v1.52.1-sunos

Commits

• 2855ad9: cmd/tailscaled: pre-load wintun.dll using a fully-qualified path (Aaron Klotz)
• cleanup SPK and MSI downloads (tailscale#10085) (Andrew Lytvynov)
• do not recursively delete dirs in cleanupOldDownloads (tailscale#10093) (Andrew Lytvynov)
• 16c59d2: VERSION.txt: this is v1.52.1 (Tyler Smalley)
• 79be16d: Merge tag 'v1.52.1' into sunos-1.52 (Nahum Shalman)

v1.52.0-sunos

Commits

• update win/apple licenses #9519 (License Updater)
• 098d110: VERSION.txt: this is v1.51.0 (Aaron Klotz) #9532
• 530aaa5: net/dns: retry forwarder requests over TCP (Andrew Dunham) #9288
• 6516206: ipn/ipnlocal: close foreground sessions on SetServeConfig (Marwan Sulaiman) #9447
• bdd9eec: cmd/k8s-operator: fix reconcile filters (tailscale#9533) (Irbe Krumina) #9533
• 578b357: wgengine/netstack: use buffer pools for UDP packet forwarding (Val) #9518
• c608660: wgengine,net,ipn,disco: split up and define different types of MTU (Val) #9518
• refactor methods to get values from registry to also return (tailscale#9536) #9536 (Claire Wang)
• 0275afa: ipn/ipnlocal: prevent putting file if file already exists (tailscale#9515) (Rhea Ghosh) #9515
• 3e298e9: go.toolchain.rev: bump go (Brad Fitzpatrick) #9541
• d31460f: net/portmapper: fix invalid UPnP metric name (Andrew Dunham) #9552
• 697f92f: client/web: refactor serveGetNodeData (Sonia Appasamy) #9556
• 2066f9f: util/linuxfw: fix crash in DelSNATRule when no rules are found (James Tucker) #9557
• 80206b5: wgengine/magicsock: add nodeid to panic condition on public key reuse (James Tucker) #9560
• ca43961: types/key: update some doc strings for public key serialization (James Tucker) #9561
• 5c2b2fa: ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes (James Tucker) #9498
• use NodeCapMap in CheckFunnel #9567 (Maisem Ali)
• 5d62b17: client/web: add login client mode to web.Server (Sonia Appasamy) #9311
• 2c0f0ee: tool/gocross: disable Linux static linking if GOCROSS_STATIC=0 (Brad Fitzpatrick) #9571
• 5b3f5ea: control/controlclient: fix leaked http2 goroutines on shutdown (Brad Fitzpatrick) #9572
• 5429ee2: client/web: add debug mode for web client ui updates (Sonia Appasamy) #9562
• 2c92f94: cmd/testwrapper: output machine-readable JSON on test flakes (Brad Fitzpatrick) #9575
• b5b4298: go.mod,*: bump gvisor (Andrea Barisani) #9252
• f50b2a8: wgengine/netstack: refactor address construction and conversion (Andrea Barisani) #9252
• 2a7b3ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9576
• 856d32b: cmd/testwrapper: include flake URL in JSON metadata (Brad Fitzpatrick) #9582
• 4823a7e: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry) #9573
• add a test for restarting a tsnet server, fix Windows #9588 (Brad Fitzpatrick)
• d71184d: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali) #9590
• add syspolicy package (tailscale#9550) #9550 (Claire Wang)
• aae1a28: go.mod: add test that replace directives aren't added in oss (Brad Fitzpatrick) #9594
• 71f2c67: go.mod: bump wingoes for cross-platform HRESULT definition (James Tucker) #9595
• 87bc831: go.mod,cmd/tsconnect: bump esbuild (James Tucker) #9578
• 84acf83: go.mod,net/dnsfallback: bump go4.org/netipx (James Tucker) #9578
• 0c8c374: go.mod: bump all dependencies except go-billy (James Tucker) #9578
• 8833dc5: util/set: add some useful utility functions for Set (tailscale#9535) (Chris Palmer) #9535
• update tailscale{,d} licenses #9577 (License Updater)
• 16fa3c2: wgengine/magicsock: use x/sys/unix constants for UDP GSO (tailscale#9597) (Jordan Whited) #9597
• gonna take some time to add the words we never had #9598 (Charlotte Brandhorst-Satzkorn)
• 41b05e6: go.mod: bump wireguard-go (James Tucker) #9563
• i can't help but rave about these additions #9599 (Charlotte Brandhorst-Satzkorn)
• ee90cd0: cmd/cloner,*: optimize nillable slice cloner (James Tucker) #9601
• 324f0d5: cmd/cloner,*: revert: optimize nillable slice cloner (James Tucker) #9603
• a56e58c: util/syspolicy: add read boolean setting (tailscale#9592) (Claire Wang) #9592
• e03f0d5: net/dnsfallback: remove net/dnsfallback go:generate line (James Tucker) #9602
• ab810f1: cmd/cloner: add regression test for slice nil/empty semantics (James Tucker) #9604
• d2ea9bb: cmd/cloner: fix typo in test type's name (Brad Fitzpatrick) #9606
• 72e5374: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9596
• 5f5c914: util/slicesx: add EqualSameNil, like slices.Equal but same nilness (Brad Fitzpatrick) #9609
• 425cf9a: tailcfg, all: use []netip.AddrPort instead of []string for Endpoints (Brad Fitzpatrick) #9610
• 67926ed: wgengine/magicsock: add MTU to addrLatency and rename to addrQuality (Val) #9486
• 4130851: wgengine/magicsock: probe but don't use path MTU from CLI ping (Val) #9486
• c26d91d: net/tstun: remove unused function DefaultMTU() (Val) #9621
• 656a77a: net/packet: implement methods for rewriting v6 addresses (Tom DNetto) #9542
• update tailscale{,d} licenses #9600 (License Updater)
• update win/apple licenses #9587 (License Updater)
• 73e53dc: cmd/tailscale,ipn/ipnlocal: print debug component names (Val) #9628
• b775a37: util/httpm, all: add a test to make sure httpm is used consistently (Brad Fitzpatrick) #9635
• efac2cb: tool/gocross: merge user's build tags and implicitly added build tags together (Brad Fitzpatrick) #9639
• eb22c0d: wgengine/magicsock: use binary.NativeEndian for UDP GSO control data (tailscale#9640) (Jordan Whited) #9640
• 286c6ce: net/dns/resolver: race UDP and TCP queries (tailscale#9544) (Andrew Dunham) #9544
• 5902d51: util/race: add test to confirm we don't leak goroutines (Andrew Dunham) #9641
• 3655fb3: control/controlclient: fix deadlock in shutdown (Maisem Ali) #9646
• 730cdfc: Revert "tool/gocross: disable Linux static linking if GOCROSS_STATIC=0" (Brad Fitzpatrick) #9648
• 91b9899: net/dns/resolver: fix flaky test (Andrew Dunham) #9647
• 93c6e1d: tstest/deptest: add check that x/exp/{maps,slices} imported as xfoo (Brad Fitzpatrick) #9650
• e499a6b: release/dist/unixpkgs: revert iptables move to Recommends, make it Depends (Brad Fitzpatrick) [tailscale#9656]...

