Aaron Klotz) #10116
• 1ef5bd5: util/osdiag, util/winutil: expose Windows policy key (Adrian Dewhurst) #9934
• b8ac3c5: util/syspolicy: add some additional policy keys (Adrian Dewhurst) #10144
• fix DomainRoutes copy #10260 (James Tucker)
• d5c460e: client/{tailscale,web}: add initial webUI frontend for self-updates (tailscale#10191) (Naman Sood) #10191
• 6f7a1b5: ipn/ipnlocal: rename SetWebLocalClient to ConfigureWebClient (Sonia Appasamy) #10264
• 2dbd546: client/web: remove DebugMode from GET /api/data (Sonia Appasamy) #10266
• 7d4221c: cmd/tsidp: add start of OIDC Tailscale IdP (Maisem Ali) #10265
• 055394f: ipn/ipnlocal: add mutex to webClient struct (Sonia Appasamy) #10269
• 96ad9b6: client/web: remove legacy-client-view.tsx (Sonia Appasamy) #10270
• 5712920: cmd/tailscaled: make tun mode default on gokrazy (Maisem Ali) #10273
• 2ff54f9: wgengine/magicsock: move trustBestAddrUntil forward on non-disco rx (tailscale#10274) (Jordan Whited) #10274
• 3bd382f: wgengine/magicsock: add DERP homeless debug mode for testing (Brad Fitzpatrick) #10272
• d01fa85: client/web: allow login client to still run tailscale up (Will Norris) #10276
• 146c4ba: go.mod: update web-client-prebuilt module (OSS Updater) #10281
• a3c11b8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10268
• 33147c4: .github: build gocross using regular GOPROXY settings (Will Norris) #10282
• 4f40901: client/web: when readonly, add check for TS connection (Sonia Appasamy) #10275
• 90eb537: ipn/ipnlocal: log and don't return full file serve error (tailscale#10174) (Tyler Smalley) #10174
• add option to run integrated web client #10283 (Will Norris)
• 7238586: client/web: fix margins on login popover (Sonia Appasamy) #10285
• 664ebb1: cmd/containerboot: fix unclean shutdown (tailscale#10035) (Irbe Krumina) #10035
• cca27ef: ipn/ipnlocal: add c2n method to check on TLS cert fetch status (Brad Fitzpatrick) #10291
• don't report a warning in DERP homeless mode #10293 (Brad Fitzpatrick)
• bd534b9: {client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint (Sonia Appasamy) #10295
• 719ee44: ssh/tailssh: use control server time instead of local time (Ox Cart) #10255
• b8a2aed: util/syspolicy: add caching handler (tailscale#10288) (Claire Wang) #10288
• fb829ea: control/controlclient: support incremental packet filter updates [capver 81] (Brad Fitzpatrick) #10300
• 980f1f2: client/web: hide unimplemented links (Sonia Appasamy) #10302
• 28684b0: cmd/tailscale/cli: correct app connector help text in set (James Tucker) #10303
• f880c77: client/web: split login from nodeUpdate (Will Norris) #10297
• update tailscale{,d} licenses #10155 (License Updater)
• update win/apple licenses #10194 (License Updater)
• update android licenses #10201 (License Updater)
• e75be01: client/web: add exit node selector (Sonia Appasamy) #10262
• 2dc0645: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman) #10298
• 38ea8f8: client/web: add Inter font (Sonia Appasamy) #10287
• 3402998: go.mod: update web-client-prebuilt module (OSS Updater) #10305
• f0613ab: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10306
• 42dc843: client/web: add advanced login options (Will Norris) #10309
• fc8488f: go.mod: update web-client-prebuilt module (OSS Updater) #10310
• e7cad78: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10311
• b88929e: Fix potential goroutine leak in syncs/watchdog.go (Uri Gorelik) #10314
• c4855fe: Fix Empty Resolver Set (Ryan Petris) #10317
• fd22145: cmd/tailscale/cli: make 'debug watch-ipn' play nice with jq (David Anderson) #10322
• f867392: cmd/tailscale/cli: add debug function to print the netmap (David Anderson) #10323
• update android licenses #10324 (License Updater)
• 4f80f40: cmd/k8s-operator: fix chart syntax error (tailscale#10333) (Irbe Krumina) #10333
• dd8bc9b: cmd/k8s-operator: log user/group impersonated by apiserver proxy (tailscale#10334) (Irbe Krumina) #10334
• 2c1f14d: util/set: implement json.Marshaler/Unmarshaler (tailscale#10308) (Andrew Lytvynov) #10308
• 6647171: cmd/k8s-operator: truncate long StatefulSet name prefixes (tailscale#10343) (Irbe Krumina) #10343
• fixup version embedding (tailscale#9997) #9997 (Cole Helbling)
• e1d0d26: go.mod: bump wireguard-go (tailscale#10352) (Jordan Whited) #10352
• 128d3ad: cmd/k8s-operator: helm chart add missing keys (tailscale#10296) (Gabriel Martinez) #10296
• Add TS_ACCEPT_ROUTES (tailscale#10176) #10176 (Claire Wang)
• 5aa7687: util/httpm: don't run test if .git doesn't exist (Andrew Dunham) #10363
• 1af7f5b: wgengine/magicsock: fix typo in Conn.handlePingLocked() (tailscale#10365) (Jordan Whited) #10365
• 611e0a5: appc,ipn/local: support wildcard when matching app-connectors (Tom DNetto) #10364
• crikey! what a beauty of a list #10367 ([Charlotte Brandhorst-Satzkorn](9e63b...

