v1.62.1-sunos

Commits

• do not allow msiexec to reboot the OS (tailscale#11409) (tailscale#11416) #11416 (Andrew Lytvynov)
• 6953dbc: cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (tailscale#11454) (Irbe Krumina) #11454
• f9cdd9d: control/controlclient: send load balancing hint HTTP request header (Brad Fitzpatrick)
• 7074c49: control/controlclient: fix panic regression from earlier load balancer hint header (Brad Fitzpatrick)
• 0ad803a: util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is disabled (tailscale#11517) (Irbe Krumina) #11517
• 2827330: VERSION.txt: this is v1.62.1 (Irbe Krumina)
• 6beed4b: Merge tag 'v1.62.1' into sunos-1.62 (Nahum Shalman)

v1.62.0-sunos

Commits

• 7c0651a: scripts/installer.sh: add tuxedoOS to the Ubuntu copies (Nathan Woodburn) #11050
• b0e96a6: net/dns: log more info when openresolv commands fail (Andrew Dunham) #11130
• 61a1644: go.mod, all: move away from inet.af domain seized by Taliban (Brad Fitzpatrick) #11132
• 7ad2bb8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11133
• b7104cd: util/topk: add package containing a probabilistic top-K tracker (Andrew Dunham) #11029
• disable auto update on NixOS (tailscale#11136) #11136 (Patrick O'Doherty)
• 52f16b5: doctor/ethtool, ipn/ipnlocal: add ethtool bugreport check (Andrew Dunham) #11138
• 4d66841: wgengine/router: fix ip rule restoration (Jason Barnett) #10858
• 3aca29e: VERSION.txt: this is v1.61.0 (Percy Wegmann) #11148
• 69f5664: ipn/ipnlocal: fix doctor API endpoint (tailscale#11155) (San) #11155
• 2448781: cmd/tailscale: make web client URL clickable (Will Norris) #11164
• 6b582cb: cmd/tailscale: support clickable IPv6 web client addresses (Will Norris) #11165
• 44e337c: tool/gocross: pass flags for visionOS and visionOS Simulator (tailscale#11127) (Andrea Gottardo) #11127
• 70b7201: net/dns: fix infinite loop when run on Amazon Linux 2023 (Andrew Dunham) #11163
• allow longer idle log upload connections #11167 (James Tucker)
• 794af40: ipn/ipnlocal: remove ancient transition mechanism for https certs (Brad Fitzpatrick) #11168
• add TLS probe constructor to split dial addr from cert name #11177 (Brad Fitzpatrick)
• 8fe5042: net/ktimeout: add a package to set TCP user timeout (James Tucker) #11181
• d756622: util/syspolicy: add ManagedBy keys for Windows (tailscale#11183) (Andrea Gottardo) #11183
• 91a1019: cmd/testwrapper: apply results of all unit tests to coverage for all packages (Percy Wegmann) #11188
• 7708ab6: cmd/tailscale/cli: pass "-o 'CanonicalizeHostname no'" to ssh (Paul Scott) #10368
• plumb context to Server.verifyClient #11192 (Brad Fitzpatrick)
• 10d130b: cmd/derper, derp, tailcfg: add admission controller URL option (Brad Fitzpatrick) #11193
• 0359c2f: util/syspolicy: add 'ResetToDefaults' (tailscale#11194) (Andrea Gottardo) #11194
• edbad6d: cmd/derper: add user timeout and reduce TCP keepalive (James Tucker) #11182
• 72140da: client/web: update vite-plugin-svgr to latest version (tailscale#11197) (Mario Minardi) #11197
• 713d292: client/web: update plugin-react-swc to latest version (tailscale#11199) (Mario Minardi) #11199
• e8d2fc7: net/tshttpproxy: log when we're using a proxy (Andrew Dunham) #11203
