v1.80.0-sunos

Builds

• deps: bump nanoid from 3.3.4 to 3.3.8 in /cmd/tsconnect (tailscale#14352) #14352 (dependabot[bot])
• deps: bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (tailscale#12468) #12468 (dependabot[bot])

Commits

• b37a478: go.mod: bump x/net and dependencies (James Tucker) #66,#14297
• 66aa774: cmd/gitops-pusher: default previousEtag to controlEtag (tailscale#14296) (Andrew Lytvynov) #66,#14296
• cleanup options API and allow setting http.Client (tailscale#11503) #66,#11503 (Joe Tsai)
• fix TestHealthMetric to pass on release branch #66,#14303 (Brad Fitzpatrick)
• 06a82f4: cmd,{get-authkey,tailscale}: remove unnecessary scope qualifier from OAuth clients (Percy Wegmann) #66,#14286
• f817860: VERSION.txt: this is v1.79.0 (Nick Khyl) #66,#14310
• c276116: cmd/stunc: enforce read timeout deadline (tailscale#14309) (Mike O'Driscoll) #66,#14309
• fix testing in container (tailscale#14330) #66,#14330 (Tom Proctor)
• add env var setting server send queue depth (tailscale#14334) #66,#14334 (Mike O'Driscoll)
• ea3d0bc: prober,derp/derphttp: make dev-mode DERP probes work without TLS (tailscale#14347) (Mario Minardi) #66,#14347
• fa28b02: .github: Bump actions/cache from 4.1.2 to 4.2.0 (tailscale#14331) (dependabot[bot]) #66,#14331
• d54cd59: .github: Bump github/codeql-action from 3.27.1 to 3.27.6 (tailscale#14332) (dependabot[bot]) #66,#14332
• 8b1d011: cmd/containerboot: guard kubeClient against nil dereference (tailscale#14357) (Bjorn Neergaard) #66,#14357
• 0cc071f: cmd/containerboot: don't attempt to write kube Secret in non-kube environments (tailscale#14358) (Irbe Krumina) #66,#14358
• fa655e6: cmd/containerboot: add more tests, check that egress service config only set on kube (tailscale#14360) (Irbe Krumina) #66,#14360
• f1ccdcc: cmd/k8s-operator,k8s-operator: operator integration tests (tailscale#12792) (Tom Proctor) #66,#12792
• 6e552f6: cmd/containerboot: don't attempt to patch a Secret field without permissions (tailscale#14365) (Irbe Krumina) #66,#14365
• 0045860: types/iox: add function types for Reader and Writer (tailscale#14366) (Joe Tsai) #66,#14366
• c9188d7: types/bools: add IfElse (tailscale#14272) (Joe Tsai) #66,#14272
• 716cb37: util/dnsname: use vizerror for all errors (Adrian Dewhurst) #66,#14368
• 73128e2: ssh/tailssh: remove unused public key support (Brad Fitzpatrick) #66,#14373
• aa04f61: net/netcheck: adjust HTTPS latency check to connection time and avoid data race (James Tucker) #66,#14294
• perform DERP bandwidth probes over TUN device to mimic real client #66,#14338 (Percy Wegmann)
• cc168d9: cmd/k8s-operator: fix ProxyGroup hostname (tailscale#14336) (Irbe Krumina) #66,#14336
• 5883ca7: types/opt: fix test to be agnostic to omitzero support (tailscale#14401) (Joe Tsai) #66,#14401
• 0cc2a8d: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #66,#14399
• fix WithBandwidthProbing behavior with optional tunAddress #66,#14403 (Brad Fitzpatrick)
• b62a013: Switch logging service from log.tailscale.io to log.tailscale.com (tailscale#14398) (Joe Tsai) #66,#14398
• b3d4ffe: docs/k8s: add some high-level operator architecture diagrams (tailscale#13915) (Tom Proctor) #66,#13915
• add MutexValue (tailscale#14422) #66,#14422 (Joe Tsai)
• 6ae0287: cmd/systray: add account switcher (Andrew Lytvynov) #66,#14353
• 00a4504: cmd/derpprobe,prober: add ability to perform continuous queuing delay measurements against DERP servers (Percy Wegmann) #66,#14405
• 2d4edd8: cmd/systray: add extra padding around notification icon (Will Norris) #66,#14429
• add ShardedInt expvar.Var type #66,#14412 (James Tucker)
