v1.60.0-sunos

Builds

• deps-dev: bump vite from 4.4.9 to 4.5.2 in /client/web #10903 (dependabot[bot])

Commits

• 38a1cf7: control/controlclient,util/execqueue: extract execqueue into a package (James Tucker) #10883
• 8250582: ipn/ipnlocal: make app connector configuration concurrent (James Tucker) #10882
• 2aec4f2: ./github/workflows/kubemanifests.yaml: fix the paths whose changes should trigger test runs (tailscale#10885) (Irbe Krumina) #10885
• 2ac7c01: util/slicesx: add Filter function (Andrew Dunham) #10893
• 2ce596e: cmd/k8s-operator/deploy: allow modifying operator tags via Helm values (ChandonPierre) #10874
• 832e5c7: util/nocasemaps: add AppendSliceElem method to nocasemaps (tailscale#10871) (as2643) #10871
• 7a0392a: wgengine/netstack: expose gVisor metrics through expvar (Andrew Dunham) #10899
• 457102d: go.mod: bump most deps for start of cycle (James Tucker) #10901
• 5b4eb47: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10904
• 62b056d: VERSION.txt: this is v1.59.0 (tailscale#10884) (kari-ts) #10884
• mute noisy expected peer mtu related error (tailscale#10870) #10870 (Claire Wang)
• add a helper to validate redirect URLs #10897 (David Anderson)
• 17eae5b: tool/gocross: force use of our custom toolchain (David Anderson) #10906
• 7e3bcd2: go.mod,wgengine/netstack: bump gvisor (James Tucker) #10900
• b787c27: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10908
• 4e822c0: go.toolchain.rev: bump Tailscale Go version to 1.21.6 (James Tucker) #10907
• b45089a: net/portmapper: handle cases where we have no supported clients (Andrew Dunham) #10922
• 370ec6b: cmd/k8s-operator: don't proceed with Ingress that has no valid backends (tailscale#10919) (Irbe Krumina) #10919
• ce4553b: appc,ipn/ipnlocal: optimize preference adjustments when routes update (Charlotte Brandhorst-Satzkorn) #10930
• add test to ensure that individual IPs are not removed during route updates #10929 (James Tucker)
• 8b47322: wgengine/magicsock: implement probing of UDP path lifetime (tailscale#10844) (Jordan Whited) #10844
• 6ee9563: ipn/ipnlocal: fix proxy path that matches mount point (tailscale#10864) (Irbe Krumina) #10864
• 75f1d3e: ipn/ipnlocal: fix failing test (tailscale#10937) (Irbe Krumina) #10937
• fd94d96: net/portmapper: support legacy "urn:dslforum-org" portmapping services (Andrew Dunham) #10927
• 0f3b2e7: util/expvarx: add a time and concurrency limiting expvar.Func wrapper (James Tucker) #10946
• fbfc3b7: cmd/tailscale/cli: run Watch with NotifyNoPrivateKeys (tailscale#10950) (Andrew Lytvynov) #10950
• i like the direction this list is taking #10960 (Charlotte Brandhorst-Satzkorn)
• 13f8a66: cmd/gitops-pusher: fix logic for checking credentials (Will Norris) #10970
• 9744ad4: cmd/hello: avoid deprecated apis (tailscale#10957) (Chris Palmer) #10957
• log failure to get ssh host keys #10980 (Percy Wegmann)
• b4b2ec7: ipn/ipnlocal: fix pretty printing of multi-record peer DNS results (James Tucker) #10997
• 2aeef4e: util/deephash: implement SelfHasher to allow types to hash themselves (Tom DNetto) #10998
• e1a4b89: appc,ipn/ipnlocal: add app connector routes if any part of a CNAME chain is routed (James Tucker) #10996
• ba70cbb: ipn/ipnlocal: fix app connector route advertisements on exit nodes (James Tucker) #11000
• 84f8311: util/deephash: document pathological deephash behavior (tailscale#11010) (Joe Tsai) #11010
• 60657ac: util/deephash: tighten up SelfHasher API (tailscale#11012) (Joe Tsai) #11012
• a633a30: cmd/hello: link to the Hello KB article (tailscale#11022) (Chris Palmer) #11022
• 5595b61: ipn/localapi: more http status cleanup (tailscale#10995) (kari-ts) #10995
• b752bde: types/views: add SliceMapKey[T] (Maisem Ali) #11044
• implementing bucketed statistics for started/finished counts #11048 (Tom DNetto)
• replace domains/emails in paths when bucketing stats #11056 (Tom DNetto)
• db3776d: go.toolchain.rev: bump to Go 1.22.0 (tailscale#11055) (Andrew Lytvynov) #11055