• 131f909: wgengine/wglog: quieten WireGuard logs for allowedips (James Tucker) #11213
• 15b2c67: cmd/tailscale: add node attribute instructions to share command help (Percy Wegmann) #11212
• ac281dd: client/web: update vite and vitest to latest versions (tailscale#11200) (Mario Minardi) #11200
• c8c999d: cli/debug: rename DERP debug mode (tailscale#11220) (Andrea Gottardo) #11220
• 651c489: net/interfaces: reduce & cleanup logs on iOS (James Tucker) #11221
• c9b6d19: .github/workflows: fix typo in XDG_CACHE_HOME (James Tucker) #11223
• 0c5e65e: cmd/derper: apply TCP keepalive and timeout to TLS as well (James Tucker) #11225
• 8d0d464: net/dns: timeout DOH requests after 10s without response headers (James Tucker) #11227
• 8b9474b: wgengine/wgcfg: don't send UAPI to disable keep-alives on new peers (Brad Fitzpatrick) #11231
• 6ad6d6b: wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs (Brad Fitzpatrick) #11232
• ff1391a: net/dns/publicdns: add Mullvad family DNS to the list of known DoH servers (mrrfv) #11215
• remove LenIter, use Go 1.22 range-over-int instead #11241 (Brad Fitzpatrick)
• replace webdavfs with reverse proxies #11187 (Percy Wegmann)
• cd9cf93: wgengine/netstack: expose TCP forwarder drops via clientmetrics (Anton Tolchanov) #11245
• 9aa704a: client/web: restrict serveAPI endpoints to peer capabilities (Sonia Appasamy) #11217
• 95f2656: client/web: use grants on web UI frontend (Sonia Appasamy) #11217
• 82c569a: go.mod: update web-client-prebuilt module (OSS Updater) #11254
• b42b981: net/dns: do not wait for the interface registry key to appear if the windowsManager is being closed (Nick Khyl) #11224
• 7ef1fb1: cmd/tailscaled, ipn/ipnlocal, wgengine: shutdown tailscaled if wgdevice is closed (Nick Khyl) #11224
• warn about reverse path filtering and exit nodes #11191 (Anton Tolchanov)
• 9a8c2f4: types/key: remove copy returning array by value (Brad Fitzpatrick) #11239
• reduce critical section #11239 (Brad Fitzpatrick)
• make pendOpen time later, after dup check #11239 (Brad Fitzpatrick)
• 1cf8582: ipn/ipnstate, wgengine/wgint: add handshake attempts accessors (Brad Fitzpatrick) #11239
• 086ef19: scripts/installer.sh: auto-start tailscale on Alpine (tailscale#11214) (Keli) #11214
• fix race condition in tailfs_test #11262 (Percy Wegmann)
• 45d27fa: cmd/k8s-operator,k8s-operator,go.{mod,sum},tstest/tools: add Tailscale Kubernetes operator API docs (tailscale#11246) (Irbe Krumina) #11246
• 303125d: cmd/k8s-operator: configure all proxies with declarative config (tailscale#11238) (Irbe Krumina) #11238
• 95dcc17: cmd/k8s-operator: reconcile tailscale Ingresses when their backend Services change. (tailscale#11255) (Irbe Krumina) #11255
• add latitude, longitude for node location (tailscale#11162) #11162 (Claire Wang)
• c5abbcd: wgengine/netstack: add a per-client limit for in-flight TCP forwards (Andrew Dunham) #11258
• 7912d76: client/web: update to typescript 5.3.3 (tailscale#11267) (Mario Minardi) #11267
• expose function to generate request IDs #11273 (Andrew Dunham)
• a20e46a: util/cache: fix missing interface methods (tailscale#11275) (Andrew Dunham) #11275
• 3dd8ae2: net/tstun: fix spelling of "WireGuard" (Andrew Dunham) #11278
• 74b89...