• 89adcd8: cmd/systray: improve profile menu (Will Norris) #66,#14427
• 3adad36: cmd/k8s-operator,k8s-operator: include top-level CRD descriptions (tailscale#14435) (Tom Proctor) #66,#14435
• make histogram buckets cumulative #66,#14437 (Percy Wegmann)
• 256da8d: cmd/systray: remove new menu delay on KDE (Will Norris) #66,#14439
• rename and retype ServiceHost capability (tailscale#14380) #66,#14380 (Naman Sood)
• cb59943: cmd/systray: add exit nodes menu (Will Norris) #66,#14444
• 10d4057: cmd/systray: add visual workarounds for gnome, mac, and windows (Will Norris) #66,#14446
• 8d4ea4d: wgengine/router: add ip rules for unifi udm-pro (Jason Barnett) #66,#10828
• c4f9f95: scripts/installer.sh: add support for PikaOS (tailscale#14461) (Erisa A) #66,#14461
• 4267d0f: .github: update matrix of installer.sh tests (tailscale#14462) (Erisa A) #66,#14462
• 9e2819b: util/stringsx: add package for extra string functions, like CompareFold (Brad Fitzpatrick) #66,#14458
• 76ca1ad: scripts/installer.sh: accept different capitalisation of deepin (tailscale#14463) (Erisa A) #66,#14463
• 3837b6c: cmd/systray: rebuild menu on pref change, assorted other fixes (Will Norris) #66,#14448
• 72b2789: scripts/installer.sh: allow CachyOS for Arch packages (tailscale#14464) (Erisa A) #66,#14464
• 68b12a7: metrics,syncs: add ShardedInt support to metrics.LabelMap (James Tucker) #66,#14432
• 2bdbe5b: cmd/systray: add icons for exit node online and offline (Will Norris) #66,#14465
• 86f273d: cmd/systray: set app icon and title consistently (Will Norris) #66,#14465
• 5a4148e: cmd/systray: update state management and initialization (Will Norris) #66,#14485
• c43c5ca: cmd/systray: properly set tooltip on different platforms (Will Norris) #66,#14488
• 30d3e7b: scripts/install.sh: add special case for Parrot Security (tailscale#14487) (Erisa A) #66,#14487
• add means to set device posture attributes from node #66,#14163 (Brad Fitzpatrick)
• update reference to Notify's Swift definition #66,#14512 (Brad Fitzpatrick)
• e3bcb2e: ipn/ipnlocal: use context.CancelFunc type for doc clarity (Brad Fitzpatrick) #66,#14513
• 17b8815: wgengine/router: refactor udm-pro into broader ubnt support (Jason Barnett) #66,#14452
• 1e2e319: util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps (Brad Fitzpatrick) #66,#14515
• 402fc9d: control/controlclient: remove optimization that was more convoluted than useful (Brad Fitzpatrick) #66,#14514
• ad8d8e3: go.mod: update github.com/go-json-experiment/json (tailscale#14522) (Joe Tsai) #66,#14522
• use iterators in more places instead of Range funcs #66,#14529 (Brad Fitzpatrick)
• 4b56bf9: types/views: remove various Map Range funcs; use iterators everywhere (Brad Fitzpatrick) #66,#14532
• convert ServeConfig Range methods to iterators #66,#14534 (Brad Fitzpatrick)
• 60930d1: Update README to reference correct Commit Style URL (Marc Paquette) #66,#14489
• 36ea792: Fix various linting, vet & static check issues (Marc Paquette) #66,#14489
• declare NotifyWatchOpt consts without using iota #66,#14535 (Brad Fitzpatrick)
• flesh out docs #66,#14543 (Brad Fitzpatrick)
• 5da772c: cmd/tailscale/cli: fix TestUpdatePrefs on macOS (Brad Fitzpatrick) #66,#14545
• remove unused User fields #66,#14549 (Brad Fitzpatrick)
• 07aae18: ipn/ipnlocal, util/goroutines: track goroutines for tests, shutdown (Brad Fitzpatrick) #66,#14521
• 041622c: ipn/ipnlocal: move where auto exit node selection happens (Brad Fitzpatrick) #66,#14517
• 82e99fc: client/systray: move cmd/systray to client/systray (Will Norris) #66,#14554
