v1.60.0-sunos

Builds

• deps-dev: bump vite from 4.4.9 to 4.5.2 in /client/web #10903 (dependabot[bot])

Commits

• 38a1cf7: control/controlclient,util/execqueue: extract execqueue into a package (James Tucker) #10883
• 8250582: ipn/ipnlocal: make app connector configuration concurrent (James Tucker) #10882
• 2aec4f2: ./github/workflows/kubemanifests.yaml: fix the paths whose changes should trigger test runs (tailscale#10885) (Irbe Krumina) #10885
• 2ac7c01: util/slicesx: add Filter function (Andrew Dunham) #10893
• 2ce596e: cmd/k8s-operator/deploy: allow modifying operator tags via Helm values (ChandonPierre) #10874
• 832e5c7: util/nocasemaps: add AppendSliceElem method to nocasemaps (tailscale#10871) (as2643) #10871
• 7a0392a: wgengine/netstack: expose gVisor metrics through expvar (Andrew Dunham) #10899
• 457102d: go.mod: bump most deps for start of cycle (James Tucker) #10901
• 5b4eb47: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10904
• 62b056d: VERSION.txt: this is v1.59.0 (tailscale#10884) (kari-ts) #10884
• mute noisy expected peer mtu related error (tailscale#10870) #10870 (Claire Wang)
• add a helper to validate redirect URLs #10897 (David Anderson)
• 17eae5b: tool/gocross: force use of our custom toolchain (David Anderson) #10906
• 7e3bcd2: go.mod,wgengine/netstack: bump gvisor (James Tucker) #10900
• b787c27: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10908
• 4e822c0: go.toolchain.rev: bump Tailscale Go version to 1.21.6 (James Tucker) #10907
• b45089a: net/portmapper: handle cases where we have no supported clients (Andrew Dunham) #10922
• 370ec6b: cmd/k8s-operator: don't proceed with Ingress that has no valid backends (tailscale#10919) (Irbe Krumina) #10919
• ce4553b: appc,ipn/ipnlocal: optimize preference adjustments when routes update (Charlotte Brandhorst-Satzkorn) #10930
• add test to ensure that individual IPs are not removed during route updates #10929 (James Tucker)
• 8b47322: wgengine/magicsock: implement probing of UDP path lifetime (tailscale#10844) (Jordan Whited) #10844
• 6ee9563: ipn/ipnlocal: fix proxy path that matches mount point (tailscale#10864) (Irbe Krumina) #10864
• 75f1d3e: ipn/ipnlocal: fix failing test (tailscale#10937) (Irbe Krumina) #10937
• fd94d96: net/portmapper: support legacy "urn:dslforum-org" portmapping services (Andrew Dunham) #10927
• 0f3b2e7: util/expvarx: add a time and concurrency limiting expvar.Func wrapper (James Tucker) #10946
• fbfc3b7: cmd/tailscale/cli: run Watch with NotifyNoPrivateKeys (tailscale#10950) (Andrew Lytvynov) #10950
• i like the direction this list is taking #10960 (Charlotte Brandhorst-Satzkorn)
• 13f8a66: cmd/gitops-pusher: fix logic for checking credentials (Will Norris) #10970
• 9744ad4: cmd/hello: avoid deprecated apis (tailscale#10957) (Chris Palmer) #10957
• log failure to get ssh host keys #10980 (Percy Wegmann)
• b4b2ec7: ipn/ipnlocal: fix pretty printing of multi-record peer DNS results (James Tucker) #10997
• 2aeef4e: util/deephash: implement SelfHasher to allow types to hash themselves (Tom DNetto) #10998
• e1a4b89: appc,ipn/ipnlocal: add app connector routes if any part of a CNAME chain is routed (James Tucker) #10996
• ba70cbb: ipn/ipnlocal: fix app connector route advertisements on exit nodes (James Tucker) #11000
• 84f8311: util/deephash: document pathological deephash behavior (tailscale#11010) (Joe Tsai) #11010
• 60657ac: util/deephash: tighten up SelfHasher API (tailscale#11012) (Joe Tsai) #11012
• a633a30: cmd/hello: link to the Hello KB article (tailscale#11022) (Chris Palmer) #11022
• 5595b61: ipn/localapi: more http status cleanup (tailscale#10995) (kari-ts) #10995
• b752bde: types/views: add SliceMapKey[T] (Maisem Ali) #11044
• implementing bucketed statistics for started/finished counts #11048 (Tom DNetto)
• replace domains/emails in paths when bucketing stats #11056 (Tom DNetto)
• db3776d: go.toolchain.rev: bump to Go 1.22.0 (tailscale#11055) (Andrew Lytvynov) #11055
• optimize dns response observation for large route tables #11047 (James Tucker)
• 0b16620: .github/workflows: add privileged tests workflow (James Tucker) #9870
• add a list of things you should yahoo! #6398 (James Tucker)
• normalize common StableID's in bucketed stats, export as LabelMap #11060 (Tom DNetto)
• normalize passkey identities in bucketed stats #11061 (Tom DNetto)
• b6153ef: go.mod, README.md: use Go 1.22 (Brad Fitzpatrick) #11059
• 9612001: .github/workflows: update golangci-lint for Go 1.22 (Brad Fitzpatrick) #11059
• use Go 1.22 #11059 (Brad Fitzpatrick)
• 2bd3c14: util/cmpx: delete now that we're using Go 1.22 (Brad Fitzpatrick) #11059
• c424e19: .github/workflows: temporarily disable broken oss-fuzz action (Brad Fitzpatrick) #11059
• 2404b14: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11066
• a6cc2fd: cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying cluster traffic to a cluster target via ingress proxy (tailscale#11036) (Irbe Krumina) #11036
• update tailscale{,d} licenses #10905 (License Updater)
• update android licenses #10902 (License Updater)
• update win/apple licenses #10876 (License Updater)
• 128c99d: client/web: add new readonly mode (Will Norris) #10999
• 6f0c5e0: client/web: use smart quotes in web UI frontend (Will Norris) #11070
• 664b861: go.mod: update web-client-prebuilt module (OSS Updater) #11071
• 1217f65: cmd/dist: update logs for synology builds (Sonia Appasamy) [tailscale#11062](https://github.com/tailsca...