v1.60.1-sunos

Commits

• 17cd062: ipn,wgengine: only intercept TailFS traffic on quad 100 (Percy Wegmann) #11286
• 2caffee: VERSION.txt: this is v1.60.1 (Percy Wegmann)
• 7574f6d: Merge tag 'v1.60.1' into sunos-1.60 (Nahum Shalman)

v1.60.0-sunos

Builds

• deps-dev: bump vite from 4.4.9 to 4.5.2 in /client/web #10903 (dependabot[bot])

Commits

• 38a1cf7: control/controlclient,util/execqueue: extract execqueue into a package (James Tucker) #10883
• 8250582: ipn/ipnlocal: make app connector configuration concurrent (James Tucker) #10882
• 2aec4f2: ./github/workflows/kubemanifests.yaml: fix the paths whose changes should trigger test runs (tailscale#10885) (Irbe Krumina) #10885
• 2ac7c01: util/slicesx: add Filter function (Andrew Dunham) #10893
• 2ce596e: cmd/k8s-operator/deploy: allow modifying operator tags via Helm values (ChandonPierre) #10874
• 832e5c7: util/nocasemaps: add AppendSliceElem method to nocasemaps (tailscale#10871) (as2643) #10871
• 7a0392a: wgengine/netstack: expose gVisor metrics through expvar (Andrew Dunham) #10899
• 457102d: go.mod: bump most deps for start of cycle (James Tucker) #10901
• 5b4eb47: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10904
• 62b056d: VERSION.txt: this is v1.59.0 (tailscale#10884) (kari-ts) #10884
• mute noisy expected peer mtu related error (tailscale#10870) #10870 (Claire Wang)
• add a helper to validate redirect URLs #10897 (David Anderson)
• 17eae5b: tool/gocross: force use of our custom toolchain (David Anderson) #10906
• 7e3bcd2: go.mod,wgengine/netstack: bump gvisor (James Tucker) #10900
• b787c27: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10908
• 4e822c0: go.toolchain.rev: bump Tailscale Go version to 1.21.6 (James Tucker) #10907
• b45089a: net/portmapper: handle cases where we have no supported clients (Andrew Dunham) #10922
• 370ec6b: cmd/k8s-operator: don't proceed with Ingress that has no valid backends (tailscale#10919) (Irbe Krumina) #10919
• ce4553b: appc,ipn/ipnlocal: optimize preference adjustments when routes update (Charlotte Brandhorst-Satzkorn) #10930
• add test to ensure that individual IPs are not removed during route updates #10929 (James Tucker)
• 8b47322: wgengine/magicsock: implement probing of UDP path lifetime (tailscale#10844) (Jordan Whited) #10844
• 6ee9563: ipn/ipnlocal: fix proxy path that matches mount point (tailscale#10864) (Irbe Krumina) #10864
• 75f1d3e: ipn/ipnlocal: fix failing test (tailscale#10937) (Irbe Krumina) #10937
• fd94d96: net/portmapper: support legacy "urn:dslforum-org" portmapping services (Andrew Dunham) #10927
• 0f3b2e7: util/expvarx: add a time and concurrency limiting expvar.Func wrapper (James Tucker) #10946
• fbfc3b7: cmd/tailscale/cli: run Watch with NotifyNoPrivateKeys (tailscale#10950) (Andrew Lytvynov) #10950
• i like the direction this list is taking #10960 (Charlotte Brandhorst-Satzkorn)
