Releases: nshalman/tailscale
Releases · nshalman/tailscale
v1.44.0-sunos
Commits
- 3d180a1: VERSION.txt: this is v1.43.0 (Will Norris) #8197
- add Poller.IncludeLocalhost option #8172 (Marwan Sulaiman)
- provide authority StateID in NetworkLockStatus response (tailscale#8200) #8200 (Andrea Gottardo)
- cb94ddb: go.toolchain.rev: bump (Brad Fitzpatrick) #8211
- fix go vet complaint on copy of lock value in tailchonk_test.go (tailscale#8208) #8208 (valscale)
- c4fe9c5: go.toolchain.rev: bump, again (Brad Fitzpatrick) #8212
- c0b4a54: release/dist/cli: correctly handle absolute build outputs in manifest (David Anderson) #8213
- 399a807: wgengine/netstack: use ping6 on BSD platforms (Denton Gentry) #8227
- 32e0ba5: release/dist/synology: build synology packages with cmd/dist (David Anderson) #8218
- fc5b137: release/dist/synology: build hi3535 as armv5, not armv7 (David Anderson) #8234
- 525b9c8: .github: bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 (dependabot[bot]) #8092
- 6a156f6: client/tailscale: support deauthorizing a device (Anton Tolchanov) #8242
- 1a691ec: cmd/k8s-operator: update controller-runtime to v0.15 (Vince Prignano) #8169
- 88ee857: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8247
- 2aa8299: cmd/tailscaled, util/winutil: log our registry keys during tailscaled startup (Aaron Klotz) #8140
- 9d09c82: ipn/ipnlocal: add more logging during profile migration (Andrew Dunham) #8252
- update win/apple licenses #8253 (License Updater)
- 07eacdf: ipn/ipnlocal: renew certificates based on lifetime (Andrew Dunham) #8258
- 67882ad: scripts/installer.sh: add BlendOS support. (Denton Gentry) #8265
- dc1d882: ipn/ipnlocal: [serve/funnel] add forwarded host and proto header (tailscale#8224) (Heiko Rothe) #8224
- 570cb01: ipn/localapi: require only read permission for WatchIPNBus (tailscale#7798) (Dominic Black) #7798
- remove misspelling of trex #8270 (DJRHails)
- 4321d1d: scripts/installer.sh: add sle-micro-rancher. (Denton Gentry) #8264
- update tailscale{,d} licenses #8248 (License Updater)
- 6554a0c: build_dist.sh: use $go consistently. (Denton Gentry) #8271
- 64f16f7: net/dnscache: use PreferGo on Windows. (Denton Gentry) #8263
- d3c8c3d: ssh/tailssh: Max Username Length 256 for linux (Derek Burdick) #8278
- add a synchronous Poll method #8275 (Marwan Sulaiman)
- document how to use Dir with multiple servers per process (tailscale#8286) #8286 (Xe Iaso)
- a353ae0: tool/gocross: handle TVOS_DEPLOYMENT_TARGET (tailscale#8292) (Andrea Gottardo) #8292
- remove async functionality #8280 (Marwan Sulaiman)
- detect tvOS by checking XPC_SERVICE_NAME (tailscale#8295) #8295 (Andrea Gottardo)
- 12f8c98: util/cmpx: add package with cmp-like things from future Go releases (Brad Fitzpatrick) #8298
- 699996a: go.toolchain.rev: upgrade to Go 1.20.5 (tailscale#8304) (phirework) #8304
- use cmpx.Or where it made sense #8305 (Brad Fitzpatrick)
- 2a9d46c: wgengine/magicsock: prefer private endpoints to public ones (Andrew Dunham) #8095
- 62130e6: util/slicesx: add Partition function (Andrew Dunham) #8309
- 2e0aa15: ssh/tailssh: add support for remote/reverse port forwarding (Maisem Ali) #8313
- f077b67: net/dns/recursive: add initial implementation of recursive DNS resolver (Andrew Dunham) #8115
- here comes trouble #8319 (Charlotte Brandhorst-Satzkorn)
- adjust some build tags for wasi #8321 (Brad Fitzpatrick)