v1.50.1-sunos

Commits

• 027b455: net/portmapper: fix invalid UPnP metric name (Andrew Dunham)
• use NodeCapMap in CheckFunnel (Maisem Ali)
• d9e8f6b: cmd/containerboot: set TS_AUTH_ONCE default to true. (Denton Gentry)
• 95e1c84: cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is set (Maisem Ali)
• 8749388: VERSION.txt: this is v1.50.1 (Denton Gentry)
• 596cf05: Merge tag 'v1.50.1' into sunos-1.50 (Nahum Shalman)

v1.50.0-sunos

Commits

• remove wasm file, no-op stubs, make OS-specific funcs consistent #9059 (Brad Fitzpatrick)
• 5b6a90f: types/logger, cmd/tailscale/cli: flesh out, simplify some non-unix build tags (Brad Fitzpatrick) #9060
• 7825074: .github: fix flakehub-publish-tagged.yml glob (tailscale#9066) (shayne) #9066
• 46b0c91: .github: update flakehub workflow to support existing tags (tailscale#9067) (shayne) #9067
• 824cd02: client/web: cache csrf key when running in CGI mode (Will Norris) #9055
• 349c05d: client/web: refresh on tab focus (Sonia Appasamy) #9069
• 5fb1695: util/osdiag, util/osdiag/internal/wsc: add code to probe the Windows Security Center for installed software (Aaron Klotz) #8997
• d45af7c: release/dist/cli: add sign-key and verify-key-signature commands (tailscale#9041) (Andrew Lytvynov) #9041
• a61a9ab: cmd/containerboot: reapply known args on restart (Maisem Ali) #9073
• ff7f4b4: cmd/testwrapper: fix off-by-one error in maxAttempts check (Maisem Ali) #9078
• 05486f0: client/web: move synology and qnap logic into separate files (Will Norris) #9075
• 0c3d343: client/web: invert auth logic for synology and qnap (Will Norris) #9075
• dc8287a: client/web: enforce full path for CGI platforms (Will Norris) #9075
• b42c4e2: cmd/dist,release/dist: add distsign signing hooks (tailscale#9070) (Andrew Lytvynov) #9070
• remove Arch support (tailscale#9081) #9081 (Andrew Lytvynov)
• f3077c6: client/web: add self node cache (Sonia Appasamy) #9077
• de9ba1c: clientupdate/distsign/roots: add temporary dev root key (tailscale#9080) (Andrew Lytvynov) #9080
• adjust some build tags for plan9 #9082 (Brad Fitzpatrick)
• 24d41e4: cmd/sniproxy: add port forwarding and prometheus metrics (Denton Gentry) #8979
• 12ac672: cmd/k8s-operator: handle changes to services w/o teardown (Maisem Ali) #9076
• 320f77b: cmd/containerboot: add support for setting ServeConfig (Maisem Ali) #9074
• c8dea67: cmd/k8s-operator: add support for Ingress resources (Maisem Ali) #9048
• 535db01: scripts/installer: add Kaisen, Garuda, Fedora-Asahi. (Denton Gentry) #9061
• 6b6a8cf: util/osdiag: add query for Windows page file configuration and status (Aaron Klotz) #9091
• check for key-based debug access before XFF check (tailscale#9093) #9093 (Dave Anderson)
• 4828e4c: client/web: move api handler into web.go (Sonia Appasamy) #8826
• ce5909d: release/dist: remove extra Close on a signed file (tailscale#9094) (Andrew Lytvynov) #9094
• 9430481: cmd/containerboot: account for k8s secret reflection in fsnotify (Maisem Ali) #9095
• e80ba4c: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #9019
• fe91160: flake.nix: use Go 1.21 to build tailscale flake (David Anderson) #9101
• b407fde: flake.nix: use Go 1.21 to build tailscale, for real this time (David Anderson) #9102