• b36984c: cmd/systray: add cmd/systray back as a small client/systray wrapper (Will Norris) #66,#14554
• cc4aa43: go.mod: bump github.com/tailscale/peercred for Solaris (Brad Fitzpatrick) #66,#14562
• 6e45a83: cmd/derper: improve logging on derp mesh connect (James Tucker) #66,#14553
• f4f57b8: wgengine/magicsock: rebind on EPIPE/ECONNRESET (James Tucker) #66,#14551
• do not set HTTPS port for any private coordination server IP (tailscale#14564) #66,#14564 (Andrea Gottardo)
• 2c07f5d: wgengine/magicsock: refactor maybeRebindOnError (James Tucker) #66,#14552
• 220dc56: go.mod: bump tailscale/wireguard-go for Solaris/Illumos (Brad Fitzpatrick) #66,#14567
• de9d4b2: net/netmon: remove extra panic guard around ParseRIB (James Tucker) #66,#14298
• fix golangci-lint errors #66,#14555 (Will Norris)
• 009da8a: ipn/ipnlocal: connect serve config to c2n endpoint (KevinLiang10) #66,#14541
• 8d4ca13: cmd/k8s-operator,k8s-operator: support ingress ProxyGroup type (tailscale#14548) (Irbe Krumina) #66,#14548
• clone histogram buckets before handing to Prometheus for derp_qd_probe_delays_seconds #66,#14578 (Percy Wegmann)
• 8d6b996: ipn/ipnlocal: add client metric gauge for number of IPNBus connections (Brad Fitzpatrick) #66,#14580
• improve accuracy of Linux desktop detection heuristic #66,#14581 (Brad Fitzpatrick)
• 9f17260: types/views: add MapViewsEqual and MapViewsEqualFunc (Andrew Dunham) #66,#14579
• fa52035: client/systray: record that systray is running (Will Norris) #66,#14582
• 0b4ba40: client/web: properly show "Log In" for web client on fresh install (tailscale#14569) (Mario Minardi) #66,#14569
• d8579a4: go.mod: bump go-git to v5.13.1 (tailscale#14584) (Andrew Lytvynov) #66,#14584
• 68997e0: cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (tailscale#14475) (Irbe Krumina) #66,#14475
• record total bytes transferred in DERP bandwidth probes #66,#14577 (Percy Wegmann)
• 7fa07f3: types/views: add SliceEqualAnyOrderFunc (Andrew Dunham) #66,#14591
• 6ddeae7: types/views: optimize SliceEqualAnyOrderFunc for small slices (Andrew Dunham) #66,#14593
• illumos/solaris userspace only support #66,#14571 (Nahum Shalman)
• fc8b6d9: ipn/conf.go: add VIPServices to tailscaled configfile (tailscale#14345) (Irbe Krumina) #66,#14345
• 48a95c4: cmd/containerboot,cmd/k8s-operator: reload tailscaled config (tailscale#14342) (Irbe Krumina) #66,#14342
• 77017ba: cmd/containerboot: load containerboot serve config that does not contain HTTPS endpoint in tailnets with HTTPS disabled (tailscale#14538) (Irbe Krumina) #66,#14538
• a841f9d: go.mod: bump some deps (Brad Fitzpatrick) #66,#14600
• support filtering regions by region ID in addition to code #66,#14602 (Percy Wegmann)
• 2af2557: ipn/ipnlocal: add VIPServices hash to return body of vip-services c2n endpoint (KevinLiang10) #66,#14592
• bump base alpine image (tailscale#14604) #66,#14604 (Andrew Lytvynov)
• 69b9074: util/uniq,types/lazy,*: delete code that's now in Go std (Brad Fitzpatrick) #66,#14614
• use Go 1.21's binary.NativeEndian #66,#14616 (Brad Fitzpatrick)
• 377127c: Revert "Dockerfile: bump base alpine image (tailscale#14604)" (tailscale#14620) (Andrew Lytvynov) #66,#14620
• record total bytes transferred in DERP bandwidth probes #66,#14590 (Percy Wegmann)
• 64ab0dd: cmd/tailscale/cli: only exit silently if len(args) == 0 (Michael Stapelberg) #66,#14611
• e4385f1: cmd/tailscale/cli: add --posture-checking to tailscale up (Anton Tolchanov) #66,#14630
• da9965d: cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible (Nick Khyl) #66,#14585
• 414a011: go.mod: bump mdlayher/netlink and u-root/uio to use Go 1.21 NativeEndian (Brad Fitzpatrick) #66,#14632