v1.58.2-sunos

Commits

• 36e3c41: control/controlclient,util/execqueue: extract execqueue into a package (James Tucker)
• d304bdc: ipn/ipnlocal: make app connector configuration concurrent (James Tucker)
• 8ffcd9a: appc,ipn/ipnlocal: optimize preference adjustments when routes update (Charlotte Brandhorst-Satzkorn)
• add test to ensure that individual IPs are not removed during route updates (James Tucker)
• 916de26: VERSION.txt: this is v1.58.1 (kari-ts)
• 80b20dc: net/portmapper: handle cases where we have no supported clients (Andrew Dunham)
• b0e1bbb: VERSION.txt: this is v1.58.2 (kari-ts)
• fab1c7e: Merge tag 'v1.58.2' into sunos-1.58 (Nahum Shalman)

v1.58.0-sunos

Documentation

• add Windows administrative template #10721 (Adrian Dewhurst)

Commits

• 971fa8d: VERSION.txt: this is v1.57.0 (Sonia Appasamy) #10587
• bac4890: net/portmapper: be smarter about selecting a UPnP device (Andrew Dunham) #10489
• 727acf9: net/netcheck: use DERP frames as a signal for home region liveness (Andrew Dunham) #10528
• b62a3fc: client/web: keep redirects on-site (tailscale#10525) (Chris Palmer) #10525
• 1a08ea5: cmd/k8s-operator: operator can create subnetrouter (tailscale#9505) (Irbe Krumina) #9505
• 3ae5623: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham) #10601
• 685b853: wgengine/magicsock: fix handling of derp.PeerGoneMessage (tailscale#10589) (Jordan Whited) #10589
• c6a2746: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10603
• correct noun for nacl box type in disco docs #10608 (James Tucker)
• 3a635db: cmd/connector-gen: add helper tool for wide app connector configurations (James Tucker) #10609
• 3fb6ee7: tailscale/logtail: redact public ipv6 and ipv4 ip addresses within tailscaled. (tailscale#10531) (as2643) #10531
• dc2792a: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10598
• 38b4eb9: cmd/k8s-operator/deploy/chart: document passing multiple proxy tags + log level values (tailscale#10624) (Irbe Krumina) #10624
• d05a572: net/portmapper: handle multiple UPnP discovery responses (Andrew Dunham) #10623
• apply tailnet-wide default for auto-updates (tailscale#10508) #10508 (Andrew Lytvynov)
• a661287: util/cmpx: remove code that's in the stdlib now (Andrew Dunham) #10643
• 865ee25: cmd/tailscale/cli: update debug.go (tailscale#10644) (Gavin Greenwalt) #10644
• 0957258: appc,ipn: prevent undesirable route advertisements (James Tucker) #10649
• 5e3126f: tool/gocross: make all Windows DLLs build with static libgcc (Nick Khyl) #10621
• 03f22cd: client/tailscale: add Device.PostureIdentity field (Paul Scott) #10021
• 65f2d32: api.md: add device.postureIdentity field (Paul Scott) #10021
• 09136e5: net/netutil: add function to check rp_filter value (tailscale#5703) (Andrew Dunham) #5703
• remove use of reflect.MethodByName (tailscale#10652) #10652 (Andrew Lytvynov)
• 01286af: net/interfaces: better handle multiple interfaces in LikelyHomeRouterIP (Andrew Dunham) #10653
• f815d66: api.md: add docs for setting an IP address (David Crawshaw) #10650
• 3c333f6: net/portmapper: add logs about obtained mapping(s) (Andrew Dunham) #10663
• cleanup unused code, part 1 (tailscale#10661) #10661 (Andrew Lytvynov)