• e7d1538: types/views: add SliceEqual, like std slices.Equal (Brad Fitzpatrick) #9105
• 4af22f3: util/deephash: add IncludeFields, ExcludeFields HasherForType Options (Brad Fitzpatrick) #9104
• ce4bf41: cmd/k8s-operator: support being the default loadbalancer controller (Mike Beaumont) #8922
• 3451b89: cmd/k8s-operator: put Tailscale IPs in Service ingress status (Mike Beaumont) #8817
• c86a610: cmd/tailscale, net/portmapper: add --log-http option to "debug portmap" (Andrew Dunham) #8998
• 18d9c92: release/dist/cli: add verify-package-signature command (tailscale#9110) (Andrew Lytvynov) #9110
• be5bd1e: client/web: skip authorization checks for static assets (Will Norris) #9083
• d74c771: client/web: always use new web client; remove old client (Will Norris) #9083
• 346dc5f: ipn/ipnlocal: move C2NUpdateResponse to c2ntypes.go (tailscale#9112) (Chris Palmer) #9112
• fcbb2bf: net/memnet: export the network name (tailscale#9111) (Joe Tsai) #9111
• f92e6a1: cmd/k8s-operator: update RBAC to allow creating events (Maisem Ali) #9116
• 0c6fe94: cmd/k8s-operator: add matching family addresses to status (Maisem Ali) #9117
• download SPK and MSI packages with distsign (tailscale#9115) #9115 (Andrew Lytvynov)
• use SPKsVersion instead of Version (tailscale#9118) #9118 (Andrew Lytvynov)
• a79b1d2: control/controlclient: convert PeersChanged nodes to patches internally (Brad Fitzpatrick) #9021
• 590c693: types/logger: add AsJSON (Brad Fitzpatrick) #9119
• a64593d: types/logger: fix test failure I missed earlier (Brad Fitzpatrick) #9124
• 55bb731: control/controlclient: replace a status func with Observer interface (Brad Fitzpatrick) #9120
• 8ba07aa: ipn/iplocale: remove unused argument to shouldUseOneCGNATRoute (Val) #9127
• 3bce963: derp/derphttp: fix data race and crash in proxy dial error path (Brad Fitzpatrick) #9133
• 6b882a1: control/controlclient: clean up a few little things (Brad Fitzpatrick) #9125
• 7aea219: client/web: pull SynoToken logic into apiFetch (Sonia Appasamy) #9136
• 6dfa403: cmd/tailscaled: default to userspace-networking on plan9 (Brad Fitzpatrick) #9138
• 11ece02: net/{interfaces,netmon}: remove "interesting", EqualFiltered API (Brad Fitzpatrick) #9100
• 930e6f6: types/opt: use switch in Bool.UnmarshalJSON (tailscale#9140) (Joe Tsai) #9140
• c919ff5: cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating (Maisem Ali) #9139
• da6eb07: client/web: add localapi proxy (Sonia Appasamy) #9097
• 1cd03bc: client/web: remove self node on server (Sonia Appasamy) #9142
• e952564: client/web: pipe unraid csrf token through apiFetch (Sonia Appasamy) #9143
• 8b492b4: net/wsconn: accept a remote addr string and plumb it through (David Anderson) #9146
• detect when tailscale is installed without package manager (tailscale#9137) #9137 (Andrew Lytvynov)
• 7538f38: cmd/containerboot: fix broken tests (Maisem Ali) #9147
• b90b9b4: client/web: fix data race (Maisem Ali) #9151
• ae747a2: cmd/testwrapper: handle timeouts as test failures (Maisem Ali) #9149
• fe709c8: cmd/k8s-operator,cmd/containerboot: add kube egress proxy (tailscale#9031) (Irbe Krumina) #9031
• 29a35d4: cmd/sniproxy: switch to peterbourgon/ff for flags (Denton Gentry) #9148
• 17438a9: cm/k8s-operator,cmd/contain...

