v1.56.0-sunos

Continuous Integration

• report test coverage to coveralls.io #10340 (Percy Wegmann)
• run 'go vet' in golangci-lint; fix errors in tests #10502 (Andrew Dunham)

Commits

• a40e918: VERSION.txt: this is v1.55.0 (Denton Gentry) #10257
• e33bc64: net/dnsfallback: add singleflight to recursive resolver (Andrew Dunham) #9992
• 303a1e8: cmd/tailscale: expose --webclient for all builds (Will Norris) #10258
• remove the preview-webclient node capability #10259 (Will Norris)
• 03e780e: client/web: disable the "disable" button when disabled (Will Norris) #10248
• 855f79f: cmd/tailscaled, util/winutil: changes to process and token APIs in winutil (Aaron Klotz) #10116
• 1ef5bd5: util/osdiag, util/winutil: expose Windows policy key (Adrian Dewhurst) #9934
• b8ac3c5: util/syspolicy: add some additional policy keys (Adrian Dewhurst) #10144
• fix DomainRoutes copy #10260 (James Tucker)
• d5c460e: client/{tailscale,web}: add initial webUI frontend for self-updates (tailscale#10191) (Naman Sood) #10191
• 6f7a1b5: ipn/ipnlocal: rename SetWebLocalClient to ConfigureWebClient (Sonia Appasamy) #10264
• 2dbd546: client/web: remove DebugMode from GET /api/data (Sonia Appasamy) #10266
• 7d4221c: cmd/tsidp: add start of OIDC Tailscale IdP (Maisem Ali) #10265
• 055394f: ipn/ipnlocal: add mutex to webClient struct (Sonia Appasamy) #10269
• 96ad9b6: client/web: remove legacy-client-view.tsx (Sonia Appasamy) #10270
• 5712920: cmd/tailscaled: make tun mode default on gokrazy (Maisem Ali) #10273
• 2ff54f9: wgengine/magicsock: move trustBestAddrUntil forward on non-disco rx (tailscale#10274) (Jordan Whited) #10274
• 3bd382f: wgengine/magicsock: add DERP homeless debug mode for testing (Brad Fitzpatrick) #10272
• d01fa85: client/web: allow login client to still run tailscale up (Will Norris) #10276
• 146c4ba: go.mod: update web-client-prebuilt module (OSS Updater) #10281
• a3c11b8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10268
• 33147c4: .github: build gocross using regular GOPROXY settings (Will Norris) #10282
• 4f40901: client/web: when readonly, add check for TS connection (Sonia Appasamy) #10275
• 90eb537: ipn/ipnlocal: log and don't return full file serve error (tailscale#10174) (Tyler Smalley) #10174
• add option to run integrated web client #10283 (Will Norris)
• 7238586: client/web: fix margins on login popover (Sonia Appasamy) #10285
• 664ebb1: cmd/containerboot: fix unclean shutdown (tailscale#10035) (Irbe Krumina) #10035
• cca27ef: ipn/ipnlocal: add c2n method to check on TLS cert fetch status (Brad Fitzpatrick) #10291
• don't report a warning in DERP homeless mode #10293 (Brad Fitzpatrick)
• bd534b9: {client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint (Sonia Appasamy) #10295
• 719ee44: ssh/tailssh: use control server time instead of local time (Ox Cart) #10255
• b8a2aed: util/syspolicy: add caching handler (tailscale#10288) (Claire Wang) #10288
• fb829ea: control/controlclient: support incremental packet filter updates [capver 81] (Brad Fitzpatrick) #10300
• 980f1f2: client/web: hide unimplemented links (Sonia Appasamy) #10302
• 28684b0: cmd/tailscale/cli: correct app connector help text in set (James Tucker) #10303
• f880c77: client/web: split login from nodeUpdate (Will Norris) #10297
• update tailscale{,d} licenses #10155 (License Updater)
• update win/apple licenses #10194 (License Updater)
• update android licenses #10201 (License Updater)
• e75be01: client/web: add exit node selector (Sonia Appasamy) #10262
• 2dc0645: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman) #10298
• 38ea8f8: client/web: add Inter font (Sonia Appasamy) #10287
• 3402998: go.mod: update web-client-prebuilt module (OSS Updater) #10305
• f0613ab: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10306
• 42dc843: client/web: add advanced login options (Will Norris) #10309
• fc8488f: go.mod: update web-client-prebuilt module (OSS Updater) #10310
• e7cad78: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10311
• b88929e: Fix potential goroutine leak in syncs/watchdog.go (Uri Gorelik) #10314