• remove ConnectionStrategy (tailscale#10662) #10662 (Andrew Lytvynov)
• c9836b4: net/netmon: fix goroutine leak in winMon if the monitor is never started (Nick Khyl) #10668
• cleanup unused code, part 2 (tailscale#10670) #10670 (Andrew Lytvynov)
• cae6edf: ipn/ipnlocal: fix data race with capForcedNetfilter field (Andrew Dunham) #10672
• 5812093: util/winutil: publicize existing functions for opening read-only connections to the Windows Service Control Manager (Aaron Klotz) #10678
• 5deeb56: cmd/tailscale/cli: document usage more clearly (tailscale#10681) (Chris Palmer) #10681
• add shebang to the debian postinst script #10717 (Anton Tolchanov)
• e72f2b7: go.{mod,sum}: bump mkctr (tailscale#10722) (Irbe Krumina) #10722
• 1406a9d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10723
• use syspolicy to override LogTarget #10720 (Adrian Dewhurst)
• use object-src instead of plugin-types (tailscale#10719) #10719 (Chris Palmer)
• b084888: wgengine/magicsock: fix typos in docs (tailscale#10729) (Jordan Whited) #10729
• fa36397: net/portmapper: check returned epoch from PMP and PCP protocols (Andrew Dunham) #10673
• e32a064: cmd/tailscaled: don't create a network monitor in the parent tailscaled on Windows (Aaron Klotz) #10733
• 5a2eb26: cmd/containerboot: ensure that subnet routes can be unset. (tailscale#10734) (Irbe Krumina) #10734
• 3a9450b: cmd/containerboot: don't parse empty subnet routes (tailscale#10738) (Irbe Krumina) #10738
• 10c595d: ipn/ipnlocal: refresh node key without blocking if cap enabled (tailscale#10529) (James 'zofrex' Sanderson) #10529
• d9aeb30: net/interfaces: handle iOS network transitions (tailscale#10680) (Andrea Gottardo) #10680
• 124dc10: controlclient,tailcfg,types: expose MaxKeyDuration via localapi (tailscale#10401) (James 'zofrex' Sanderson) #10401
• 29e98e1: ssh/tailssh: use a local error instead of gossh.ErrDenied (tailscale#10743) (Andrew Lytvynov) #10743
• 46bdbb3: cmd/tailscaled, tsnet: don't return an interface containing a nil pointer (Andrew Dunham) #10752
• aed2cfe: util/winutil: add some missing docs to restartmgr errors (Aaron Klotz) #10754
• d3574a3: cmd/tailscale, ipn/ipnlocal: add 'debug dial-types' command (Andrew Dunham) #10753
• Allow category Z unicode characters (tailscale#10750) #10750 (Rhea Ghosh)
• 35c3032: net/dns/resolver: add ID to verbose logs in forwarder (Andrew Dunham) #10751
• apply ControlURL policy before login #10765 (Adrian Dewhurst)
• 1336992: cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passing tailscaled config in a file (tailscale#10759) (Irbe Krumina) #10759
• 55d302b: client/web: rename Disconnect to Log out (Sonia Appasamy) #10756
• d96e0a5: tstest/integration: add tests for auto-update defaulting behavior (tailscale#10763) (Andrew Lytvynov) #10763
• update tailscale{,d} licenses #10520 (License Updater)
• update win/apple licenses #10476 (License Updater)
• 569b914: client/web: ensure path prefix has a leading slash (Will Norris) #10784
• 953fa80: cmd/{derper,stund},net/stunserver: add standalone stun server (James Tucker) #10757
• 05093ea: cmd/k8s-operator,k8s-operator: allow the operator to deploy exit nodes via Connector custom resource (tailscale#10724) (...