v1.54.1-sunos

Commits

• 7acf781: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman)
• 864484b: Revert "ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile" (Denton Gentry)
• b709a72: ipn/ipnlocal: update hostinfo when app connector state is toggled (Tom DNetto)
• b78b245: VERSION.txt: this is v1.54.1 (Tyler Smalley)
• 5355f31: Merge tag 'v1.54.1' into sunos-1.54 (Nahum Shalman)

v1.54.0-sunos

Builds

• deps: bump @babel/traverse from 7.22.10 to 7.23.2 in /client/web #66,#9822 (dependabot[bot])
• deps: bump get-func-name from 2.0.0 to 2.0.2 in /client/web #66,#9565 (dependabot[bot])
• deps-dev: bump postcss from 8.4.27 to 8.4.31 in /client/web #66,#9708 (dependabot[bot])
• deps: bump github.com/docker/docker #66,#10017 (dependabot[bot])

Commits

• fde2ba5: VERSION.txt: this is v1.53.0 (tailscale#10018) (Tyler Smalley) #66,#10018
• ed1b935: cmd/k8s-operator: allow to install operator via helm (tailscale#9920) (Irbe Krumina) #66,#9920
• download helm CLI (tailscale#9981) #66,#9981 (Irbe Krumina)
• enable use-cases with non-native IPs by setting ns.ProcessSubnets #66,#9958 (Tom DNetto)
• 57c5b5a: net/dns/recursive: update IP for b.root-servers.net (Andrew Dunham) #66,#9998
• 95715c4: ipn/localapi: add endpoint to handle APNS payloads (tailscale#9972) (Andrea Gottardo) #66,#9972
• 93aa8a8: client/web: allow providing logger implementation (Sonia Appasamy) #66,#10028
• 89953b0: ipn/ipnlocal,client/web: add web client to tailscaled (Sonia Appasamy) #66,#10028
• 6f214de: client/web: split out UI components (Sonia Appasamy) #66,#10028
• dd842d4: go.mod: update wireguard-go to enable TUN UDP GSO/GRO (tailscale#10029) (Jordan Whited) #66,#10029
• add user pref for running web client #66,#9987 (Will Norris)
• serve web client requests from LocalBackend #66,#9987 (Will Norris)
• 0d86eb9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #66,#10030
• a7c80c3: cmd/sniproxy: implement support for control configuration, multiple addresses (Tom DNetto) #66,#9892
• df4b730: types/appctype: define the nodeAttrs type for dns-driven app connectors (Tom DNetto) #66,#10032
• 3d7fb6c: derp/derphttp: fix race in mesh watcher (Brad Fitzpatrick) #66,#9977
• 3114a1c: derp/derphttp: add watch reconnection tests from tailscale#9719 (Anton Tolchanov) #66,#9977
• 4417565: ipn/ipnlocal: rename web fields/structs to webClient (Sonia Appasamy) #66,#10034
• mention release track when running latest (tailscale#10039) #66,#10039 (Andrew Lytvynov)
• 00375f5: util/set: add some more Set operations (tailscale#10022) (Chris Palmer) #66,#10022
• bd488e4: go.mod: update wireguard-go (tailscale#10046) (Jordan Whited) #66,#10046
• replace web client debug flag with node capability #66,#10033 (Will Norris)
• c331313: derp/derphttp: close DERP client to avoid data race in test (Anton Tolchanov) #66,#10042
• d601c81: wgengine/netstack: use netip.Prefix as map keys (Maisem Ali) #66,#9950
• eaf8aa6: wgengine/netstack: remove unnecessary map in UpdateNetstackIPs (Maisem Ali) #66,#9950
• d0f2c06: wgengine/netstack: standardize var names in UpdateNetstackIPs (Maisem Ali) #66,#9950
• c2b87fc: cmd/k8s-operator/deploy/chart,.github/workflows: use helm chart API v2 (tailscale#10055) (Irbe Krumina) #66,#10055
• disable on Unraid (tailscale#10048) #66,#10048 (Derek Kaser)
• 3a9f5c0: util/set: make Clone a method (tailscale#10044) (Chris Palmer) #66,#10044
• 32ebc03: client/web: move session logic to auth.go (Sonia Appasamy) #66,#10060
• 09fcbae: net/dnscache: remove completed TODO (James Tucker) #66,#9999
• introduce app connector advertisement preference and flags #66,#9989 (James Tucker)
• 970eb5e: cmd/k8s-operator: sanitize connection headers (tailscale#10063) (Rhea Ghosh) #66,#10063
• 237c6c4: client/web: call /api/auth before rendering any client views (Will Norris) #66,#10062
• 0ee4573: ipn/ipnlocal: fix small typo (James Tucker) #66,#10065
• 3786320: cmd/k8s-operator: strip credentials from client config in noauth mode (David Anderson) #66,#10067
• fix a couple of logic simplification lints #66,#10066 (James Tucker)
• clarify how to run update as Administrator on Windows (tailscale#10043) #66,#10043 (Andrew Lytvynov)
• b1a0caf: .github: Bump actions/checkout from 3 to 4 (dependabot[bot]) #66,#10016
• e5fbe57: web/client: update synology token from /api/auth call (Will Norris) #66,#10068
• 7a725bb: client/web: move more session logic to auth.go (Sonia Appasamy) #66,#10069
• e7482f0: ipn/ipnlocal: prevent deadlock on WebClientShutdown (Will Norris) #66,#10073
• b48b7d8: appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when...