• cfda1ff: cmd/viewer,all: consistently use "read-only" instead of "readonly" (Brad Fitzpatrick) #66,#14633
• 66269dc: ipn/ipnlocal: allow Peer API access via either V4MasqAddr or V6MasqAddr when both are set (Nick Khyl) #66,#14637
• add Node.HomeDERP int, phase out "127.3.3.40:$region" hack [capver 111] #66,#14641 (Brad Fitzpatrick)
• 2747798: control/controlclient: remove misleading TS_DEBUG_NETMAP, make it TS_DEBUG_MAP=2 (or more) (Brad Fitzpatrick) #66,#14642
• d818a58: net/dns: ensure the Windows configurator does not touch the hosts file unless the configuration actually changed (Aaron Klotz) #66,#14639
• d0ba91b: ipn/ipnserver: use ipnauth.Actor instead of *ipnserver.actor whenever possible (Nick Khyl) #66,#14626
• c3c4c96: ipn/{ipnauth,ipnlocal,ipnserver}, client/tailscale: make ipnserver.Server testable (Nick Khyl) #66,#14626
• f33f5f9: ipn/{ipnlocal,ipnserver}: remove redundant (*LocalBackend).ResetForClientDisconnect (Nick Khyl) #66,#14626
• 6fac290: ipn/ipnserver: fix race condition where LocalBackend is reset after a different user connects (Nick Khyl) #66,#14626
• 2ac1898: client/tailscale: fix typo in comment (Nick Khyl) #66,#14643
• 6364b5f: net/netmon: trim IPv6 endpoints in already routable subnets (James Tucker) #66,#14605
• 7ecb69e: tailcfg,control/controlclient: treat nil AllowedIPs as Addresses [capver 112] (Brad Fitzpatrick) #66,#14644
• db05e83: cmd/derper: support explicit configuration of mesh dial hosts (Percy Wegmann) #66,#14560
• beb951c: .github: Bump actions/setup-go from 5.1.0 to 5.2.0 (tailscale#14391) (dependabot[bot]) #66,#14391
• 3431ab1: .github: Bump github/codeql-action from 3.27.6 to 3.28.1 (tailscale#14618) (dependabot[bot]) #66,#14618
• use ReplaceFile on Windows so that attributes and ACLs are preserved #66,#14640 (Aaron Klotz)
• 1b303ee: ipn/ipnlocal: re-advertise appc routes on startup (tailscale#14609) (Andrew Lytvynov) #66,#14609
• f023c86: types/lazy: fix flaky TestDeferAfterDo (Nick Khyl) #66,#14645
• d8b00e3: cmd/tailscaled: add some more depchecker dep tests (Brad Fitzpatrick) #66,#14653
• 62fb857: ipn/ipnserver: fix TestConcurrentOSUserSwitchingOnWindows (Nick Khyl) #66,#14656
• 0481042: ipn/ipnserver: fix a deadlock in (*Server).blockWhileIdentityInUse (Nick Khyl) #66,#14657
• remove per-packet DERP pub key copying overheads (tailscale#14658) #66,#14658 (Jordan Whited)
• remove DERP pub key copying overheads in qd and non-tun measures (tailscale#14659) #66,#14659 (Jordan Whited)
• 2d1f6f1: cmd/k8s-operator: require namespace config (tailscale#14648) (Tom Proctor) #66,#14648
• 7d73a38: net/dns: only populate OSConfig.Hosts when MagicDNS is enabled (Aaron Klotz) #66,#14638
• change packets_dropped metric to also have reason and kind labels (tailscale#14651) #66,#14651 (Mario Minardi)
• d912a49: net/tstun: add logging to aid developers missing Start calls (Brad Fitzpatrick) #66,#14671
• 97a44d6: go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (tailscale#14601) (Irbe Krumina) #66,#14601
• allow overriding os.Hostname() via syspolicy (tailscale#14676) #14676 (Andrea Gottardo)
• [serve] warn that foreground funnel won't work if shields are up (tailscale#14685) #14685 (Irbe Krumina)
• add bytes dropped metric (tailscale#14698) #14698 (Mike O'Driscoll)
• 174af76: .github: Bump actions/upload-artifact from 4.4.3 to 4.6.0 (tailscale#14697) (dependabot[bot]) #14697
• 33e62a3: .github: Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (tailscale#14695) (dependabot[bot]) #14695
• 682c06a: .github: Bump golangci/golangci-lint-action from 6.1.0 to 6.2.0 (tailscale#14696) (dependabot[bot]) #14696