• c4855fe: Fix Empty Resolver Set (Ryan Petris) #10317
• fd22145: cmd/tailscale/cli: make 'debug watch-ipn' play nice with jq (David Anderson) #10322
• f867392: cmd/tailscale/cli: add debug function to print the netmap (David Anderson) #10323
• update android licenses #10324 (License Updater)
• 4f80f40: cmd/k8s-operator: fix chart syntax error (tailscale#10333) (Irbe Krumina) #10333
• dd8bc9b: cmd/k8s-operator: log user/group impersonated by apiserver proxy (tailscale#10334) (Irbe Krumina) #10334
• 2c1f14d: util/set: implement json.Marshaler/Unmarshaler (tailscale#10308) (Andrew Lytvynov) #10308
• 6647171: cmd/k8s-operator: truncate long StatefulSet name prefixes (tailscale#10343) (Irbe Krumina) #10343
• fixup version embedding (tailscale#9997) #9997 (Cole Helbling)
• e1d0d26: go.mod: bump wireguard-go (tailscale#10352) (Jordan Whited) #10352
• 128d3ad: cmd/k8s-operator: helm chart add missing keys (tailscale#10296) (Gabriel Martinez) #10296
• Add TS_ACCEPT_ROUTES (tailscale#10176) #10176 (Claire Wang)
• 5aa7687: util/httpm: don't run test if .git doesn't exist (Andrew Dunham) #10363
• 1af7f5b: wgengine/magicsock: fix typo in Conn.handlePingLocked() (tailscale#10365) (Jordan Whited) #10365
• 611e0a5: appc,ipn/local: support wildcard when matching app-connectors (Tom DNetto) #10364
• crikey! what a beauty of a list #10367 (Charlotte Brandhorst-Satzkorn)
• 6b395f6: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10347
• 2a01df9: flake.nix: use vendorHash instead of vendorSha256 (David Anderson) #10372
• 18ceb4e: cmd/{containerboot,k8s-operator}: allow users to define tailnet egress target by FQDN (tailscale#10360) (Irbe Krumina) #10360
• d5d84f1: cmd/tailscale: also warn about IP forwarding if using CLI set (Jenny Zhang) #10378
• b247435: client/web: scroll exit node dropdown to top on search (Sonia Appasamy) #10392
• add CapturePcap method for debugging #10377 (Denton Gentry)
• clarify field comment #10376 (Jenny Zhang)
• 5f40b8a: scripts/check_license_headers: enforce license on ts/tsx files (Sonia Appasamy) #10403
• 5e861c3: wgengine/netstack: disable RACK on Windows (tailscale#10402) (Jordan Whited) #10402
• implement update for Unraid (tailscale#10344) #10344 (Andrew Lytvynov)
• 6e30c9d: client/web: add eslint (Sonia Appasamy) #10409
• 8a660a6: ipn/ipnlocal: update hostinfo when app connector state is toggled (Tom DNetto) #10410
• ab0e25b: client/web: fix Vite dev server build error (Sonia Appasamy) #10412
• 26db977: client/web: skip check mode for non-tailscale.com control servers (tailscale#10413) (Will Norris) #10413
• ac4b416: cmd/tailscale,ipn/ipnlocal: pass available update as health message (tailscale#10420) (Andrew Lytvynov) #10420
• bc4e303: ipn/ipnstate: add AllowedIPs to PeerStatus (Sonia Appasamy) #10416
• 7aa981b: client/web: remove duplicate WhoIs call (Sonia Appasamy) #10421
• ecd1ccb: client/web: add subnet routes view (Sonia Appasamy) #10394
• add exit node related policies (tailscale#10172) #10172 (Claire Wang)
• bcc9b44: client/web: hide admin panel links for non-tailscale control servers (Sonia Appasamy) #10423
• cbd0b60: client/web: remove ControlAdminURL override (Sonia Appasamy) #10426
• c27aa9e: net/dns: fix darwin dns resolver files (Juergen Knaack) #10382
• propagate RequestID via context and entire request #10411 (Marwan Sulaiman)
• cleanup tailscale binary copies on Windows (tailscale#10433) #10433 (Andrew Lytvynov)
• db39a43: util/winutil: add support for restarting Windows processes in specific sessions (Aaron Klotz) #10354
• b155c7a: client/web: move postcss config into package.json (Sonia Appasamy) #10417
• 7d61b82: client/web: adjust colors and some UI margins (Sonia Appasamy) #10439
• 7a4ba60: client/web: show features based on platform support (Sonia Appasamy) #10432
• f13255d: go.mod: update web-client-prebuilt module (OSS Updater) #10442
• 5e12575: client/web: center and fix height of header (Sonia Appasamy) #10445
• f9550e0: client/web: indicate if ACLs prevent access (Will Norris) #10427