v1.52.1-sunos

Commits

• 2855ad9: cmd/tailscaled: pre-load wintun.dll using a fully-qualified path (Aaron Klotz)
• cleanup SPK and MSI downloads (tailscale#10085) (Andrew Lytvynov)
• do not recursively delete dirs in cleanupOldDownloads (tailscale#10093) (Andrew Lytvynov)
• 16c59d2: VERSION.txt: this is v1.52.1 (Tyler Smalley)
• 79be16d: Merge tag 'v1.52.1' into sunos-1.52 (Nahum Shalman)

v1.52.0-sunos

Commits

• update win/apple licenses #9519 (License Updater)
• 098d110: VERSION.txt: this is v1.51.0 (Aaron Klotz) #9532
• 530aaa5: net/dns: retry forwarder requests over TCP (Andrew Dunham) #9288
• 6516206: ipn/ipnlocal: close foreground sessions on SetServeConfig (Marwan Sulaiman) #9447
• bdd9eec: cmd/k8s-operator: fix reconcile filters (tailscale#9533) (Irbe Krumina) #9533
• 578b357: wgengine/netstack: use buffer pools for UDP packet forwarding (Val) #9518
• c608660: wgengine,net,ipn,disco: split up and define different types of MTU (Val) #9518
• refactor methods to get values from registry to also return (tailscale#9536) #9536 (Claire Wang)
• 0275afa: ipn/ipnlocal: prevent putting file if file already exists (tailscale#9515) (Rhea Ghosh) #9515
• 3e298e9: go.toolchain.rev: bump go (Brad Fitzpatrick) #9541
• d31460f: net/portmapper: fix invalid UPnP metric name (Andrew Dunham) #9552
• 697f92f: client/web: refactor serveGetNodeData (Sonia Appasamy) #9556
• 2066f9f: util/linuxfw: fix crash in DelSNATRule when no rules are found (James Tucker) #9557
• 80206b5: wgengine/magicsock: add nodeid to panic condition on public key reuse (James Tucker) #9560
• ca43961: types/key: update some doc strings for public key serialization (James Tucker) #9561
• 5c2b2fa: ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes (James Tucker) #9498
• use NodeCapMap in CheckFunnel #9567 (Maisem Ali)
• 5d62b17: client/web: add login client mode to web.Server (Sonia Appasamy) #9311
• 2c0f0ee: tool/gocross: disable Linux static linking if GOCROSS_STATIC=0 (Brad Fitzpatrick) #9571
• 5b3f5ea: control/controlclient: fix leaked http2 goroutines on shutdown (Brad Fitzpatrick) #9572
• 5429ee2: client/web: add debug mode for web client ui updates (Sonia Appasamy) #9562
• 2c92f94: cmd/testwrapper: output machine-readable JSON on test flakes (Brad Fitzpatrick) #9575
• b5b4298: go.mod,*: bump gvisor (Andrea Barisani) #9252
• f50b2a8: wgengine/netstack: refactor address construction and conversion (Andrea Barisani) #9252
• 2a7b3ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9576
• 856d32b: cmd/testwrapper: include flake URL in JSON metadata (Brad Fitzpatrick) #9582
• 4823a7e: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry) #9573
• add a test for restarting a tsnet server, fix Windows #9588 (Brad Fitzpatrick)
• d71184d: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali) #9590
• add syspolicy package (tailscale#9550) #9550 (Claire Wang)
• aae1a28: go.mod: add test that replace directives aren't added in oss (Brad Fitzpatrick) #9594
• 71f2c67: go.mod: bump wingoes for cross-platform HRESULT definition (James Tucker) #9595