v1.48.2-sunos

Commits

• 7a1205d: wgengine/magicsock: clear endpoint state in noteConnectivityChange (James Tucker) #9350
• 572b0a4: wgengine/magicsock: update lastfullping comment to include wg only (Charlotte Brandhorst-Satzkorn) #9350
• 8b36386: wgengine/magicsock: clear out endpoint statistics when it becomes bad (James Tucker) #9350
• ffd89ac: wgengine/magicsock: improve endpoint selection for WireGuard peers with rx time (James Tucker) #9350
• ab970fe: VERSION.txt: this is v1.48.2 (James Tucker)
• 386046f: Merge tag 'v1.48.2' into sunos-1.48 (Nahum Shalman)

v1.48.1-sunos

Commits

• parse /etc/synoinfo.conf to get CPU arch (tailscale#8940) (tailscale#8950) #8950 (Andrew Lytvynov)
• 7286226: 1.48 cherry-picks for nftables (tailscale#8989) (Andrew Lytvynov) #8989
• bd914d5: net/portmapper: never select port 0 in UPnP (tailscale#8996) (Andrew Lytvynov) #8996
• 0e9f04c: VERSION.txt: this is v1.48.1 (Andrew Lytvynov)
• 0ae65c2: Merge tag 'v1.48.1' into sunos-1.48 (Nahum Shalman)