• 2003d11: go.mod: update certstore (Adrian Dewhurst) #10448
• c855322: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10444
• 263e01c: wgengine/filter: add protocol-agnostic packet checker (tailscale#10446) (Andrew Lytvynov) #10446
• 49fd0a6: cmd/k8s-operator: generate static kube manifests from the Helm chart. (tailscale#10436) (Irbe Krumina) #10436
• 64a26b2: net/dns: use an additional registry setting to disable dynamic DNS updates for our interface on Windows (Aaron Klotz) #10441
• 95e9d22: client/web: button, link, and other small UI updates (Sonia Appasamy) #10457
• b144391: client/web: add cancel button to subnet router input section (Sonia Appasamy) #10458
• f5989f3: client/web: handle offline exit nodes (Will Norris) #10456
• 65643f6: client/web: update device and connected icon (Sonia Appasamy) #10459
• 9441a4e: client/web: render 404 message in empty card (Will Norris) #10460
• 9c4b73d: client/web: handle login client inside an iframe (Will Norris) #10461
• 6b083a8: client/web: add metric logging logic to the web client (tailscale#10434) (Mario Minardi) #10434
• c4ccdd1: net/interfaces: ensure we return valid 'self' IP in LikelyHomeRouterIP (Andrew Dunham) #10467
• c5208f8: client/web: small tweaks for small screens (Will Norris) #10463
• fix nilness issues #10468 (Matt Layher)
• update tailscale{,d} licenses #10307 (License Updater)
• update win/apple licenses #10353 (License Updater)
• 94a64c0: util/syspolicy: rename incorrectly named policy keys (Adrian Dewhurst) #10469
• 215f657: wgengine/router: create netfilter runner in setNetfilterMode (James Tucker) #10443
• 0a59754: linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter (Naman Sood) #10443
• bump CapabilityVersion for Linux netfilter NodeAttrs and c2n endpoint #10443 (Naman Sood)
• a95b3cb: client/web: add copyable components throughout UI (Sonia Appasamy) #10470
• 47db67f: util/syspolicy: add policy counters (tailscale#10471) (Claire Wang) #10471
• aad5fb2: go.toolchain.rev: bump to 1.21.5 (tailscale#10475) (Andrew Lytvynov) #10475
• d46a4ec: util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (tailscale#10370) (Naman Sood) #10370
• 137e9f4: net/portmap: add test of Mikrotik Root Desc XML. (Denton Gentry) #10452
• 4a24db8: client/web: use IPv4 instead of IP in login view (tailscale#10483) (Mario Minardi) #10483
• cc6729a: .github/workflows: add webclient workflow (Sonia Appasamy) #10484
• a54a4f7: client/web: add licenses and policies links (Sonia Appasamy) #10473
• ac6f671: ipn/localapi: use clientupdate.CanAutoUpdate from serveUpdateCheck (Sonia Appasamy) #10485
• af32d1c: ipn/ipnlocal: better enforce system policies (Adrian Dewhurst) #10108
• 2731a9d: client/web: fix exit node selector styling (Sonia Appasamy) #10488
• 1a4d423: ipn/ipnlocal: add additional syspolicy enforcement (Adrian Dewhurst) #10490
• 014ae98: client/web: style tweaks (Sonia Appasamy) #10491
• 9565540: client/web: start using swr for some fetching (Sonia Appasamy) #10477
• 97f8420: wgengine/router: implement UpdateMagicsockPort for CallbackRouter (tailscale#10494) (Naman Sood) #10494
• f5f21c2: client/web: add additional web client metrics logging (tailscale#10462) (Mario Minardi) #10462
• ef4f1e3: client/web: add loading state to app (Sonia Appasamy) #10497
• f706a3a: ipn/ipnlocal, util/syspolicy: add auto update policy (Adrian Dewhurst) #10503
• 9fd29f1: util/cache: add package for general-purpose caching (Andrew Dunham) #8906
• 97f8577: client/web: restructure api mutations into hook (Sonia Appasamy) #10495
• e5e5ebd: client/web: precompress assets (Sonia Appasamy) #10501
• d5d42d0: client/web: small UI cleanups (Sonia Appasamy) #10509
• 646d17a: util/syspolicy: rename client metric keys (tailscale#10516) (Andrea Gottardo) #10516
• remove TS_NOLAUNCH and GUI restart hacks from autoupdate #10515 (Aaron Klotz)
• 6389322: go.mod: update web-client-prebuilt module (OSS Updater) #10517
• 2f01d5e: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10519
• e25f114: ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (tailscale#10507) (Andrew Lytvynov) #10507