• 87bc831: go.mod,cmd/tsconnect: bump esbuild (James Tucker) #9578
• 84acf83: go.mod,net/dnsfallback: bump go4.org/netipx (James Tucker) #9578
• 0c8c374: go.mod: bump all dependencies except go-billy (James Tucker) #9578
• 8833dc5: util/set: add some useful utility functions for Set (tailscale#9535) (Chris Palmer) #9535
• update tailscale{,d} licenses #9577 (License Updater)
• 16fa3c2: wgengine/magicsock: use x/sys/unix constants for UDP GSO (tailscale#9597) (Jordan Whited) #9597
• gonna take some time to add the words we never had #9598 (Charlotte Brandhorst-Satzkorn)
• 41b05e6: go.mod: bump wireguard-go (James Tucker) #9563
• i can't help but rave about these additions #9599 (Charlotte Brandhorst-Satzkorn)
• ee90cd0: cmd/cloner,*: optimize nillable slice cloner (James Tucker) #9601
• 324f0d5: cmd/cloner,*: revert: optimize nillable slice cloner (James Tucker) #9603
• a56e58c: util/syspolicy: add read boolean setting (tailscale#9592) (Claire Wang) #9592
• e03f0d5: net/dnsfallback: remove net/dnsfallback go:generate line (James Tucker) #9602
• ab810f1: cmd/cloner: add regression test for slice nil/empty semantics (James Tucker) #9604
• d2ea9bb: cmd/cloner: fix typo in test type's name (Brad Fitzpatrick) #9606
• 72e5374: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9596
• 5f5c914: util/slicesx: add EqualSameNil, like slices.Equal but same nilness (Brad Fitzpatrick) #9609
• 425cf9a: tailcfg, all: use []netip.AddrPort instead of []string for Endpoints (Brad Fitzpatrick) #9610
• 67926ed: wgengine/magicsock: add MTU to addrLatency and rename to addrQuality (Val) #9486
• 4130851: wgengine/magicsock: probe but don't use path MTU from CLI ping (Val) #9486
• c26d91d: net/tstun: remove unused function DefaultMTU() (Val) #9621
• 656a77a: net/packet: implement methods for rewriting v6 addresses (Tom DNetto) #9542
• update tailscale{,d} licenses #9600 (License Updater)
• update win/apple licenses #9587 (License Updater)
• 73e53dc: cmd/tailscale,ipn/ipnlocal: print debug component names (Val) #9628
• b775a37: util/httpm, all: add a test to make sure httpm is used consistently (Brad Fitzpatrick) #9635
• efac2cb: tool/gocross: merge user's build tags and implicitly added build tags together (Brad Fitzpatrick) #9639
• eb22c0d: wgengine/magicsock: use binary.NativeEndian for UDP GSO control data (tailscale#9640) (Jordan Whited) #9640
• 286c6ce: net/dns/resolver: race UDP and TCP queries (tailscale#9544) (Andrew Dunham) #9544
• 5902d51: util/race: add test to confirm we don't leak goroutines (Andrew Dunham) #9641
• 3655fb3: control/controlclient: fix deadlock in shutdown (Maisem Ali) #9646
• 730cdfc: Revert "tool/gocross: disable Linux static linking if GOCROSS_STATIC=0" (Brad Fitzpatrick) #9648
• 91b9899: net/dns/resolver: fix flaky test (Andrew Dunham) #9647
• 93c6e1d: tstest/deptest: add check that x/exp/{maps,slices} imported as xfoo (Brad Fitzpatrick) #9650
• e499a6b: release/dist/unixpkgs: revert iptables move to Recommends, make it Depends (Brad Fitzpatrick) [tailscale#9656]...