• 13f8a66: cmd/gitops-pusher: fix logic for checking credentials (Will Norris) #10970
• 9744ad4: cmd/hello: avoid deprecated apis (tailscale#10957) (Chris Palmer) #10957
• log failure to get ssh host keys #10980 (Percy Wegmann)
• b4b2ec7: ipn/ipnlocal: fix pretty printing of multi-record peer DNS results (James Tucker) #10997
• 2aeef4e: util/deephash: implement SelfHasher to allow types to hash themselves (Tom DNetto) #10998
• e1a4b89: appc,ipn/ipnlocal: add app connector routes if any part of a CNAME chain is routed (James Tucker) #10996
• ba70cbb: ipn/ipnlocal: fix app connector route advertisements on exit nodes (James Tucker) #11000
• 84f8311: util/deephash: document pathological deephash behavior (tailscale#11010) (Joe Tsai) #11010
• 60657ac: util/deephash: tighten up SelfHasher API (tailscale#11012) (Joe Tsai) #11012
• a633a30: cmd/hello: link to the Hello KB article (tailscale#11022) (Chris Palmer) #11022
• 5595b61: ipn/localapi: more http status cleanup (tailscale#10995) (kari-ts) #10995
• b752bde: types/views: add SliceMapKey[T] (Maisem Ali) #11044
• implementing bucketed statistics for started/finished counts #11048 (Tom DNetto)
• replace domains/emails in paths when bucketing stats #11056 (Tom DNetto)
• db3776d: go.toolchain.rev: bump to Go 1.22.0 (tailscale#11055) (Andrew Lytvynov) #11055
• optimize dns response observation for large route tables #11047 (James Tucker)
• 0b16620: .github/workflows: add privileged tests workflow (James Tucker) #9870
• add a list of things you should yahoo! #6398 (James Tucker)
• normalize common StableID's in bucketed stats, export as LabelMap #11060 (Tom DNetto)
• normalize passkey identities in bucketed stats #11061 (Tom DNetto)
• b6153ef: go.mod, README.md: use Go 1.22 (Brad Fitzpatrick) #11059
• 9612001: .github/workflows: update golangci-lint for Go 1.22 (Brad Fitzpatrick) #11059
• use Go 1.22 #11059 (Brad Fitzpatrick)
• 2bd3c14: util/cmpx: delete now that we're using Go 1.22 (Brad Fitzpatrick) #11059
• c424e19: .github/workflows: temporarily disable broken oss-fuzz action (Brad Fitzpatrick) #11059
• 2404b14: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11066
• a6cc2fd: cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying cluster traffic to a cluster target via ingress proxy (tailscale#11036) (Irbe Krumina) #11036
• update tailscale{,d} licenses #10905 (License Updater)
• update android licenses #10902 (License Updater)
• update win/apple licenses #10876 (License Updater)
• 128c99d: client/web: add new readonly mode (Will Norris) #10999
• 6f0c5e0: client/web: use smart quotes in web UI frontend (Will Norris) #11070
• 664b861: go.mod: update web-client-prebuilt module (OSS Updater) #11071
• 1217f65: cmd/dist: update logs for synology builds (Sonia Appasamy) [tailscale#11062](https://github.com/tailsca...