v1.56.1-sunos

Commits

• e9125c4: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10607
• 067b145: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham)
• f1ea316: VERSION.txt: this is v1.56.1 (Sonia Appasamy)
• c82e4a4: Merge tag 'v1.56.1' into sunos-1.56 (Nahum Shalman)

v1.56.0-sunos

Continuous Integration

• report test coverage to coveralls.io #10340 (Percy Wegmann)
• run 'go vet' in golangci-lint; fix errors in tests #10502 (Andrew Dunham)

Commits

• a40e918: VERSION.txt: this is v1.55.0 (Denton Gentry) #10257
• e33bc64: net/dnsfallback: add singleflight to recursive resolver (Andrew Dunham) #9992
• 303a1e8: cmd/tailscale: expose --webclient for all builds (Will Norris) #10258
• remove the preview-webclient node capability #10259 (Will Norris)
• 03e780e: client/web: disable the "disable" button when disabled (Will Norris) #10248
• 855f79f: cmd/tailscaled, util/winutil: changes to process and token APIs in winutil (Aaron Klotz) #10116
• 1ef5bd5: util/osdiag, util/winutil: expose Windows policy key (Adrian Dewhurst) #9934
• b8ac3c5: util/syspolicy: add some additional policy keys (Adrian Dewhurst) #10144
• fix DomainRoutes copy #10260 (James Tucker)
• d5c460e: client/{tailscale,web}: add initial webUI frontend for self-updates (tailscale#10191) (Naman Sood) #10191
• 6f7a1b5: ipn/ipnlocal: rename SetWebLocalClient to ConfigureWebClient (Sonia Appasamy) #10264
• 2dbd546: client/web: remove DebugMode from GET /api/data (Sonia Appasamy) #10266
• 7d4221c: cmd/tsidp: add start of OIDC Tailscale IdP (Maisem Ali) #10265
• 055394f: ipn/ipnlocal: add mutex to webClient struct (Sonia Appasamy) #10269
• 96ad9b6: client/web: remove legacy-client-view.tsx (Sonia Appasamy) #10270
• 5712920: cmd/tailscaled: make tun mode default on gokrazy (Maisem Ali) #10273
• 2ff54f9: wgengine/magicsock: move trustBestAddrUntil forward on non-disco rx (tailscale#10274) (Jordan Whited) #10274
• 3bd382f: wgengine/magicsock: add DERP homeless debug mode for testing (Brad Fitzpatrick) #10272
• d01fa85: client/web: allow login client to still run tailscale up (Will Norris) #10276
• 146c4ba: go.mod: update web-client-prebuilt module (OSS Updater) #10281
• a3c11b8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10268
• 33147c4: .github: build gocross using regular GOPROXY settings (Will Norris) #10282
• 4f40901: client/web: when readonly, add check for TS connection (Sonia Appasamy) #10275
• 90eb537: ipn/ipnlocal: log and don't return full file serve error (tailscale#10174) (Tyler Smalley) #10174
• add option to run integrated web client #10283 (Will Norris)
• 7238586: client/web: fix margins on login popover (Sonia Appasamy) #10285
• 664ebb1: cmd/containerboot: fix unclean shutdown (tailscale#10035) (Irbe Krumina) #10035
• cca27ef: ipn/ipnlocal: add c2n method to check on TLS cert fetch status (Brad Fitzpatrick) #10291
• don't report a warning in DERP homeless mode #10293 (Brad Fitzpatrick)
• bd534b9: {client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint (Sonia Appasamy) #10295
• 719ee44: ssh/tailssh: use control server time instead of local time (Ox Cart) #10255
• b8a2aed: util/syspolicy: add caching handler (tailscale#10288) (Claire Wang) #10288