v1.48.0-sunos

Commits

• 486ab42: VERSION.txt: this is v1.47.0 (tailscale#8654) (Andrea Gottardo) #66,#8654
• guard against key-length panics when verifying signatures #66,#8653 (Tom DNetto)
• 3f6b0d8: cmd/tailscale/cli: make tailscale update query softwareupdate (tailscale#8641) (Chris Palmer) #66,#8641
• efd6d90: cmd/tailscale/cli: implement update for arch-based distros (tailscale#8655) (Andrew Lytvynov) #66,#8655
• 388b124: net/dns: detect when libnss_resolve is used (Anton Tolchanov) #8640
• 3c53bed: cmd/tailscale/cli: limit Darwin-only option to Darwin (tailscale#8657) (Chris Palmer) #8657
• 32d486e: cmd/tailscale/cli: ensure custom UsageFunc is always set (tailscale#8665) (Chris Palmer) #8665
• 7560435: tstest/deptest: add test-only package to unify negative dep tests (Brad Fitzpatrick) #8668
• 88cc0ad: util/linuxfw: remove yet-unused code to fix linux/arm64 crash (Brad Fitzpatrick) #8668
• ignore io.EOF from sftp.Server.Serve #8670 (Joe Tsai)
• use tstime (tailscale#8607) #8607 (Claire Wang)
• 907c56c: api.md: add documentation to API endpoint about SCIM group warnings (Jenny Zhang) #8676
• deprecate Debug, flesh out Node.DERP docs #8681 (Brad Fitzpatrick)
• 453620d: go.toolchain.rev: bump Go version (Brad Fitzpatrick) #8685
• 2a6c237: net/dns: overwrite /tmp/resolv.conf on gokrazy (Michael Stapelberg) #8688
• add UserProfile.Groups #8693 (Brad Fitzpatrick)
• 894b237: cmd/tailscale/cli: implement update for dnf/yum-based distros (tailscale#8678) (Andrew Lytvynov) #8678
• update tailscale{,d} licenses #8610 (License Updater)
• 45b5d09: net/art: fix running tests outside of CI (David Anderson) #8611
• 486195e: net/art: make each strideTable track the IP prefix it represents (David Anderson) #8611
• fcf4d04: net/art: implement path compression optimization (David Anderson) #8611
• ac657ca: net/art: add debug hooks to strideTable (David Anderson) #8611
• 9cc3f7a: net/art: fix format of debug output (David Anderson) #8611
• b145a22: net/art: add more exhaustive table testing (David Anderson) #8611
• aaca911: net/art: add another consistency test for insert/delete (David Anderson) #8611
• 1e6f0bb: net/art: fix slowPrefixTable bugs found by fuzzing (David Anderson) #8611
• 736a442: net/art: fix comment typo (David Anderson) #8611
• de5c6ed: net/art: document valid values of strideTable.prefix (David Anderson) #8611
• 8478358: net/art: use "index", not "idx" in function names (David Anderson) #8611
• b242e2c: net/art: reword confusing function docstring (David Anderson) #8611
• b76d8a8: net/art: document return value of strideTable.delete (David Anderson) #8611
• 125b982: net/art: make Table.Get alloc-free (David Anderson) #8611
• 44ad7b3: net/art: factor out picking the right strideTable for addr family (David Anderson) #8611
• f1cd674: net/art: move slice closer to its use (David Anderson) #8611
• 4f14ed2: net/art: use encoding/binary for address bit twiddling (David Anderson) #8611
• 6afffec: net/art: use more intelligible, go-ish state tracking in table.Get (David Anderson) #8611
• 306deea: cmd/tailscale/cli,version/distro: update support for Alpine (tailscale#8701) (Andrew Lytvynov) #8701
• 1ecc16d: tailcfg,ipn/ipnlocal,wgengine: add values to PeerCapabilities (Maisem Ali) #8709
• 9edb848: cmd/tailscale/cli: implement update on FreeBSD (tailscale#8710) (Andrew Lytvynov) #8710
• c2831f6: wgengine/magicsock: delete unused stuff (David Anderson) #8716
• f7016d8: wgengine/magicsock: factor out endpoint into its own file (David Anderson) #8717
• cde37f5: wgengine/magicsock: factor out peerMap into separate file (David Anderson) #8718
• move disco pcap helper to disco package #8718 (David Anderson)
• 8477735: wgengine/magicsock: factor out more separable parts (David Anderson) #8721
• 9d89e85: wgengine/magicsock: document mysterious-looking assignment (David Anderson) #8722
• introduce exit-node subcommand to list and filter exit nodes #8617 (Charlotte Brandhorst-Satzkorn)
• aa37be7: api.md: update device authorize API docs to allow for deauth (tailscale#8728) (tinku-tailscale) #8728
• c1ecae1: ipn/{ipnlocal,localapi}: actually renew certs before expiry (tailscale#8731) (Andrew Lytvynov) #8731
• use tstime (tailscale#8597) #8597 (Claire Wang)
• use tstime (tailscale#8634) #8634 (Claire Wang)
• update exp/slices and fix call sites #8740 (David Anderson)
• 6114247: types/logid: add a Compare method (David Anderson) #8742
• update tailscale{,d} licenses #8741 (License Updater)
• 68f8e56: wgengine/magicsock: remove dead code (tailscale#8745) (salman aljammaz) #8745
• add helper to unmarshal PeerCap values #8747 (Maisem Ali)
• 5ebb271: derp/derphttp: add optional Client.BaseContext hook (Brad Fitzpatrick) #8752
• ed46442: client/tailscale/apitype: document never-nil property of WhoIsResponse (David Anderson) #8758
• eef15b4: cmd/dist,release/dist: sign release tarballs with an ECDSA key (tailscale#8759) (Andrew Lytvynov) #8759
• ec9213a: cmd/sniproxy: add client metrics (Denton Gentry) #8755
• 7adf15f: cmd/tailscale/cli, util/winutil/authenticode: flesh out authenticode support (Aaron Klotz) #8285
• implement lock revoke-keys command #8644 (Tom DNetto)
• update tailscale{,d} licenses #8764 (License Updater)
• 66e46bf: ipnlocal, net/*: deprecate interfaces.GetState, use netmon more for it (Brad Fitzpatrick) #8765
• add CapabilityHTTPS const...