v1.58.2-sunos

Commits

• 36e3c41: control/controlclient,util/execqueue: extract execqueue into a package (James Tucker)
• d304bdc: ipn/ipnlocal: make app connector configuration concurrent (James Tucker)
• 8ffcd9a: appc,ipn/ipnlocal: optimize preference adjustments when routes update (Charlotte Brandhorst-Satzkorn)
• add test to ensure that individual IPs are not removed during route updates (James Tucker)
• 916de26: VERSION.txt: this is v1.58.1 (kari-ts)
• 80b20dc: net/portmapper: handle cases where we have no supported clients (Andrew Dunham)
• b0e1bbb: VERSION.txt: this is v1.58.2 (kari-ts)
• fab1c7e: Merge tag 'v1.58.2' into sunos-1.58 (Nahum Shalman)

v1.58.0-sunos

Documentation

• add Windows administrative template #10721 (Adrian Dewhurst)

Commits

• 971fa8d: VERSION.txt: this is v1.57.0 (Sonia Appasamy) #10587
• bac4890: net/portmapper: be smarter about selecting a UPnP device (Andrew Dunham) #10489
• 727acf9: net/netcheck: use DERP frames as a signal for home region liveness (Andrew Dunham) #10528
• b62a3fc: client/web: keep redirects on-site (tailscale#10525) (Chris Palmer) #10525
• 1a08ea5: cmd/k8s-operator: operator can create subnetrouter (tailscale#9505) (Irbe Krumina) #9505
• 3ae5623: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham) #10601
• 685b853: wgengine/magicsock: fix handling of derp.PeerGoneMessage (tailscale#10589) (Jordan Whited) #10589
• c6a2746: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10603
• correct noun for nacl box type in disco docs #10608 (James Tucker)
• 3a635db: cmd/connector-gen: add helper tool for wide app connector configurations (James Tucker) #10609
• 3fb6ee7: tailscale/logtail: redact public ipv6 and ipv4 ip addresses within tailscaled. (tailscale#10531) (as2643) #10531
• dc2792a: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10598
• 38b4eb9: cmd/k8s-operator/deploy/chart: document passing multiple proxy tags + log level values (tailscale#10624) (Irbe Krumina) #10624
• d05a572: net/portmapper: handle multiple UPnP discovery responses (Andrew Dunham) #10623
• apply tailnet-wide default for auto-updates (tailscale#10508) #10508 (Andrew Lytvynov)
• a661287: util/cmpx: remove code that's in the stdlib now (Andrew Dunham) #10643
• 865ee25: cmd/tailscale/cli: update debug.go (tailscale#10644) (Gavin Greenwalt) #10644
• 0957258: appc,ipn: prevent undesirable route advertisements (James Tucker) #10649
• 5e3126f: tool/gocross: make all Windows DLLs build with static libgcc (Nick Khyl) #10621
• 03f22cd: client/tailscale: add Device.PostureIdentity field (Paul Scott) #10021
• 65f2d32: api.md: add device.postureIdentity field (Paul Scott) #10021
• 09136e5: net/netutil: add function to check rp_filter value (tailscale#5703) (Andrew Dunham) #5703
• remove use of reflect.MethodByName (tailscale#10652) #10652 (Andrew Lytvynov)
• 01286af: net/interfaces: better handle multiple interfaces in LikelyHomeRouterIP (Andrew Dunham) #10653
• f815d66: api.md: add docs for setting an IP address (David Crawshaw) #10650
• 3c333f6: net/portmapper: add logs about obtained mapping(s) (Andrew Dunham) #10663
• cleanup unused code, part 1 (tailscale#10661) #10661 (Andrew Lytvynov)