- 167e154: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8322
- 1543e23: net/tstun, tsnet: make happier on WASI (Brad Fitzpatrick) #8325
- 6172f95: .github: Bump golangci/golangci-lint-action from 3.4.0 to 3.6.0 (dependabot[bot]) #8327
- update tailscale{,d} licenses #8323 (License Updater)
- 5b11068: wgengine/netstack: increase maxInFlightConnectionAttempts (Denton Gentry) #8329
- fe95d81: ipn/ipnlocal,wgengine/netstack: move LocalBackend specifc serving logic to LocalBackend (Maisem Ali) #8311
- update win/apple licenses #8331 (License Updater)
- a076213: net/memnet: add optional Listener.NewConn config knob (Brad Fitzpatrick) #8332
- 4dda949: tailscale ping: note that
-c
can take 0 for infinity (Graham Christensen) #8333 - provide verify-deeplink local API endpoint (tailscale#8303) #8303 (Andrea Gottardo)
- 27a0f0a: Remove unused dependency from dockerfile (tailscale#8343) (Claire Wang) #8343
- 80692ed: .github/workflows: Add docker build check (tailscale#8345) (Claire Wang) #8345
- e1cdcf7: ipn/ipnlocal: add identity headers to HTTP serve proxy (Sonia Appasamy) #8297
- update win/apple licenses #8353 (License Updater)
- c783f28: tool/gocross: properly set simulator deployment target (tailscale#8355) (Nick O'Neill) #8355
- update android licenses #8368 (License Updater)
- 1302295: Dockerfile.base: install iputils (Maisem Ali) #8371
- b6d20e6: go.mod, net/dns/recursive: update github.com/miekg/dns (Andrew Dunham) #8382
- 909e9ea: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8383
- add function for generating signing deeplinks (tailscale#8385) #8385 (Ross Zurowski)
- 2ae670e: ssh/tailssh: work around lack of scontext in SELinux (Maisem Ali) #8251
- allow monitoring of nodes marked as STUN only in default derpmap (tailscale#8391) #8391 ([valscale](https://github.com/n...
v1.42.0-sunos
Builds
- deps: bump github.com/docker/docker #7790 (dependabot[bot])
Commits
- 1145b97: VERSION.txt: this is v1.41.0 (Denton Gentry) #7988
- 161d1d2: net/ping,netcheck: add v6 pinging capabilities to pinger (tailscale#7971) (Charlotte Brandhorst-Satzkorn) #7971
- d78b334: cmd/derper: disable http2 (Kyle Carberry) #7701
- 8032b96: .github/workflows: add recency bias to action cache keys (James Tucker) #7980
- charlotte 1 spell-checking-linter 0 (tailscale#7993) #7993 (Charlotte Brandhorst-Satzkorn)
- add documentation to Map.Range #7996 (James Tucker)
- 633d08b: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7954
- 042f82e: build_dist.sh: make cross-compilation friendly for env CC specified (ayanamist) #7991
- add Map.Len to get the length of the Map #7997 (James Tucker)
- a82f275: cmd/sniproxy: Set App name in tsnet hostinfo (Denton Gentry) #8004
- 1f4a345: .github: test installer script in CI in docker (Anton Tolchanov) #8001
- update win/apple licenses #7978 (License Updater)
- 42fd964: control/controlclient: use dnscache.Resolver for Noise client (Andrew Dunham) #8008
- c5bf868: ssh/tailssh: improve debug logging around revoked sessions (Tom DNetto) #8014
- bcf7b63: wgengine/magicsock: add hysteresis to endpoint selection (Andrew Dunham) #7940
- 3ae7140: net/tstun: handle exit nodes in NAT configs (Maisem Ali) #8021
- add a README.md with some docs #8019 (Brad Fitzpatrick)
- ddb4040: wgengine/magicsock: add address selection for wireguard only endpoints (tailscale#7979) (Charlotte Brandhorst-Satzkorn) #7979