v1.50.1-sunos

Commits

• 027b455: net/portmapper: fix invalid UPnP metric name (Andrew Dunham)
• use NodeCapMap in CheckFunnel (Maisem Ali)
• d9e8f6b: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry)
• 95e1c84: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali)
• 8749388: VERSION.txt: this is v1.50.1 (Denton Gentry)
• 596cf05: Merge tag 'v1.50.1' into sunos-1.50 (Nahum Shalman)

v1.50.0-sunos

Commits

• remove wasm file, no-op stubs, make OS-specific funcs consistent #9059 (Brad Fitzpatrick)
• 5b6a90f: types/logger, cmd/tailscale/cli: flesh out, simplify some non-unix build tags (Brad Fitzpatrick) #9060
• 7825074: .github: fix flakehub-publish-tagged.yml glob (tailscale#9066) (shayne) #9066
• 46b0c91: .github: update flakehub workflow to support existing tags (tailscale#9067) (shayne) #9067
• 824cd02: client/web: cache csrf key when running in CGI mode (Will Norris) #9055
• 349c05d: client/web: refresh on tab focus (Sonia Appasamy) #9069
• 5fb1695: util/osdiag, util/osdiag/internal/wsc: add code to probe the Windows Security Center for installed software (Aaron Klotz) #8997
• d45af7c: release/dist/cli: add sign-key and verify-key-signature commands (tailscale#9041) (Andrew Lytvynov) #9041
• a61a9ab: cmd/containerboot: reapply known args on restart (Maisem Ali) #9073
• ff7f4b4: cmd/testwrapper: fix off-by-one error in maxAttempts check (Maisem Ali) #9078
• 05486f0: client/web: move synology and qnap logic into separate files (Will Norris) #9075
• 0c3d343: client/web: invert auth logic for synology and qnap (Will Norris) #9075
• dc8287a: client/web: enforce full path for CGI platforms (Will Norris) #9075
• b42c4e2: cmd/dist,release/dist: add distsign signing hooks (tailscale#9070) (Andrew Lytvynov) #9070
• remove Arch support (tailscale#9081) #9081 (Andrew Lytvynov)
• f3077c6: client/web: add self node cache (Sonia Appasamy) #9077
• de9ba1c: clientupdate/distsign/roots: add temporary dev root key (tailscale#9080) (Andrew Lytvynov) #9080
• adjust some build tags for plan9 #9082 (Brad Fitzpatrick)
• 24d41e4: cmd/sniproxy: add port forwarding and prometheus metrics (Denton Gentry) #8979
• 12ac672: cmd/k8s-operator: handle changes to services w/o teardown (Maisem Ali) #9076
• 320f77b: cmd/containerboot: add support for setting ServeConfig (Maisem Ali) #9074
• c8dea67: cmd/k8s-operator: add support for Ingress resources (Maisem Ali) #9048
• 535db01: scripts/installer: add Kaisen, Garuda, Fedora-Asahi. (Denton Gentry) #9061
• 6b6a8cf: util/osdiag: add query for Windows page file configuration and status (Aaron Klotz) #9091
• check for key-based debug access before XFF check (tailscale#9093) #9093 (Dave Anderson)
• 4828e4c: client/web: move api handler into web.go (Sonia Appasamy) #8826
• ce5909d: release/dist: remove extra Close on a signed file (tailscale#9094) (Andrew Lytvynov) #9094
• 9430481: cmd/containerboot: account for k8s secret reflection in fsnotify (Maisem Ali) #9095
• e80ba4c: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9019
• fe91160: flake.nix: use Go 1.21 to build tailscale flake (David Anderson) #9101
• b407fde: flake.nix: use Go 1.21 to build tailscale, for real this time (David Anderson) #9102
• e7d1538: types/views: add SliceEqual, like std slices.Equal (Brad Fitzpatrick) #9105
• 4af22f3: util/deephash: add IncludeFields, ExcludeFields HasherForType Options (Brad Fitzpatrick) #9104
• ce4bf41: cmd/k8s-operator: support being the default loadbalancer controller (Mike Beaumont) #8922