v1.46.1-sunos

Commits

• 6d28281: illumos/solaris support rebased onto 1.46.0 (Nahum Shalman)
• mitigation for odd bug (Nahum Shalman)
• 1670183: tstest/deptest: add test-only package to unify negative dep tests (Brad Fitzpatrick) #8674
• 0e950af: util/linuxfw: remove yet-unused code to fix linux/arm64 crash (Brad Fitzpatrick) #8674
• ignore io.EOF from sftp.Server.Serve #8674 (Joe Tsai)
• guard against key-length panics when verifying signatures (Tom DNetto)
• 2d3223f: VERSION.txt: this is v1.46.1 (Andrea Gottardo)
• 7c62ea7: Merge tag 'v1.46.1' into sunos-1.46 (Nahum Shalman)

v1.46.0-sunos

Commits

• 30d9201: VERSION.txt: this is v1.45.0 (Charlotte Brandhorst-Satzkorn) #8400
• d4de60c: .github: Bump actions/checkout from 1 to 3 (dependabot[bot]) #8379
• 61886e0: ssh/tailssh: fix double race condition with non-pty command (tailscale#8405) (Joe Tsai) #8405
• 8b80d63: wgengine/magicsock: clarify a log message is a warning, not an error (Brad Fitzpatrick) #8411
• fbacc0b: go.toolchain: switch to tailscale.go1.21 (tailscale#8415) (phirework) #8415
• 7c1068b: util/goroutines: let ScrubbedGoroutineDump get only current stack (Brad Fitzpatrick) #8426
• 4a58b1c: release/dist/synology: remove 'version' field from ui/config (David Anderson) #8233
• bfe5623: tool/gocross: make gocross behave with pre-release Go toolchains (David Anderson) #8428
• 2a9817d: api.md: add info for key description (tailscale#8429) (phirework) #8429
• add location field to hostinfo #8360 (Charlotte Brandhorst-Satzkorn)
• ovuliferous was a bit too much, but... #8432 (Brad Fitzpatrick)
• add ShardedMap type #8439 (Brad Fitzpatrick)
• c11af12: .github: actually run tests in CI (Maisem Ali) #8440
• make lxcfs container check more specific #8445 (Anton Tolchanov)
• 8e84048: cmd/testwrapper: only retry flaky failed tests (Maisem Ali) #7287
• expose field to configure Wireguard port #8447 (Tom DNetto)
• 77f5679: types/key: add test for NodePublic.Shard (Brad Fitzpatrick) #8443
• e263761: ipn/ipnlocal: validate ping type (tailscale#8458) (valscale) #8458
• adjust case of "IPv4" and "IPv6" #8456 (Brad Fitzpatrick)
• 832f102: net/netutil: parse IP forwarding val as int, not bool (tailscale#8455) (Ross Zurowski) #8455
• update location docs #8461 (Charlotte Brandhorst-Satzkorn)
• 243ce6c: util/linuxfw: decoupling IPTables logic from linux router (KevinLiang10) #8362
• d9eca20: net/tcpinfo: add package to allow fetching TCP information (Andrew Dunham) #8414
• use new net/tcpinfo package #8414 (Andrew Dunham)
• add ShardedMap.Mutate #8471 (Brad Fitzpatrick)
• update win/apple licenses #8449 (License Updater)
• update android licenses #8369 (License Updater)
• b0a984d: util/lru: add a package for a typed LRU cache (Brad Fitzpatrick) #8473
• 97ee0bc: cmd/tailscale: improve error message when signing without a tailnet lock key (Tom DNetto) #8465
• 12a2221: cmd/testwrapper/flakytest: clearly describe why TestFlakeRun fails (Maisem Ali) #8475