- 4d79270: wgengine/magicsock: annotate, skip flaky TestIsWireGuardOnlyPickEndpointByPing (Brad Fitzpatrick) #8038
- be190e9: ssh/tailssh: restore support for recording locally (Maisem Ali) #8023
- update tailscale{,d} licenses #8040 (License Updater)
- 459744c: .github: mark bots for exemption by issuebot (tailscale#8041) (M. J. Fromberger) #8041
- 9e9ea6e: go.mod: bump all deps possible that don't break the build (Brad Fitzpatrick) #8044
- update tailscale{,d} licenses #8046 (License Updater)
- 5783adc: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8039
- 787fc41: scripts/installer.sh: check connectivity with pkgs.tailscale.com (Anton Tolchanov) #8002
- support tailscaled-env.txt on macOS too #8048 (Brad Fitzpatrick)
- f46c1ae: go.mod: bump k8s libs (Maisem Ali) #8051
- 4860522: go.mod: bump gvisor (James Tucker) #8049
- 1c6ff31: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8053
- 5def4f4: go.mod: bump goreleaser deps (James Tucker) #8050
- d1ce7a9: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8056
- add detection and Taildrop for Unraid #8029 (Derek Kaser)
- add package with System type to unify subsystem init, discovery #4754 (Brad Fitzpatrick)
- 9ed3a06: net/netns: fix segv when no tailscale interface is found (James Tucker) #8064
- 8864112: ipn/ipnlocal: bound how long cert fetchher checks for existing DNS records (Brad Fitzpatrick) #8068
- 8d3d48e: ipn/ipnlocal: add NodeKey func to return the public node NodeKey (Charlotte Brandhorst-Satzkorn) #8061
- update rename SSHFailureNotifyRequest and add EventType #8061 (Charlotte Brandhorst-Satzkorn)
- 68307c1: ssh/tailssh: send ssh event notifications on recording failures (Charlotte Brandhorst-Satzkorn) #8061
- 29ded8f: ssh/tailssh,tailcfg: add connID to ssheventnotifyrequest and castheader (Charlotte Brandhorst-Satzkorn) #8061
- bump capability version #8061 (Charlotte Brandhorst-Satzkorn)
- 5c38f09: tsweb/promvarz: fix repeated expvar definition in test (James Tucker) #8065
- b9fb8ac: fix sys.Set(router) issue will crash the daemon in some OSs (Chenyang Gao) #8073
- update android licenses #8081 (License Updater)
- update tailscale{,d} licenses #8054 (License Updater)
- properly handle vcs.modified when it's "false" #8087 (Chenyang Gao)
- 58ab66e: ssh/tailssh: support LDAP users for Tailscale SSH (Brad Fitzpatrick) #8098
- a743b66: ssh/tailssh: move some user-related code into new user.go (Brad Fitzpatrick) #8099
- update win/apple licenses #8012 (License Updater)
- 827abbe: cmd/k8s-operator: print version in startup logs (Craig Rodrigues) #7814
- 1ce0825: release/dist: add deb/rpm arch mappings for mipses (salman) #8104
- ea84fc9: net/sockstats: wait before reporting battery usage (Will Norris) #8105
- 4f454f4: util/codegen: support embedded fields (Brad Fitzpatrick) #8107
- d27a6e1: tool/gocross: fix incorrect relpath usage in bootstrap script (David Anderson) #8108
- cb2fd5b: cmd/tsconnect: fix forgotten API change for wasm (Brad Fitzpatrick) #8109
- reenable TestLoopbackSOCKS5 on Windows #8114 (James Tucker)
- da90fab: net/netcheck: reenable TestBasic on Windows (James Tucker) #8113
- be less aggressive about re-uploads (tailscale#8117) #8117 (Joe Tsai)
- b690593: util/set: add a basic map-based Set type (Brad Fitzpatrick) #8122
- 85215ed: cmd/k8s-operator: handle NotFound secrets (Maisem Ali) #8123
- allow the expiry time to be specified for new keys #7143 (Matt Brown)
- 678bb92: cmd/tailscale/cl...
