v1.90.3-sunos

Commits

• ddc0cd7: ipn/ipnlocal: disconnect and block when key expires even when using seamless (James Sanderson) #17090
• db0b9a3: net/dns: don't timeout if inotify sends multiple events (Alex Chan) #17173
• 48029a8: util/eventbus: allow test expectations reporting only an error (tailscale#17146) (M. J. Fromberger) #17146
• df362d0: net/netmon: make ChangeDelta event not a pointer (tailscale#17112) (Claus Lensbøl) #17112
• add some more (tailscale#17177) #17177 (Elliot Blackburn)
• 6992f95: util/eventbus: add an EqualTo helper for testing (tailscale#17178) (M. J. Fromberger) #17178
• 9d66166: cmd/tsidp: update README with new repo location warning (Remy Guercio) #17171
• bump alpine v3.19 -> 3.22 (tailscale#17155) #17155 (Tom Proctor)
• 73c371f: cmd/derper: permit port 80 in ACE targets (Brad Fitzpatrick) #17181
• 55d0e6d: net/dns/recursive: remove recursive DNS resolver (Brad Fitzpatrick) #17169
• 5e3e536: cmd/tailscale/cli: add remove subcommand (Esteban-Bermudez) #15150
• 1c9aaa4: cmd/tailscale/cli: use helper function for matching profiles (Esteban-Bermudez) #15150
• cd153aa: control, ipn, tailcfg: enable seamless key renewal by default (Alex Chan) #17097
• 61751a0: scripts/installer.sh: add Siemens Industrial OS (tailscale#17185) (Erisa A) #17185
• 73bbd7c: build_dist.sh: add -trimpath (Brad Fitzpatrick) #17168
• allow custom tls.Config for TLS probes (tailscale#17186) #17186 (Andrew Lytvynov)
• 4f211ea: util/eventbus: add a LogAllEvents helper for testing (tailscale#17187) (M. J. Fromberger) #17187
• 78035fb: feature/featuretags,cmd/omitsize: support feature dependencies (Brad Fitzpatrick) #17189
• fc9a74a: util/eventbus: fix flakes in eventbustest tests (tailscale#17198) (M. J. Fromberger) #17198
• 394718a: tstest/integration: support multiple C2N handlers in testcontrol (Anton Tolchanov) #17080
• 4a04161: ipn/ipnlocal: add a C2N endpoint for fetching a netmap (Anton Tolchanov) #17080
• 2351cc0: ipn/ipnlocal: make the redactNetmapPrivateKeys test recursive (Anton Tolchanov) #17080
• b9cda4b: tsnet,internal/client/tailscale: resolve OAuth into authkeys in tsnet (tailscale#17191) (Naman Sood) #17191
• ecfdd86: net/ace, control/controlhttp: start adding ACE dialing support (Brad Fitzpatrick) #17182
• 5e698a8: cmd/tailscaled: make the outbound HTTP/SOCKS5 proxy modular (Brad Fitzpatrick) #17200
• d559a21: util/eventbus/eventbustest: fix typo of test name (Brad Fitzpatrick) #17201
• remove direct callback and replace with eventbus (tailscale#17199) #17199 (Claus Lensbøl)
• ca9d795: util/eventbus: add a Monitor type to manage subscriber goroutines (tailscale#17127) (M. J. Fromberger) #17127
• use eventbus.Client.Monitor to simplify subscriber maintenance (tailscale#17203) #17203 (M. J. Fromberger)
• f9c6998: ipn/ipnlocal: use eventbus.Monitor in expiryManager (tailscale#17204) (M. J. Fromberger) #17204
• 798fddb: feature/linuxdnsfight: move inotify watching of /etc/resolv.conf out to a feature (Brad Fitzpatrick) #17207
• d7ec043: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17212
• 1b6bc37: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17214
• db048e9: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17215
• 8ec07b5: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17222
• 986b4d1: control/controlclient: fix tka godoc (Kristoffer Dalby) #17051
• cc1761e: cmd/k8s-operator: send operator logs to tailscale (tailscale#17110) (David Bond) #17110
• 6e12849: controlclient/auto: switch eventbus to using a monitor (tailscale#17205) (Claus Lensbøl) #17205
• e59fbaa: util/eventbus: give a nicer error when attempting to use a closed client (tailscale#17208) (M. J. Fromberger) #17208
• 1b52010: ipn/ipnlocal: use eventbus.Monitor in LocalBackend (tailscale#17225) (M. J. Fromberger) #17225
• f67ad67: control/controlclient: switch ID to be incrementing instead of random (tailscale#17230) (Claus Lensbøl) #17230
• 5e79e49: cmd/tailscale/cli: show last seen time on status command (tailscale#16588) (Mahyar Mirrashed) #16588
• daad5c2: wgengine/router: use eventbus.Monitor in linuxRouter (tailscale#17232) (M. J. Fromberger) #17232
• 15b3876: client/systray: use new tailnet display name is profile title (Will Norris) #17237
• e582fb9: client/web: use network profile for displaying tailnet info (Will Norris) #17236
• e3307fb: cmd/tailscale: omit the drive subcommand in MacOS GUI apps (Percy Wegmann) #17240
• update license notices #17231 (License Updater)
• fix deadlock in SetStaticEndpoints (tailscale#17247) #17247 (Jonathan Nobels)
• 87ccfbd: ipn/ipnlocal: fix eventbus data race (Brad Fitzpatrick) #17253
• 4657cbd: client, cmd/tailscale/cli, feature/relayserver, net/udprelay: implement tailscale debug peer-relay-sessions (tailscale#17239) (Jordan Whited) #17239
• 8fe5754: feature/featuretags: add build tag to remove captive portal detection (Brad Fitzpatrick) #17255
• use buildfeatures.HasCapture const in a handful of places #17259 (Brad Fitzpatrick)
• b3e9a12: net/dns, feature/featuretags: make NetworkManager, systemd-resolved, and DBus modular (Brad Fitzpatrick) #17250
• df747f1: util/eventbus: add a Done method to the Monitor type (tailscale#17263) (M. J. Fromberger) #17263
• 21dc5f4: derp/derpserver: split off derp.Server out of derp into its own package (Brad Fitzpatrick) #17258
• db02a46: types/key: Update HardwareAttestationPublic representation (tailscale#17233) (Patrick O'Doherty) #17233
• 34242df: derp/derpserver: clean up extraction of derp.Server (tailscale#17264) (Simon Law) #17264
• 0bd4f47: ipn/ipnlocal: rename misnamed DisablePortMapperForTest to DisablePortPollerForTest (Brad Fitzpatrick) #17270
• 70400cb: cmd/tailscale/cli: reduce strength of lose-ssh risk warning (James Sanderson) #17262
• e0a77cf: tstest/integration: expand the tests for tailscale up (Alex Chan) #17275
• 0b27871: k8s-operator: add IPv6 support for DNS records (tailscale#16691) (Raj Singh) #16691
• a40f23a: util/eventbus: flesh out docs a bit (Brad Fitzpatrick) #17277
• c49ed5d: feature/tpm: implement key.HardwareAttestationKey (tailscale#17256) (Andrew Lytvynov) [tailscale#17256](https:...