• 69a985f: ipn/ipnlocal,tailcfg: communicate to control whether funnel is enabled (tailscale#14688) (Irbe Krumina) #14688
• 817ba1c: cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (tailscale#14583) (Irbe Krumina) #14583
• 51adaec: Revert "ipn/ipnlocal: re-advertise appc routes on startup (tailscale#14609)" (Brad Fitzpatrick) #14710
• fix panic on race between listener.Close and incoming packet #14717 (Brad Fitzpatrick)
• fix nil pointer access in tcp-in-tcp probes #14681 (Percy Wegmann)
• block in Server.Dial until backend is Running #14716 (Brad Fitzpatrick)
• 8b9d5fd: go.mod: bump github.com/inetaf/tcpproxy (James Tucker) #14718
• e12b2a7: cmd/tailscale/cli: clean up how optional commands get registered (Brad Fitzpatrick) #14725
• 150cd30: ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation (Brad Fitzpatrick) #14724
• 042ed6b: net/bakedroots: add LetsEncrypt ISRG Root X2 (Brad Fitzpatrick) #14724
• add missing debug pprof endpoints #14731 (Brad Fitzpatrick)
• 8c8750f: ipn/ipnlocal: Support TCP and Web VIP services (KevinLiang10) #14508
• ccd1643: add copyright header (KevinLiang10) #14508
• 0a57051: add blank line (KevinLiang10) #14508
• 550923d: fix handler related and some nit (KevinLiang10) #14508
• e477914: delete extra struct in tailcfg (KevinLiang10) #14508
• remove now-unused TailscaleFunnelEnabled method #14732 (Brad Fitzpatrick)
• 8b65598: util/slicesx: add AppendNonzero (Brad Fitzpatrick) #14735
• d1b3785: .github: Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 (tailscale#14141) (dependabot[bot]) #14141
• add ServiceName #14722 (Adrian Dewhurst)
• 3dabea0: cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (tailscale#14727) (Andrea Gottardo) #14727
• 3fb8a1f: ipn/ipnlocal: re-advertise appc routes on startup, take 2 (tailscale#14740) (Andrew Lytvynov) #14740
• 1562a6f: feature/*: make Wake-on-LAN conditional, start supporting modular features (Brad Fitzpatrick) #14738
• 3033a96: cmd/k8s-operator: fix reconciler name clash (tailscale#14712) (Tom Proctor) #14712
• a00623e: derp,wgengine/magicsock: remove unexpected label (tailscale#14711) (Mike O'Driscoll) #14711
• f1710f4: appc,ipn/ipnlocal: log DNS parsing errors in app connectors (tailscale#14607) (Andrew Lytvynov) #14607
• d6abbc2: net/tstun: move TAP support out to separate package feature/tap (Brad Fitzpatrick) #14741
• 413fb5b: control/controlclient: delete unreferenced mapSession UserProfiles (Brad Fitzpatrick) #14749
• f0db473: cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the GP lock during service startup (Nick Khyl) #14669
• 61bea75: cmd/tailscale: fix, test some recent doc inconsistencies (Brad Fitzpatrick) #14757
• 3a39f08: util/usermetric: add more drop labels (Kristoffer Dalby) #14434
• 5756bc1: wgengine/filter: return drop reason for metrics (Kristoffer Dalby) #14434
• f39ee8e: net/tstun: add back outgoing drop metric (Kristoffer Dalby) #14434
• f0b63d0: wgengine/filter: add check for unknown proto (Kristoffer Dalby) #14434
• move Conn interface to derp.go #14744 (Percy Wegmann)
• 450bc9a: cmd/derper,derp: make TCP write timeout configurable (Percy Wegmann) #14744
• 05afa31: util/clientmetric: use counter in aggcounter (Kristoffer Dalby) #14759
• adjust ServiceName.Validate to use vizerror #14748 (Adrian Dewhurst)
• 69bc164: ipn/ipnlocal: include DNS SAN in cert CSR (tailscale#14764) (Tom Proctor) #14764
• 716e4fc: client/web: remove advanced options from web client login (tailscale#14770) (Mario Minardi) #14770
• cbf1a9a: go.{mod,sum}: update web-client-prebuilt (tailscale#14772) (Mario Minardi) #14772