v1.40.1-sunos
Commits
- de26c1c: net/tstun: handle exit nodes in NAT configs (Maisem Ali)
- 0549338: cmd/k8s-operator: print version in startup logs (Craig Rodrigues)
- 42e993e: release/dist: add deb/rpm arch mappings for mipses (salman)
- c6ebbdd: ssh/tailssh: restore support for recording locally (Maisem Ali)
- 176939f: ipn/ipnlocal: bound how long cert fetchher checks for existing DNS records (Brad Fitzpatrick)
- 2e44616: ssh/tailssh: support LDAP users for Tailscale SSH (Brad Fitzpatrick)
- ba3ff98: net/sockstats: wait before reporting battery usage (Will Norris)
- d268486: VERSION.txt: this is v1.40.1 (Rhea Ghosh)
- 25ef4a6: Merge tag 'v1.40.1' into sunos-1.40 (Nahum Shalman)
v1.40.0-sunos
Continuous Integration
- add more lints (tailscale#7909) #7909 (Andrew Dunham)
Commits
- 6d3490f: VERSION.txt: this is 1.39 (Denton Gentry) #7564
- 9ebab96: version/mkversion: don't break on tagged go.mod entries (David Anderson) #7566
- remove per-interface stats from Get #7565 (Mihai Parparita)
- df3996c: tool/gocross: bootstrap correctly on an older toolchain (David Anderson) #7395
- 9526858: control/controlclient: fix accidental backoff reset (Kurnia D Win) #7570
- 1f95bfe: tool/gocross: adjust Xcode flags to match new Xcode env (David Anderson) #7448
- 0498d5e: tool/gocross: delete bootstrap tarball downloads after use (David Anderson) #7579
- do not start logtail in tests #7580 (Maisem Ali)
- add test for Funnel connections #7519 (Maisem Ali)
- 9534783: tailscale/cmd: Warn for up --force-reauth over SSH without accepting the risk (tailscale#7575) (James 'zofrex' Sanderson) #7575
- 95494a1: .github: use unique names for jobs (Maisem Ali) #7586
- 82e067e: build_dist.sh: make cross-compilation friendly (Nahum Shalman) #7583
- 927e2e3: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7612
- 60a028a: .github: Bump peter-evans/create-pull-request from 4.1.4 to 4.2.4 (dependabot[bot]) #7611
- log client pubkeys on derp mesh probe failures #7614 (Anton Tolchanov)
- 50d211d: cmd/derpprobe: allow running all probes at the same time (Anton Tolchanov) #7614
- add optional debug logging for prober clients #7614 (Anton Tolchanov)
- e1fb687: cmd/tailscale/cli: fix inconsistency between serve text and example command (Mihai Parparita) #7593
- ccace1f: ssh/tailssh: fix privilege dropping on FreeBSD; add tests (Andrew Dunham) #7615
- ebc630c: net/interfaces: also allow link-local for AzureAppServices. (Denton Gentry) #7604
- df02bb0: tool/gocross: fail if the toolchain revision isn't findable (David Anderson) #7618
- e7a78bc: tool/gocross: support running from outside the repo dir (David Anderson) #7618
- d2dec13: net/sockstats: export cellular-only clientmetrics (Mihai Parparita) #7624
- f11c270: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #7628
- c9a4dbe: tool/gocross: correctly embed the git commit into gocross (David Anderson) #7629
- 39b2895: ssh/tailssh: make uid an int instead of uint64 (Andrew Dunham) #7630
- what?! a llama?! he's supposed to be dead! (tailscale#7623) #7623 (Sam Linville)
- add recorders field to SSHRule struct #7636 (Charlotte Brandhorst-Satzkorn)
- move recorders field from SSHRule to SSHAction #7639 (Charlotte Brandhorst-Satzkorn)
- 60cd4ac: cmd/tailscale/cli: move tskey-wrap functionality under lock sign (Tom DNetto) #7622
- 916aa78: ssh/tailssh: stream SSH recordings to configured recorders (Maisem Ali) #7640
- cc38060: scripts/installer.sh: Add Ubuntu Lunar Lobster 23.04. (Denton Gentry) #7641
- 7a97e64: ssh/tailssh: add more metadata to recording header (Maisem Ali) #7643
- d92047c: ssh/tailssh: allow recorders to be configured on the first or final action (Maisem Ali) #7644
- only record latency for successful probes #7632 (Anton Tolchanov)
- 731688e: ipn/localapi: add endpoint for adding debug log entries (Mihai Parparita) #7642