• ddb4b51: client/web: always run platform auth for login mode (Sonia Appasamy) #10522
• 7bdea28: cmd/containerboot: symlink TS_SOCKET to socket expected by CLI (Maisem Ali) #10518
• 21958d2: client/web: add logging of device management type for web client (tailscale#10492) (Mario Minardi) #10492
• 86aa048: ipn/ipnlocal, util/syspolicy: make run exit node a preference option (Adrian Dewhurst) #10523
• 7c172df: client/web: fix 500 error after logout (Sonia Appasamy) #10527
• c2319f0: client/web: fix serveAPIAuth in Login mode (Sonia Appasamy) #10530
• 33de922: client/web: only enforce path prefix in CGI mode (Will Norris) #10535
• 261b6f1: client/web: limit updates ui to unstable builds (Sonia Appasamy) #10534
• c615fe2: client/web: add security attributes on session cookie (Will Norris) #10521
• 69b5646: client/web: check content-type on PATCH requests (Will Norris) #10536
• a4c7b05: client/web: add confirmation dialogs (Sonia Appasamy) #10537
• 5a2e6a6: client/web: use Home Assistant's X-Ingress-Path header (Will Norris) #10538
• update android licenses #10533 (License Updater)
• 1b1b6bb: ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (tailscale#10543) (Irbe Krumina) #10543
• add explicit Track to Arguments (tailscale#10548) #10548 (Andrew Lytvynov)
• 109929d: client/web: add endpoint for logging device detail click metric (tailscale#10505) (Mario Minardi) #10505
• c2fe123: cmd/tailscaled: update ConfigureWebClient's UseSocketOnly value (Sonia Appasamy) #10551
• 970dc2a: client/web: remove 'unsafe-inline' from CSP (Will Norris) #10552
• 501478d: go.mod: update web-client-prebuilt module (OSS Updater) #10553
• e9f203d: client/web: open new window if iframed (Will Norris) #10556
• 763b9da: client/web: add visual indication for exit node pending approval (tailscale#10532) (Mario Minardi) #10532
• 4e01279: client/web: add metric logging when viewing local / remote node (tailscale#10555) (Mario Minardi) #10555
• fb63203: cmd/k8s-operator: drop https:// in capName (Maisem Ali) #10557
• 3aa6468: cmd/tailscale/cli: add whois subcommand (Maisem Ali) #10550
• fc69301: client/web: don't show login button if /ok errors (Will Norris) #10559
• bc9b9e8: client/web: restrict using an exit node on a couple more platforms (Sonia Appasamy) #10560
• d2fbdb0: client/web: use CSP hash for inline javascript (Will Norris) #10561
• 0cdc8e2: util/linuxfw: return created chain (tailscale#10563) (Irbe Krumina) #10563
• 1aee6e9: client/web: use prefs.ControlURLOrDefault from controlSupportsCheckMode (Sonia Appasamy) #10565
• 552b1ad: go.mod: update web-client-prebuilt module (OSS Updater) #10566
• 1b7d289: client/web: add debug card to details page (Will Norris) #10567
• 343f4e4: client/web: refresh auth after syno login (Sonia Appasamy) #10568
• 8c2fcef: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10554
• dd0279a: client/web: fix ts connection check (Sonia Appasamy) #10571
• afe138f: go.mod: update web-client-prebuilt module (OSS Updater) #10569
• 808f19b: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10574
• 06af3e3: client/web: only add cache header for assets (Sonia Appasamy) #10573
• 77f5d66: client/web: fix key expiry text when expiry disabled (Sonia Appasamy) #10575
• some stellar additions #10578 (Charlotte Brandhorst-Satzkorn)
• be19262: go.mod: update web-client-prebuilt module (OSS Updater) #10577
• 3ba5fd4: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10579
• affe11c: net/netcheck: only run HTTP netcheck for tamago clients (Andrea Barisani) #10369
• log HTTP response body on failure #10570 (Anton Tolchanov)
• 4fb679d: client/web: fix redirect logic when accessing login client over TS IP (Sonia Appasamy) #10582
• e78cb9a: go.mod: update web-client-prebuilt module (OSS Updater) #10583
• e00141c: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10584
• f51793b: VERSION.txt: this is v1.56.0 (Sonia Appasamy)
• d67165b: illumos/solaris support rebased onto 1.56.0 (Nahum Shalman)
• stub out UpdateMagicsockPort (Nahum Shalman)