• 3451b89: cmd/k8s-operator: put Tailscale IPs in Service ingress status (Mike Beaumont) #8817
• c86a610: cmd/tailscale, net/portmapper: add --log-http option to "debug portmap" (Andrew Dunham) #8998
• 18d9c92: release/dist/cli: add verify-package-signature command (tailscale#9110) (Andrew Lytvynov) #9110
• be5bd1e: client/web: skip authorization checks for static assets (Will Norris) #9083
• d74c771: client/web: always use new web client; remove old client (Will Norris) #9083
• 346dc5f: ipn/ipnlocal: move C2NUpdateResponse to c2ntypes.go (tailscale#9112) (Chris Palmer) #9112
• fcbb2bf: net/memnet: export the network name (tailscale#9111) (Joe Tsai) #9111
• f92e6a1: cmd/k8s-operator: update RBAC to allow creating events (Maisem Ali) #9116
• 0c6fe94: cmd/k8s-operator: add matching family addresses to status (Maisem Ali) #9117
• download SPK and MSI packages with distsign (tailscale#9115) #9115 (Andrew Lytvynov)
• use SPKsVersion instead of Version (tailscale#9118) #9118 (Andrew Lytvynov)
• a79b1d2: control/controlclient: convert PeersChanged nodes to patches internally (Brad Fitzpatrick) #9021
• 590c693: types/logger: add AsJSON (Brad Fitzpatrick) #9119
• a64593d: types/logger: fix test failure I missed earlier (Brad Fitzpatrick) #9124
• 55bb731: control/controlclient: replace a status func with Observer interface (Brad Fitzpatrick) #9120
• 8ba07aa: ipn/iplocale: remove unused argument to shouldUseOneCGNATRoute (Val) #9127
• 3bce963: derp/derphttp: fix data race and crash in proxy dial error path (Brad Fitzpatrick) #9133
• 6b882a1: control/controlclient: clean up a few little things (Brad Fitzpatrick) #9125
• 7aea219: client/web: pull SynoToken logic into apiFetch (Sonia Appasamy) #9136
• 6dfa403: cmd/tailscaled: default to userspace-networking on plan9 (Brad Fitzpatrick) #9138
• 11ece02: net/{interfaces,netmon}: remove "interesting", EqualFiltered API (Brad Fitzpatrick) #9100
• 930e6f6: types/opt: use switch in Bool.UnmarshalJSON (tailscale#9140) (Joe Tsai) #9140
• c919ff5: cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating (Maisem Ali) #9139
• da6eb07: client/web: add localapi proxy (Sonia Appasamy) #9097
• 1cd03bc: client/web: remove self node on server (Sonia Appasamy) #9142
• e952564: client/web: pipe unraid csrf token through apiFetch (Sonia Appasamy) #9143
• 8b492b4: net/wsconn: accept a remote addr string and plumb it through (David Anderson) #9146
• detect when tailscale is installed without package manager (tailscale#9137) #9137 (Andrew Lytvynov)
• 7538f38: cmd/containerboot: fix broken tests (Maisem Ali) #9147
• b90b9b4: client/web: fix data race (Maisem Ali) #9151
• ae747a2: cmd/testwrapper: handle timeouts as test failures (Maisem Ali) #9149
• fe709c8: cmd/k8s-operator,cmd/containerboot: add kube egress proxy (tailscale#9031) (Irbe Krumina) #9031
• 29a35d4: cmd/sniproxy: switch to peterbourgon/ff for flags (Denton Gentry) #9148
• 17438a9: cm/k8s-operator,cmd/contain...

v1.48.2-sunos

Commits

• 7a1205d: wgengine/magicsock: clear endpoint state in noteConnectivityChange (James Tucker) #9350
• 572b0a4: wgengine/magicsock: update lastfullping comment to include wg only (Charlotte Brandhorst-Satzkorn) #9350
• 8b36386: wgengine/magicsock: clear out endpoint statistics when it becomes bad (James Tucker) #9350
• ffd89ac: wgengine/magicsock: improve endpoint selection for WireGuard peers with rx time (James Tucker) #9350
• ab970fe: VERSION.txt: this is v1.48.2 (James Tucker)
• 386046f: Merge tag 'v1.48.2' into sunos-1.48 (Nahum Shalman)