• fb829ea: control/controlclient: support incremental packet filter updates [capver 81] (Brad Fitzpatrick) #10300
• 980f1f2: client/web: hide unimplemented links (Sonia Appasamy) #10302
• 28684b0: cmd/tailscale/cli: correct app connector help text in set (James Tucker) #10303
• f880c77: client/web: split login from nodeUpdate (Will Norris) #10297
• update tailscale{,d} licenses #10155 (License Updater)
• update win/apple licenses #10194 (License Updater)
• update android licenses #10201 (License Updater)
• e75be01: client/web: add exit node selector (Sonia Appasamy) #10262
• 2dc0645: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman) #10298
• 38ea8f8: client/web: add Inter font (Sonia Appasamy) #10287
• 3402998: go.mod: update web-client-prebuilt module (OSS Updater) #10305
• f0613ab: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10306
• 42dc843: client/web: add advanced login options (Will Norris) #10309
• fc8488f: go.mod: update web-client-prebuilt module (OSS Updater) #10310
• e7cad78: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10311
• b88929e: Fix potential goroutine leak in syncs/watchdog.go (Uri Gorelik) #10314
• c4855fe: Fix Empty Resolver Set (Ryan Petris) #10317
• fd22145: cmd/tailscale/cli: make 'debug watch-ipn' play nice with jq (David Anderson) #10322
• f867392: cmd/tailscale/cli: add debug function to print the netmap (David Anderson) #10323
• update android licenses #10324 (License Updater)
• 4f80f40: cmd/k8s-operator: fix chart syntax error (tailscale#10333) (Irbe Krumina) #10333
• dd8bc9b: cmd/k8s-operator: log user/group impersonated by apiserver proxy (tailscale#10334) (Irbe Krumina) #10334
• 2c1f14d: util/set: implement json.Marshaler/Unmarshaler (tailscale#10308) (Andrew Lytvynov) #10308
• 6647171: cmd/k8s-operator: truncate long StatefulSet name prefixes (tailscale#10343) (Irbe Krumina) #10343
• fixup version embedding (tailscale#9997) #9997 (Cole Helbling)
• e1d0d26: go.mod: bump wireguard-go (tailscale#10352) (Jordan Whited) #10352
• 128d3ad: cmd/k8s-operator: helm chart add missing keys (tailscale#10296) (Gabriel Martinez) #10296
• Add TS_ACCEPT_ROUTES (tailscale#10176) #10176 (Claire Wang)
• 5aa7687: util/httpm: don't run test if .git doesn't exist (Andrew Dunham) #10363
• 1af7f5b: wgengine/magicsock: fix typo in Conn.handlePingLocked() (tailscale#10365) (Jordan Whited) #10365
• 611e0a5: appc,ipn/local: support wildcard when matching app-connectors (Tom DNetto) #10364
• crikey! what a beauty of a list #10367 ([Charlotte Brandhorst-Satzkorn](9e63b...

v1.54.1-sunos

Commits

• 7acf781: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman)
• 864484b: Revert "ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile" (Denton Gentry)
• b709a72: ipn/ipnlocal: update hostinfo when app connector state is toggled (Tom DNetto)
• b78b245: VERSION.txt: this is v1.54.1 (Tyler Smalley)
• 5355f31: Merge tag 'v1.54.1' into sunos-1.54 (Nahum Shalman)

v1.54.0-sunos

Builds

• deps: bump @babel/traverse from 7.22.10 to 7.23.2 in /client/web #66,#9822 (dependabot[bot])
• deps: bump get-func-name from 2.0.0 to 2.0.2 in /client/web #66,#9565 (dependabot[bot])
• deps-dev: bump postcss from 8.4.27 to 8.4.31 in /client/web #66,#9708 (dependabot[bot])
• deps: bump github.com/docker/docker #66,#10017 (dependabot[bot])