- use logtail to log and upload sockstat logs #7654 (Will Norris)
- c350cd1: ssh/tailssh: use background context for uploading recordings (Maisem Ali) #7647
- 9de8287: ssh/tailssh: lock OS thread during incubator (Andrew Dunham) #7660
- 13377e6: ssh/tailssh: always assert our final uid/gid (Andrew Dunham) #7659
- pass log IDs as the proper type rather than strings #7661 (Will Norris)
- 9d8b7a7: ipn/store/kubestore: handle "/" in ipn.StateKeys (Maisem Ali) #7663
- 8765568: ssh/tailssh: add docs to CastHeader fields (Maisem Ali) #7667
- 8a24648: ssh/tailssh: enable recording of non-pty sessions (Maisem Ali) #7667
- df89b7d: cmd/k8s-operator: disable HTTP/2 for the auth proxy (Maisem Ali) #7664
- 583e86b: ssh/tailssh: handle session recording when running in userspace mode (Maisem Ali) #7670
- add Node.SelfNodeV4MasqAddrForThisPeer #7437 (Maisem Ali)
- 535fad1: net/tstun: rename filterIn/filterOut methods to be more descriptive (Maisem Ali) #7437
- bb31fd7: net/tstun: add inital support for NAT v4 (Maisem Ali) #7437
- f6ea686: tstest/integration: add ping test w/ masquerades (Maisem Ali) #7437
- 0bf8c8e: net/tstun: use p.Buffer() in more places (Maisem Ali) #7437
- 0e203e4: net/packet: add checksum update tests (Maisem Ali) #7437
- ec90522: ipn/ipnlocal: also store ACME keys in the certStore (Maisem Ali) #7669
- 8a11f76: ipn/ipnlocal: fix cert storage in Kubernetes (Maisem Ali) #7669
- 9e81db5: ipn/ipnlocal: use atomicfile.WriteFile in certFileStore (Maisem Ali) #7669
- 4a89642: log/sockstatlog: make shutdown close idle connections (Maisem Ali) #7674
- 4cb1bfe: net/netcheck: improve determinism in hairpinning test (Andrew Dunham) #7682
- use pkg server to determine supported deb/rpm distros #7127 (Anton Tolchanov)
- 33b3596: net/dns: don't send on closed channel in resolvedManager (Andrew Dunham) #7683
- ca19cf1: log/sockstatlog: add resource cleanup test (Maisem Ali) #7675
- split out DialContext into a func #7675 (Maisem Ali)
- do not upload logs in tests #7675 (Maisem Ali)
- d2fd101: net/tstun: only log natConfig on changes (Maisem Ali) #7688
- support TS_AUTH_KEY variant too [tailscale#7689](https://githu...
v1.38.4-sunos
Commits
- add recorders field to SSHRule struct (Charlotte Brandhorst-Satzkorn)
- move recorders field from SSHRule to SSHAction (Charlotte Brandhorst-Satzkorn)
- dbbc465: ssh/tailssh: stream SSH recordings to configured recorders (Maisem Ali)
- d216363: ssh/tailssh: add more metadata to recording header (Maisem Ali)
- 40091d0: ssh/tailssh: allow recorders to be configured on the first or final action (Maisem Ali)
- 2474bd2: ssh/tailssh: use background context for uploading recordings (Maisem Ali)
- 0651c1a: ssh/tailssh: add docs to CastHeader fields (Maisem Ali)
- 8414c59: ssh/tailssh: enable recording of non-pty sessions (Maisem Ali)
- e6b81f9: ssh/tailssh: handle session recording when running in userspace mode (Maisem Ali)
- 1b1ac05: ssh/tailssh: add session recording test for non-pty sessions (Maisem Ali)
- 71a5f2a: ssh/tailssh: add tests for recording failure (Maisem Ali)
- 49e305f: ssh/tailssh: fix race in errors returned when starting recorder (Maisem Ali)
- c3301ab: go.toolchain.rev: update for go 1.20.3 (David Anderson) #7789
- 383b7c7: cmd/tailscale/cli: make serve and funnel visible in list (tailscale#7737) (shayne)
- 296d682: cmd/tailscale/cli: fix inconsistency between serve text and example command (Mihai Parparita)
- 61f36aa: cmd/tailscale/cli: do not allow turning Funnel on while shields-up (tailscale#7770) (shayne)
- 00205f0: ssh/tailssh: handle output matching better in tests (tailscale#7799) (Maisem Ali)
- 214217d: cmd/tailscale/cli: [serve] add support for proxy paths (tailscale#7800) (shayne)
- 043a345: VERSION.txt: this is v1.38.4 (Rhea Ghosh)
- 1ef27eb: Merge tag 'v1.38.4' into sunos-1.38 (Nahum Shalman)