• optimize dns response observation for large route tables #11047 (James Tucker)
• 0b16620: .github/workflows: add privileged tests workflow (James Tucker) #9870
• add a list of things you should yahoo! #6398 (James Tucker)
• normalize common StableID's in bucketed stats, export as LabelMap #11060 (Tom DNetto)
• normalize passkey identities in bucketed stats #11061 (Tom DNetto)
• b6153ef: go.mod, README.md: use Go 1.22 (Brad Fitzpatrick) #11059
• 9612001: .github/workflows: update golangci-lint for Go 1.22 (Brad Fitzpatrick) #11059
• use Go 1.22 #11059 (Brad Fitzpatrick)
• 2bd3c14: util/cmpx: delete now that we're using Go 1.22 (Brad Fitzpatrick) #11059
• c424e19: .github/workflows: temporarily disable broken oss-fuzz action (Brad Fitzpatrick) #11059
• 2404b14: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11066
• a6cc2fd: cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying cluster traffic to a cluster target via ingress proxy (tailscale#11036) (Irbe Krumina) #11036
• update tailscale{,d} licenses #10905 (License Updater)
• update android licenses #10902 (License Updater)
• update win/apple licenses #10876 (License Updater)
• 128c99d: client/web: add new readonly mode (Will Norris) #10999
• 6f0c5e0: client/web: use smart quotes in web UI frontend (Will Norris) #11070
• 664b861: go.mod: update web-client-prebuilt module (OSS Updater) #11071
• 1217f65: cmd/dist: update logs for synology builds (Sonia Appasamy) #11062
• force-regen new authURL when it is too old (tailscale#10971) #10971 (Andrea Gottardo)
• 0f042b9: cmd/tailscale/cli: fix exit node status output (tailscale#11076) (Charlotte Brandhorst-Satzkorn) #11076
• efddad7: util/deephash: cleanup TODO in TestHash (tailscale#11080) (Joe Tsai) #11080
• use reflect.TypeFor now available in Go 1.22 (tailscale#11078) #11078 (Joe Tsai)
• use new AppendEncode methods available in Go 1.22 (tailscale#11079) #11079 (Joe Tsai)
• initial implementation #10631 (Percy Wegmann)
• c446451: cmd/gitops-pusher: only use OAuth creds if non-empty string (Jenny Zhang) #11025
• update ServeMux matching to 1.22.0 syntax (tailscale#11087) #11087 (Patrick O'Doherty)
• 7c52b27: Revert "tsweb: update ServeMux matching to 1.22.0 syntax (tailscale#11087)" (tailscale#11089) (Patrick O'Doherty) #11089
• 7039c06: fix toolchain not available error (tailscale#11083) (Keisuke Umegaki) #11083
• 6f6383f: .github: fuzzing is now unbroken (Andrew Dunham) #11091
• 2bb837a: client/web: only check policy caps for tagged nodes (Sonia Appasamy) #11092
• 24bac27: util/rands: add Shuffle and Perm functions with on-stack RNG state (James Tucker) #11046
• clean up naming and package structure #11086 (Percy Wegmann)
• disable TailFSForLocal via policy #11086 (Percy Wegmann)
• fix startup issues on windows #11095 (Percy Wegmann)
• revert to using pointers for subcommands #11101 (Percy Wegmann)
• c1c50cf: util/cloudenv: add support for DigitalOcean (Andrew Dunham) #11094
• remove UserProfile.Groups #11106 (Maisem Ali)
• 58b8f78: flake.nix: build tailscale with go 1.22 (David Anderson) #11109
• d0ef3a2: cmd/tailscale: hide share subcommand (Percy Wegmann) #11118
• listen for local clients only on 100.100.100.100 #11108 (Percy Wegmann)
• f7f4960: types/views: add test that LenIter doesn't allocate (Brad Fitzpatrick) #11120
• 5bd19fd: cmd/k8s-operator,k8s-operator: proxy configuration mechanism via a new ProxyClass custom resource (tailscale#11074) (Irbe Krumina) #11074
• update ServeMux matching to 1.22.0 syntax (tailscale#11090) #11090 (Patrick O'Doherty)
• f7acbef: wgengine/router: make the Windows ifconfig implementation reuse existing MibIPforwardRow2 when possible (Aaron Klotz) #11124
• 256ecd0: Revert "tsweb: update ServeMux matching to 1.22.0 syntax (tailscale#11090)" (tailscale#11125) (Patrick O'Doherty) #11125
• f4e3ee5: VERSION.txt: this is v1.60.0 (Percy Wegmann)
• 4dd8a00: illumos/solaris support rebased onto 1.60.0 (Nahum Shalman)