Commits

• fde2ba5: VERSION.txt: this is v1.53.0 (tailscale#10018) (Tyler Smalley) #66,#10018
• ed1b935: cmd/k8s-operator: allow to install operator via helm (tailscale#9920) (Irbe Krumina) #66,#9920
• download helm CLI (tailscale#9981) #66,#9981 (Irbe Krumina)
• enable use-cases with non-native IPs by setting ns.ProcessSubnets #66,#9958 (Tom DNetto)
• 57c5b5a: net/dns/recursive: update IP for b.root-servers.net (Andrew Dunham) #66,#9998
• 95715c4: ipn/localapi: add endpoint to handle APNS payloads (tailscale#9972) (Andrea Gottardo) #66,#9972
• 93aa8a8: client/web: allow providing logger implementation (Sonia Appasamy) #66,#10028
• 89953b0: ipn/ipnlocal,client/web: add web client to tailscaled (Sonia Appasamy) #66,#10028
• 6f214de: client/web: split out UI components (Sonia Appasamy) #66,#10028
• dd842d4: go.mod: update wireguard-go to enable TUN UDP GSO/GRO (tailscale#10029) (Jordan Whited) #66,#10029
• add user pref for running web client #66,#9987 (Will Norris)
• serve web client requests from LocalBackend #66,#9987 (Will Norris)
• 0d86eb9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #66,#10030
• a7c80c3: cmd/sniproxy: implement support for control configuration, multiple addresses (Tom DNetto) #66,#9892
• df4b730: types/appctype: define the nodeAttrs type for dns-driven app connectors (Tom DNetto) #66,#10032
• 3d7fb6c: derp/derphttp: fix race in mesh watcher (Brad Fitzpatrick) #66,#9977
• 3114a1c: derp/derphttp: add watch reconnection tests from tailscale#9719 (Anton Tolchanov) #66,#9977
• 4417565: ipn/ipnlocal: rename web fields/structs to webClient (Sonia Appasamy) #66,#10034
• mention release track when running latest (tailscale#10039) #66,#10039 (Andrew Lytvynov)
• 00375f5: util/set: add some more Set operations (tailscale#10022) (Chris Palmer) #66,#10022
• bd488e4: go.mod: update wireguard-go (tailscale#10046) (Jordan Whited) #66,#10046
• replace web client debug flag with node capability #66,#10033 (Will Norris)
• c331313: derp/derphttp: close DERP client to avoid data race in test (Anton Tolchanov) #66,#10042
• d601c81: wgengine/netstack: use netip.Prefix as map keys (Maisem Ali) #66,#9950
• eaf8aa6: wgengine/netstack: remove unnecessary map in UpdateNetstackIPs (Maisem Ali) #66,#9950
• d0f2c06: wgengine/netstack: standardize var names in UpdateNetstackIPs (Maisem Ali) #66,#9950
• c2b87fc: cmd/k8s-operator/deploy/chart,.github/workflows: use helm chart API v2 (tailscale#10055) (Irbe Krumina) #66,#10055
• disable on Unraid (tailscale#10048) #66,#10048 (Derek Kaser)
• 3a9f5c0: util/set: make Clone a method (tailscale#10044) (Chris Palmer) #66,#10044
• 32ebc03: client/web: move session logic to auth.go (Sonia Appasamy) #66,#10060
• 09fcbae: net/dnscache: remove completed TODO (James Tucker) #66,#9999
• introduce app connector advertisement preference and flags #66,#9989 (James Tucker)
• 970eb5e: cmd/k8s-operator: sanitize connection headers (tailscale#10063) (Rhea Ghosh) #66,#10063
• 237c6c4: client/web: call /api/auth before rendering any client views (Will Norris) #66,#10062
• 0ee4573: ipn/ipnlocal: fix small typo (James Tucker) #66,#10065
• 3786320: cmd/k8s-operator: strip credentials from client config in noauth mode (David Anderson) #66,#10067
• fix a couple of logic simplification lints #66,#10066 (James Tucker)
• clarify how to run update as Administrator on Windows (tailscale#10043) #66,#10043 (Andrew Lytvynov)
• b1a0caf: .github: Bump actions/checkout from 3 to 4 (dependabot[bot]) #66,#10016
• e5fbe57: web/client: update synology token from /api/auth call (Will Norris) #66,#10068
• 7a725bb: client/web: move more session logic to auth.go (Sonia Appasamy) #66,#10069
• e7482f0: ipn/ipnlocal: prevent deadlock on WebClientShutdown (Will Norris) #66,#10073
• b48b7d8: appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when...