v1.38.3-sunos
Commits
- d47b74e: ipn/ipnlocal: also store ACME keys in the certStore (Maisem Ali)
- 26bf7c4: ipn/ipnlocal: fix cert storage in Kubernetes (Maisem Ali)
- 068ed7d: ipn/ipnlocal: use atomicfile.WriteFile in certFileStore (Maisem Ali)
- change references from alpha to beta (tailscale#7613) (shayne)
- d7bbd4f: ipn/ipnlocal: [serve/funnel] use actual SrcAddr as X-Forwarded-For (tailscale#7600) (shayne)
- c750186: ipn/ipnlocal: [serve] Trim mountPoint prefix from proxy path (tailscale#7334) (shayne)
- 47ebe6f: VERSION.txt: this is v1.38.3 (Shayne Sweeney)
- d02885d: Merge tag 'v1.38.3' into sunos-1.38 (Nahum Shalman)
v1.38.2-sunos
Commits
- fd558e2: net/interfaces: also allow link-local for AzureAppServices. (Denton Gentry)
- aad01c8: cmd/tailscale/cli: move tskey-wrap functionality under lock sign (Tom DNetto)
- d00c046: ssh/tailssh: fix privilege dropping on FreeBSD; add tests (Andrew Dunham)
- 817aa28: net/sockstats: export cellular-only clientmetrics (Mihai Parparita)
- 3db61d0: VERSION.txt: this is v1.38.2 (Denton Gentry)
- 7db9e12: Merge tag 'v1.38.2' into sunos-1.38 (Nahum Shalman)
v1.38.1-sunos
Commits
- 4136f27: ipn/localapi: fix validHost parsing logic (David Crawshaw) #7114
- f8fc3db: flake.nix: update SRI hash. (David Anderson) #7137
- update nixpkgs flake, override go_1_20 for tailscale_go (tailscale#7139) #7139 (shayne)
- ca45fe2: cmd/tailscale/cli: delete ActLikeCLI (Brad Fitzpatrick) #7146
- 27d146d: .github/ISSUE_TEMPLATE: add link to wiki/OtherSoftwareInterop (Brad Fitzpatrick) #7148
- 8e6a1ab: util/vizerror: add new package for visible errors (Will Norris) #7120
- 598ec46: fixup! util/vizerror: add new package for visible errors (Will Norris) #7120
- a6c6979: fixup! util/vizerror: add new package for visible errors (Will Norris) #7120
- 648aa00: fixup! util/vizerror: add new package for visible errors (Will Norris) #7120
- 51e1ab5: fixup! util/vizerror: add new package for visible errors (Will Norris) #7120
- 1008506: util/vizerror: add As function to get wrapped Error (Will Norris) #7153
- 623176e: go.toolchain.branch: update to Go 1.20 (Brad Fitzpatrick) #7150
- update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork #7152 (Brad Fitzpatrick)
- f7b3156: .github/workflows: delete CIFuzz job (Brad Fitzpatrick) #7156
- use Go 1.20's bytes.Clone #7155 (Brad Fitzpatrick)
- 7393ce5: wgengine/magicsock: add envknob to print information about port selection (Andrew Dunham) #7128
- 2755f38: health, net/tlsdial: add healthcheck for self-signed cert (Andrew Dunham) #7149
- 03645f0: net/{netns,netstat}: use new x/sys/cpu.IsBigEndian (Brad Fitzpatrick) #7158
- update tailscale{,d} licenses #7159 (License Updater)
- 5ba2543: ipn/ipnlocal: print warning about DNS servers in bugreport --diagnose (Andrew Dunham) #7160
- 2dc3dc2: util/multierr: implement Go 1.20+'s multiple error Unwrap (Andrew Dunham) #7161
- 02a2dcf: go.toolchain.rev: use new statically built toolchain (David Anderson) #7167
- update win/apple licenses #7168 (License Updater)
- d2301db: ipn/localapi: print node IDs, pubkeys, and expiry on bugreport (Andrew Dunham) #7174
- 880a41b: net/dns/resolver: add envknob to debug exit node DNS queries on on Windows (Andrew Dunham) #7173
- add wire fields/docs for resuming streaming map sessions #5208 (Brad Fitzpatrick)
- 8cf2805: tailcfg, localapi: plumb device token to server (David Crawshaw) #7111
- update win/apple licenses #7176 (License Updater)
- b690818: net/tshttpproxy: more directly use Transport proxy CONNECT hooks (Mihai Parparita) #7179
- 0e3fb91: net/dns/resolver: remove maxDoHInFlight (Mihai Parparita) #7180
- 6bae55e: ipn/ipnlocal: add support to store certs in k8s secrets (Maisem Ali) #7142
- 4daba23: cmd/get-authkey: add an OAuth API client to produce an authkey (Denton Gentry) #7181