• 1a7274f: control/controlclient: skip SetControlClientStatus when queue has newer results later (Brad Fitzpatrick) #14768
• ca39c4e: cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc (James Tucker) #14755
• 2089f4b: ipn/ipnlocal: add debug envknob for ACME directory URL (tailscale#14771) (Tom Proctor) #14771
• 82e41dd: cmd/natc: expose netstack metrics in client metrics in natc (James Tucker) #14756
• 2c98c44: control/controlclient: sanitize invalid DERPMap nil Region from control (Brad Fitzpatrick) #14753
• 68a66ee: feature/capture: move packet capture to feature/*, out of iOS + CLI (Brad Fitzpatrick) #14758
• 66b2e9f: envknob/featureknob: allow use of exit node on unraid (tailscale#14754) (Derek Kaser) #14754
• e701fde: control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance (Brad Fitzpatrick) #14789
• 04029b8: tstest/deptest: verify that tailscale.com BadDeps actually exist (Brad Fitzpatrick) #14787
• 8c92589: go.mod: bump depaware, add --internal flag to stop hiding internal packages (Brad Fitzpatrick) #14786
• bce05ec: control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n (Brad Fitzpatrick) #14785
• 3fec806: .github: Bump actions/setup-go from 5.2.0 to 5.3.0 (tailscale#14793) (dependabot[bot]) #14793
• 76dc028: .github: Bump github/codeql-action from 3.28.1 to 3.28.5 (tailscale#14794) (dependabot[bot]) #14794
• do Warnable dependency filtering in tailscaled #14796 (Brad Fitzpatrick)
• relax no-derp-home warnable to not fire if not in map poll #14799 (Brad Fitzpatrick)
• 2691b9f: tempfork/acme: add new package for x/crypto package acme fork, move (Brad Fitzpatrick) #13508
• ba1f9a3: types/persist: remove Persist.LegacyFrontendPrivateMachineKey (Brad Fitzpatrick) #14777
• 079973d: tempfork/acme: fix TestSyncedToUpstream with Windows line endings (Brad Fitzpatrick) #14804
• 6f10fe8: cmd/tailscale: add warning to help text of --force-reauth (tailscale#14778) (yejingchen) #14778
• return from Accept when the listener gets closed #14809 (Anton Tolchanov)
• 46fd4e5: ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh (Percy Wegmann) #14803
• f1514a9: go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (tailscale#14814) (Mario Minardi) #14814
• 0aa5415: .github: Bump actions/checkout from 3.6.0 to 4.2.2 (tailscale#14139) (dependabot[bot]) #14139
• eb29930: types/views: fix SliceEqualAnyOrderFunc short optimization (Andrew Dunham) #14815
• b406f20: cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (tailscale#14436) (Irbe Krumina) #14436
• 52f88f7: cmd/k8s-operator: don't set deprecated configfile hash on new proxies (tailscale#14817) (Irbe Krumina) #14817
• b60f6b8: Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh" (Percy Wegmann) #14820
• 8bd04bd: go.mod: bump gorilla/csrf for security fix (tailscale#14822) (Brad Fitzpatrick) #14822
• 3f39211: cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (tailscale#14792) (Irbe Krumina) #14792
• ed8bb3b: control/controlclient: add missing word in comment (Brad Fitzpatrick) #14830
• 0ed4aa0: control/controlclient: flesh out a recently added comment (Brad Fitzpatrick) #14830
• a49af98: cmd/k8s-operator: temporarily disable HA Ingress controller (tailscale#14833) (Irbe Krumina) #14833
• support multiple probes running concurrently #14818 (Anton Tolchanov)
• 138a83e: cmd/containerboot: wait for consistent state on shutdown (tailscale#14263) (Tom Proctor) #14263
• 649a71f: VERSION.txt: this is v1.80.0 (tailscale#14837) (Andrea Gottardo) #14837
• 6582cdb: illumos/solaris support rebased onto v1.80.0 (Nahum Shalman)
• 4193480: build tailscale client (Kevin Meziere)