v1.52.1-sunos

Commits

• 2855ad9: cmd/tailscaled: pre-load wintun.dll using a fully-qualified path (Aaron Klotz)
• cleanup SPK and MSI downloads (tailscale#10085) (Andrew Lytvynov)
• do not recursively delete dirs in cleanupOldDownloads (tailscale#10093) (Andrew Lytvynov)
• 16c59d2: VERSION.txt: this is v1.52.1 (Tyler Smalley)
• 79be16d: Merge tag 'v1.52.1' into sunos-1.52 (Nahum Shalman)

v1.52.0-sunos

Commits

• update win/apple licenses #9519 (License Updater)
• 098d110: VERSION.txt: this is v1.51.0 (Aaron Klotz) #9532
• 530aaa5: net/dns: retry forwarder requests over TCP (Andrew Dunham) #9288
• 6516206: ipn/ipnlocal: close foreground sessions on SetServeConfig (Marwan Sulaiman) #9447
• bdd9eec: cmd/k8s-operator: fix reconcile filters (tailscale#9533) (Irbe Krumina) #9533
• 578b357: wgengine/netstack: use buffer pools for UDP packet forwarding (Val) #9518
• c608660: wgengine,net,ipn,disco: split up and define different types of MTU (Val) #9518
• refactor methods to get values from registry to also return (tailscale#9536) #9536 (Claire Wang)
• 0275afa: ipn/ipnlocal: prevent putting file if file already exists (tailscale#9515) (Rhea Ghosh) #9515
• 3e298e9: go.toolchain.rev: bump go (Brad Fitzpatrick) #9541
• d31460f: net/portmapper: fix invalid UPnP metric name (Andrew Dunham) #9552
• 697f92f: client/web: refactor serveGetNodeData (Sonia Appasamy) #9556
• 2066f9f: util/linuxfw: fix crash in DelSNATRule when no rules are found (James Tucker) #9557
• 80206b5: wgengine/magicsock: add nodeid to panic condition on public key reuse (James Tucker) #9560
• ca43961: types/key: update some doc strings for public key serialization (James Tucker) #9561
• 5c2b2fa: ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes (James Tucker) #9498
• use NodeCapMap in CheckFunnel #9567 (Maisem Ali)
• 5d62b17: client/web: add login client mode to web.Server (Sonia Appasamy) #9311
• 2c0f0ee: tool/gocross: disable Linux static linking if GOCROSS_STATIC=0 (Brad Fitzpatrick) #9571
• 5b3f5ea: control/controlclient: fix leaked http2 goroutines on shutdown (Brad Fitzpatrick) #9572
• 5429ee2: client/web: add debug mode for web client ui updates (Sonia Appasamy) #9562
• 2c92f94: cmd/testwrapper: output machine-readable JSON on test flakes (Brad Fitzpatrick) #9575
• b5b4298: go.mod,*: bump gvisor (Andrea Barisani) #9252
• f50b2a8: wgengine/netstack: refactor address construction and conversion (Andrea Barisani) #9252
• 2a7b3ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9576
• 856d32b: cmd/testwrapper: include flake URL in JSON metadata (Brad Fitzpatrick) #9582
• 4823a7e: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry) #9573
• add a test for restarting a tsnet server, fix Windows #9588 (Brad Fitzpatrick)
• d71184d: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali) #9590
• add syspolicy package (tailscale#9550) #9550 (Claire Wang)
• aae1a28: go.mod: add test that replace directives aren't added in oss (Brad Fitzpatrick) #9594
• 71f2c67: go.mod: bump wingoes for cross-platform HRESULT definition (James Tucker) #9595
• 87bc831: go.mod,cmd/tsconnect: bump esbuild (James Tucker) #9578
• 84acf83: go.mod,net/dnsfallback: bump go4.org/netipx (James Tucker) #9578