• remove ConnectionStrategy (tailscale#10662) #10662 (Andrew Lytvynov)
• c9836b4: net/netmon: fix goroutine leak in winMon if the monitor is never started (Nick Khyl) #10668
• cleanup unused code, part 2 (tailscale#10670) #10670 (Andrew Lytvynov)
• cae6edf: ipn/ipnlocal: fix data race with capForcedNetfilter field (Andrew Dunham) #10672
• 5812093: util/winutil: publicize existing functions for opening read-only connections to the Windows Service Control Manager (Aaron Klotz) #10678
• 5deeb56: cmd/tailscale/cli: document usage more clearly (tailscale#10681) (Chris Palmer) #10681
• add shebang to the debian postinst script #10717 (Anton Tolchanov)
• e72f2b7: go.{mod,sum}: bump mkctr (tailscale#10722) (Irbe Krumina) #10722
• 1406a9d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10723
• use syspolicy to override LogTarget #10720 (Adrian Dewhurst)
• use object-src instead of plugin-types (tailscale#10719) #10719 (Chris Palmer)
• b084888: wgengine/magicsock: fix typos in docs (tailscale#10729) (Jordan Whited) #10729
• fa36397: net/portmapper: check returned epoch from PMP and PCP protocols (Andrew Dunham) #10673
• e32a064: cmd/tailscaled: don't create a network monitor in the parent tailscaled on Windows (Aaron Klotz) #10733
• 5a2eb26: cmd/containerboot: ensure that subnet routes can be unset. (tailscale#10734) (Irbe Krumina) #10734
• 3a9450b: cmd/containerboot: don't parse empty subnet routes (tailscale#10738) (Irbe Krumina) #10738
• 10c595d: ipn/ipnlocal: refresh node key without blocking if cap enabled (tailscale#10529) (James 'zofrex' Sanderson) #10529
• d9aeb30: net/interfaces: handle iOS network transitions (tailscale#10680) (Andrea Gottardo) #10680
• 124dc10: controlclient,tailcfg,types: expose MaxKeyDuration via localapi (tailscale#10401) (James 'zofrex' Sanderson) #10401
• 29e98e1: ssh/tailssh: use a local error instead of gossh.ErrDenied (tailscale#10743) (Andrew Lytvynov) #10743
• 46bdbb3: cmd/tailscaled, tsnet: don't return an interface containing a nil pointer (Andrew Dunham) #10752
• aed2cfe: util/winutil: add some missing docs to restartmgr errors (Aaron Klotz) #10754
• d3574a3: cmd/tailscale, ipn/ipnlocal: add 'debug dial-types' command (Andrew Dunham) #10753
• Allow category Z unicode characters (tailscale#10750) #10750 (Rhea Ghosh)
• 35c3032: net/dns/resolver: add ID to verbose logs in forwarder (Andrew Dunham) #10751
• apply ControlURL policy before login #10765 (Adrian Dewhurst)
• 1336992: cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passing tailscaled config in a file (tailscale#10759) (Irbe Krumina) #10759
• 55d302b: client/web: rename Disconnect to Log out (Sonia Appasamy) #10756
• d96e0a5: tstest/integration: add tests for auto-update defaulting behavior (tailscale#10763) (Andrew Lytvynov) #10763
• update tailscale{,d} licenses #10520 (License Updater)
• update win/apple licenses #10476 (License Updater)
• 569b914: client/web: ensure path prefix has a leading slash (Will Norris) #10784
• 953fa80: cmd/{derper,stund},net/stunserver: add standalone stun server (James Tucker) #10757
• 05093ea: cmd/k8s-operator,k8s-operator: allow the operator to deploy exit nodes via Connector custom resource (tailscale#10724) (...