- 1acdcff: go.toolchain.rev: update toolchain to test ios workaround (David Anderson) #7183
- implement pcap streaming for datapath debugging #7018 (Tom DNetto)
- 6d84f34: ipn/ipnlocal: handle more edge cases in netmap expiry timer (Andrew Dunham) #7194
- 2a09418: .github/workflows: use ./tool/go in go mod tidy (Maisem Ali) #7196
- 0fd2f71: ipn/ipnlocal: use presence of NodeID to identify logins (Maisem Ali) #7195
- unify and optimize the various not-version funcs #7197 (David Anderson)
- cab2b2b: ipn/localapi: print envknobs on bugreport (Andrew Dunham) #7200
- 9be47f7: ipn/ipnlocal: fix the path for writing cert files (tailscale#7203) (M. J. Fromberger) #7203
- increase maximum log line size in low memory mode #7208 (Mihai Parparita)
- remove unused NLKeyStateKey constant #7216 (Mihai Parparita)
- 05adf22: cmd/k8s-operator: add support for running an auth proxy (Maisem Ali) #7178
- 2477fc4: net/netutil: only check Linux sysctls w/ procfs, assume absent means false (Brad Fitzpatrick) #7219
- fb84ccd: control/controlhttp: don't require valid TLS cert for Noise connection (Brad Fitzpatrick) #7214
- 62f4df3: net/interfaces, net/netns: add node attributes to control default interface getting and binding (Mihai Parparita) #7215
- 2f4df30: .github/workflows: re-enable CIFuzz job (Mihai Parparita) #7218
- 89bd414: ipn/ipnstate: update field docs on PeerStatus. (Maisem Ali) #7221
- 6ef834a: get-authkey: require tags to be specified (Will Norris) #7224
- 3c107ff: net/connstats: fix ticker in NewStatistics (tailscale#7225) (Colin Adler) #7225
- ba48ec5: util/linuxfw: initial implementation of package (Andrew Dunham) #5734
- 33f29a1: go.toolchain.rev: update toolchain to test iOS Go fix (David Anderson) #7232
- 0e4f2bd: pull-toolchain.sh: don't run update-flake.sh (David Anderson) #7236
- 9e4d993: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #7234
- 6799ef8: ipn/ipnlocal: add PeerAPI endpoint for doctor output (Mihai Parparita) #7235
- update win/apple licenses #7233 (License Updater)
- return correct Meta.MajorMinorPatch in non-dev builds #7198 (David Anderson)
- start logging DISCO frames to pcap stream #7223 (Tom DNetto)
- undo previous "optimization", do more work lazily #7246 (David Anderson)
- 7d204d8: ipn/ipnlocal: fix passthrough of formatting arguments in PeerAPI doctor output (Mihai Parparita) #7250
- 21fda7f: net/routetable: include unknown flags in the routetable doctor output (Mihai Parparita) #7249
- fa932fe: net/interfaces: redo how we get the default interface on macOS and iOS (Mihai Parparita) #7248
- 5bca44d: cmd/sync-containers: update latest and stable tags (Denton Gentry) #7253
- 9e6b4d7: types/lazy: helpers for lazily computed values (David Anderson) [tailscale#7247](https://g...
v1.36.2-sunos
v1.36.1-sunos
Commits
- 50cf21a: cmd/tailscale/cli: fix TUNmode display on synology web page (tailscale#7064) (phirework)
- [windows] check if running via Scoop (tailscale#7068) (shayne)
- d1fc9bb: go.mod: bump wintun-go (Brad Fitzpatrick)
- a3ce35d: net/netstat: add nil checks to Windows OSMetadata implementation (Aaron Klotz)
- 6bdb9da: net/netstat: document the Windows netstat code a bit more (Brad Fitzpatrick)
- ad504be: ipn/ipnlocal: use presence of NodeID to identify logins (Maisem Ali)
- increase maximum log line size in low memory mode (Mihai Parparita)
- 5a98bbc: cmd/get-authkey: add an OAuth API client to produce an authkey (Denton Gentry)
- fe33b17: ipn/ipnlocal: handle more edge cases in netmap expiry timer (Andrew Dunham)
- 6d98b5c: net/netns: add functionality to bind outgoing sockets based on route table (Andrew Dunham)
- a8231b1: net/interfaces, net/netns: add node attributes to control default interface getting and binding (Mihai Parparita)
- 576b08e: VERSION.txt: this is v1.36.1 (Denton Gentry)
- cc67578: Merge tag 'v1.36.1' into sunos-1.36 (Nahum Shalman)