• 0c8c374: go.mod: bump all dependencies except go-billy (James Tucker) #9578
• 8833dc5: util/set: add some useful utility functions for Set (tailscale#9535) (Chris Palmer) #9535
• update tailscale{,d} licenses #9577 (License Updater)
• 16fa3c2: wgengine/magicsock: use x/sys/unix constants for UDP GSO (tailscale#9597) (Jordan Whited) #9597
• gonna take some time to add the words we never had #9598 (Charlotte Brandhorst-Satzkorn)
• 41b05e6: go.mod: bump wireguard-go (James Tucker) #9563
• i can't help but rave about these additions #9599 (Charlotte Brandhorst-Satzkorn)
• ee90cd0: cmd/cloner,*: optimize nillable slice cloner (James Tucker) #9601
• 324f0d5: cmd/cloner,*: revert: optimize nillable slice cloner (James Tucker) #9603
• a56e58c: util/syspolicy: add read boolean setting (tailscale#9592) (Claire Wang) #9592
• e03f0d5: net/dnsfallback: remove net/dnsfallback go:generate line (James Tucker) #9602
• ab810f1: cmd/cloner: add regression test for slice nil/empty semantics (James Tucker) #9604
• d2ea9bb: cmd/cloner: fix typo in test type's name (Brad Fitzpatrick) #9606
• 72e5374: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9596
• 5f5c914: util/slicesx: add EqualSameNil, like slices.Equal but same nilness (Brad Fitzpatrick) #9609
• 425cf9a: tailcfg, all: use []netip.AddrPort instead of []string for Endpoints (Brad Fitzpatrick) #9610
• 67926ed: wgengine/magicsock: add MTU to addrLatency and rename to addrQuality (Val) #9486
• 4130851: wgengine/magicsock: probe but don't use path MTU from CLI ping (Val) #9486
• c26d91d: net/tstun: remove unused function DefaultMTU() (Val) #9621
• 656a77a: net/packet: implement methods for rewriting v6 addresses (Tom DNetto) #9542
• update tailscale{,d} licenses #9600 (License Updater)
• update win/apple licenses #9587 (License Updater)
• 73e53dc: cmd/tailscale,ipn/ipnlocal: print debug component names (Val) #9628
• b775a37: util/httpm, all: add a test to make sure httpm is used consistently (Brad Fitzpatrick) #9635
• efac2cb: tool/gocross: merge user's build tags and implicitly added build tags together (Brad Fitzpatrick) #9639
• eb22c0d: wgengine/magicsock: use binary.NativeEndian for UDP GSO control data (tailscale#9640) (Jordan Whited) #9640
• 286c6ce: net/dns/resolver: race UDP and TCP queries (tailscale#9544) (Andrew Dunham) #9544
• 5902d51: util/race: add test to confirm we don't leak goroutines (Andrew Dunham) #9641
• 3655fb3: control/controlclient: fix deadlock in shutdown (Maisem Ali) #9646
• 730cdfc: Revert "tool/gocross: disable Linux static linking if GOCROSS_STATIC=0" (Brad Fitzpatrick) #9648
• 91b9899: net/dns/resolver: fix flaky test (Andrew Dunham) #9647
• 93c6e1d: tstest/deptest: add check that x/exp/{maps,slices} imported as xfoo (Brad Fitzpatrick) #9650
• e499a6b: release/dist/unixpkgs: revert iptables move to Recommends, make it Depends (Brad Fitzpatrick) [tailscale#9656]...

v1.50.1-sunos

Commits

• 027b455: net/portmapper: fix invalid UPnP metric name (Andrew Dunham)
• use NodeCapMap in CheckFunnel (Maisem Ali)
• d9e8f6b: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry)
• 95e1c84: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali)
• 8749388: VERSION.txt: this is v1.50.1 (Denton Gentry)
• 596cf05: Merge tag 'v1.50.1' into sunos-1.50 (Nahum Shalman)