v1.56.1-sunos

Commits

• e9125c4: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10607
• 067b145: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham)
• f1ea316: VERSION.txt: this is v1.56.1 (Sonia Appasamy)
• c82e4a4: Merge tag 'v1.56.1' into sunos-1.56 (Nahum Shalman)

v1.56.0-sunos

Continuous Integration

• report test coverage to coveralls.io #10340 (Percy Wegmann)
• run 'go vet' in golangci-lint; fix errors in tests #10502 (Andrew Dunham)

Commits

• a40e918: VERSION.txt: this is v1.55.0 (Denton Gentry) #10257
• e33bc64: net/dnsfallback: add singleflight to recursive resolver (Andrew Dunham) #9992
• 303a1e8: cmd/tailscale: expose --webclient for all builds (Will Norris) #10258
• remove the preview-webclient node capability #10259 (Will Norris)
• 03e780e: client/web: disable the "disable" button when disabled (Will Norris) #10248
• 855f79f: cmd/tailscaled, util/winutil: changes to process and token APIs in winutil (Aaron Klotz) #10116
• 1ef5bd5: util/osdiag, util/winutil: expose Windows policy key (Adrian Dewhurst) #9934
• b8ac3c5: util/syspolicy: add some additional policy keys (Adrian Dewhurst) #10144
• fix DomainRoutes copy #10260 (James Tucker)
• d5c460e: client/{tailscale,web}: add initial webUI frontend for self-updates (tailscale#10191) (Naman Sood) #10191
• 6f7a1b5: ipn/ipnlocal: rename SetWebLocalClient to ConfigureWebClient (Sonia Appasamy) #10264
• 2dbd546: client/web: remove DebugMode from GET /api/data (Sonia Appasamy) #10266
• 7d4221c: cmd/tsidp: add start of OIDC Tailscale IdP (Maisem Ali) #10265
• 055394f: ipn/ipnlocal: add mutex to webClient struct (Sonia Appasamy) #10269
• 96ad9b6: client/web: remove legacy-client-view.tsx (Sonia Appasamy) #10270
• 5712920: cmd/tailscaled: make tun mode default on gokrazy (Maisem Ali) #10273
• 2ff54f9: wgengine/magicsock: move trustBestAddrUntil forward on non-disco rx (tailscale#10274) (Jordan Whited) #10274
• 3bd382f: wgengine/magicsock: add DERP homeless debug mode for testing (Brad Fitzpatrick) #10272
• d01fa85: client/web: allow login client to still run tailscale up (Will Norris) #10276
• 146c4ba: go.mod: update web-client-prebuilt module (OSS Updater) #10281
• a3c11b8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10268
• 33147c4: .github: build gocross using regular GOPROXY settings (Will Norris) #10282
• 4f40901: client/web: when readonly, add check for TS connection (Sonia Appasamy) #10275
• 90eb537: ipn/ipnlocal: log and don't return full file serve error (tailscale#10174) (Tyler Smalley) #10174
• add option to run integrated web client #10283 (Will Norris)
• 7238586: client/web: fix margins on login popover (Sonia Appasamy) #10285
• 664ebb1: cmd/containerboot: fix unclean shutdown (tailscale#10035) (Irbe Krumina) #10035
• cca27ef: ipn/ipnlocal: add c2n method to check on TLS cert fetch status (Brad Fitzpatrick) #10291
• don't report a warning in DERP homeless mode #10293 (Brad Fitzpatrick)
• bd534b9: {client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint (Sonia Appasamy) #10295
• 719ee44: ssh/tailssh: use control server time instead of local time (Ox Cart) #10255
• b8a2aed: util/syspolicy: add caching handler (tailscale#10288) (Claire Wang) #10288
• fb829ea: control/controlclient: support incremental packet filter updates [capver 81] (Brad Fitzpatrick) #10300
• 980f1f2: client/web: hide unimplemented links (Sonia Appasamy) #10302
• 28684b0: cmd/tailscale/cli: correct app connector help text in set (James Tucker) #10303
• f880c77: client/web: split login from nodeUpdate (Will Norris) #10297
• update tailscale{,d} licenses #10155 (License Updater)
• update win/apple licenses #10194 (License Updater)
• update android licenses #10201 (License Updater)
• e75be01: client/web: add exit node selector (Sonia Appasamy) #10262
• 2dc0645: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman) #10298
• 38ea8f8: client/web: add Inter font (Sonia Appasamy) #10287
• 3402998: go.mod: update web-client-prebuilt module (OSS Updater) #10305
• f0613ab: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10306
• 42dc843: client/web: add advanced login options (Will Norris) #10309
• fc8488f: go.mod: update web-client-prebuilt module (OSS Updater) #10310
• e7cad78: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10311
• b88929e: Fix potential goroutine leak in syncs/watchdog.go (Uri Gorelik) #10314
• c4855fe: Fix Empty Resolver Set (Ryan Petris) #10317
• fd22145: cmd/tailscale/cli: make 'debug watch-ipn' play nice with jq (David Anderson) #10322
• f867392: cmd/tailscale/cli: add debug function to print the netmap (David Anderson) #10323
• update android licenses #10324 (License Updater)
• 4f80f40: cmd/k8s-operator: fix chart syntax error (tailscale#10333) (Irbe Krumina) #10333
• dd8bc9b: cmd/k8s-operator: log user/group impersonated by apiserver proxy (tailscale#10334) (Irbe Krumina) #10334
• 2c1f14d: util/set: implement json.Marshaler/Unmarshaler (tailscale#10308) (Andrew Lytvynov) #10308
• 6647171: cmd/k8s-operator: truncate long StatefulSet name prefixes (tailscale#10343) (Irbe Krumina) #10343
• fixup version embedding (tailscale#9997) #9997 (Cole Helbling)
• e1d0d26: go.mod: bump wireguard-go (tailscale#10352) (Jordan Whited) #10352
• 128d3ad: cmd/k8s-operator: helm chart add missing keys (tailscale#10296) (Gabriel Martinez) #10296
• Add TS_ACCEPT_ROUTES (tailscale#10176) #10176 (Claire Wang)
• 5aa7687: util/httpm: don't run test if .git doesn't exist (Andrew Dunham) #10363
• 1af7f5b: wgengine/magicsock: fix typo in Conn.handlePingLocked() (tailscale#10365) (Jordan Whited) #10365
• 611e0a5: appc,ipn/local: support wildcard when matching app-connectors (Tom DNetto) #10364
• crikey! what a beauty of a list #10367 ([Charlotte Brandhorst-Satzkorn](9e63b...