• do not panic when a panic logs #8478 (Maisem Ali)
• e42be5a: tstime/mono: fix Time.Unmarshal (tailscale#8480) (Joe Tsai) #8480
• 2e19790: types/views: add JSON marshal/unmarshal and AsMap to Map (Maisem Ali) #8488
• 79ee6d6: tsweb/varz: use default metrics.LabelMap.Label on serialization (Brad Fitzpatrick) #8500
• 2e4e7d6: cmd/testwrapper: output packages tested (Maisem Ali) #8501
• 1ca5dcc: cmd/testwrapper: stream output results (Maisem Ali) #8504
• 6ebd87c: util/linuxfw: add new arch build constraints (KevinLiang10) #8503
• add TestLoopbackSOCKS5 as flaky test #8503 (KevinLiang10)
• 0a86705: release/dist: add helper to build Go binaries with custom tags (David Anderson) #8513
• add LabelMap.GetIncrFunc #8514 (Brad Fitzpatrick)
• 0c427f2: docs/k8s: don't call kubectl directly from Makefile (David Wolever) #8512
• cb53846: tempfork/heap: add copy of Go's container/heap but using generics (Brad Fitzpatrick) #8537
• ack Miles Prower (tailscale#8479) #8479 (Claire Wang)
• fd8c8a3: client/tailscale: add API for verifying network lock signing deeplink (Aaron Klotz) #8540
• prepare for Clock API changes #8542 (Adrian Dewhurst)
• fix tvOS network extension bundle identifier (tailscale#8545) #8545 (Andrea Gottardo)
• 92fb80d: tstest, tstime: mockable timers and tickers (Adrian Dewhurst) #8464
• 9d1a3a9: control/controlclient: use ctx passed down to NoiseClient.getConn (Maisem Ali) #8552
• 339397a: wgengine/magicsock: remove noV4/noV6 check in addrForSendWireGuardLocked (Charlotte Brandhorst-Satzkorn) #8541
• mark TestLoopbackLocalAPI as flakey #8558 (Charlotte Brandhorst-Satzkorn)
• 7b1c3df: tailcfg,etc: remove unused tailcfg.Node.KeepAlive field (Brad Fitzpatrick) #8559
• add json omitempty to DNSConfig.ExitNodeFilteredSet #8561 (Brad Fitzpatrick)
• a7648a6: net/dnsfallback: run recursive resolver and compare results (Andrew Dunham) #8335
• 8c0572e: go.mod: bump wireguard-go (Adrian Dewhurst) #8575
• cd313e4: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8576
• 60ab808: logpolicy, various: allow overriding log function (Andrew Dunham) #8574
• rename CapTailnetLockAlpha -> CapTailnetLock #8548 (Tom DNetto)
• fix race condition with sockstats label (tailscale#8578) #8578 (Joe Tsai)
• 8cda647: cmd/testwrapper: handle build failures (Maisem Ali) #8520
• 96d7af3: cmd/derper,tsweb: consistently add HTTP security headers (tailscale#8579) (Andrew Lytvynov) #8579
• update win/apple licenses #8582 (License Updater)
• update tailscale{,d} licenses #8577 ([License Updater](https://github.com/nshalman/tailscale...

v1.44.2-sunos

Commits

• a377e13: wgengine/magicsock: remove noV4/noV6 check in addrForSendWireGuardLocked (Charlotte Brandhorst-Satzkorn)
• mitigation for odd bug (Nahum Shalman)
• add notes about likely bug identity and fix (Nahum Shalman)
• fix hostname for custom http ports (Will Norris)
• dcac3ed: VERSION.txt: this is v1.44.2 (salman)
• cbf59e3: Merge tag 'v1.44.2' into sunos-1.44 (Nahum Shalman)