v1.54.1-sunos

Commits

• 7acf781: ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile (Marwan Sulaiman)
• 864484b: Revert "ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile" (Denton Gentry)
• b709a72: ipn/ipnlocal: update hostinfo when app connector state is toggled (Tom DNetto)
• b78b245: VERSION.txt: this is v1.54.1 (Tyler Smalley)
• 5355f31: Merge tag 'v1.54.1' into sunos-1.54 (Nahum Shalman)

v1.54.0-sunos

Builds

• deps: bump @babel/traverse from 7.22.10 to 7.23.2 in /client/web #66,#9822 (dependabot[bot])
• deps: bump get-func-name from 2.0.0 to 2.0.2 in /client/web #66,#9565 (dependabot[bot])
• deps-dev: bump postcss from 8.4.27 to 8.4.31 in /client/web #66,#9708 (dependabot[bot])
• deps: bump github.com/docker/docker #66,#10017 (dependabot[bot])

Commits

• fde2ba5: VERSION.txt: this is v1.53.0 (tailscale#10018) (Tyler Smalley) #66,#10018
• ed1b935: cmd/k8s-operator: allow to install operator via helm (tailscale#9920) (Irbe Krumina) #66,#9920
• download helm CLI (tailscale#9981) #66,#9981 (Irbe Krumina)
• enable use-cases with non-native IPs by setting ns.ProcessSubnets #66,#9958 (Tom DNetto)
• 57c5b5a: net/dns/recursive: update IP for b.root-servers.net (Andrew Dunham) #66,#9998
• 95715c4: ipn/localapi: add endpoint to handle APNS payloads (tailscale#9972) (Andrea Gottardo) #66,#9972
• 93aa8a8: client/web: allow providing logger implementation (Sonia Appasamy) #66,#10028
• 89953b0: ipn/ipnlocal,client/web: add web client to tailscaled (Sonia Appasamy) #66,#10028
• 6f214de: client/web: split out UI components (Sonia Appasamy) #66,#10028
• dd842d4: go.mod: update wireguard-go to enable TUN UDP GSO/GRO (tailscale#10029) (Jordan Whited) #66,#10029
• add user pref for running web client #66,#9987 (Will Norris)
• serve web client requests from LocalBackend #66,#9987 (Will Norris)
• 0d86eb9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #66,#10030
• a7c80c3: cmd/sniproxy: implement support for control configuration, multiple addresses (Tom DNetto) #66,#9892
• df4b730: types/appctype: define the nodeAttrs type for dns-driven app connectors (Tom DNetto) #66,#10032
• 3d7fb6c: derp/derphttp: fix race in mesh watcher (Brad Fitzpatrick) #66,#9977
• 3114a1c: derp/derphttp: add watch reconnection tests from tailscale#9719 (Anton Tolchanov) #66,#9977
• 4417565: ipn/ipnlocal: rename web fields/structs to webClient (Sonia Appasamy) #66,#10034
• mention release track when running latest (tailscale#10039) #66,#10039 (Andrew Lytvynov)
• 00375f5: util/set: add some more Set operations (tailscale#10022) (Chris Palmer) #66,#10022
• bd488e4: go.mod: update wireguard-go (tailscale#10046) (Jordan Whited) #66,#10046
• replace web client debug flag with node capability #66,#10033 (Will Norris)
• c331313: derp/derphttp: close DERP client to avoid data race in test (Anton Tolchanov) #66,#10042
• d601c81: wgengine/netstack: use netip.Prefix as map keys (Maisem Ali) #66,#9950
• eaf8aa6: wgengine/netstack: remove unnecessary map in UpdateNetstackIPs (Maisem Ali) #66,#9950
• d0f2c06: wgengine/netstack: standardize var names in UpdateNetstackIPs (Maisem Ali) #66,#9950
• c2b87fc: cmd/k8s-operator/deploy/chart,.github/workflows: use helm chart API v2 (tailscale#10055) (Irbe Krumina) #66,#10055
• disable on Unraid (tailscale#10048) #66,#10048 (Derek Kaser)
• 3a9f5c0: util/set: make Clone a method (tailscale#10044) (Chris Palmer) #66,#10044
• 32ebc03: client/web: move session logic to auth.go (Sonia Appasamy) #66,#10060
• 09fcbae: net/dnscache: remove completed TODO (James Tucker) #66,#9999
• introduce app connector advertisement preference and flags #66,#9989 (James Tucker)
• 970eb5e: cmd/k8s-operator: sanitize connection headers (tailscale#10063) (Rhea Ghosh) #66,#10063
• 237c6c4: client/web: call /api/auth before rendering any client views (Will Norris) #66,#10062
• 0ee4573: ipn/ipnlocal: fix small typo (James Tucker) #66,#10065
• 3786320: cmd/k8s-operator: strip credentials from client config in noauth mode (David Anderson) #66,#10067
• fix a couple of logic simplification lints #66,#10066 (James Tucker)
• clarify how to run update as Administrator on Windows (tailscale#10043) #66,#10043 (Andrew Lytvynov)
• b1a0caf: .github: Bump actions/checkout from 3 to 4 (dependabot[bot]) #66,#10016
• e5fbe57: web/client: update synology token from /api/auth call (Will Norris) #66,#10068
• 7a725bb: client/web: move more session logic to auth.go (Sonia Appasamy) #66,#10069
• e7482f0: ipn/ipnlocal: prevent deadlock on WebClientShutdown (Will Norris) #66,#10073
• b48b7d8: appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when...