v1.88.4-sunos

Commits

• 25ea53a: wgengine/magicsock: fix relayManager deadlock (tailscale#17449) (tailscale#17511) (Jordan Whited) #17511
• f67e6cf: wgengine/magicsock: fix rebind debouncing (tailscale#17282) (James Tucker)
• 85f4267: VERSION.txt: this is v1.88.4 (Will Hannah)
• 16620ac: Merge tag 'v1.88.4' into sunos-1.88 (Nahum Shalman)

v1.88.3-sunos

Commits

• a5e69bc: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17244
• 585248e: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17243
• c99901e: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17243
• 27b1b1f: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17243
• 9961c09: VERSION.txt: this is v1.88.3 (Will Hannah)
• 4f0d522: Merge tag 'v1.88.3' into sunos-1.88 (Nahum Shalman)

v1.88.2-sunos

Commits

• 5a56942: k8s-operator: reset service status before append (tailscale#17120) (tailscale#17137) (David Bond) #17137
• 912a84e: VERSION.txt: this is v1.88.2 (Will Hannah)
• 1e26584: Merge tag 'v1.88.2' into sunos-1.88 (Nahum Shalman)

v1.88.1-sunos

Bug Fixes

• invalid memory address or nil pointer dereference (tailscale#16922) #16922 (Need-an-AwP)

Builds

• deps: bump form-data from 4.0.0 to 4.0.4 in /client/web (tailscale#16623) #16623 (dependabot[bot])
• deps: bump @babel/runtime from 7.23.4 to 7.26.10 in /client/web (tailscale#15299) #15299 (dependabot[bot])

Commits

• 2a5d9c7: VERSION.txt: this is v1.87.0 (Aaron Klotz) #16648
• c572442: cmd/tailscale: allow SSH to IPs or DNS names without MagicDNS (tailscale#16591) (Danni Popova) #16591
• bfebf87: cmd/tailscaled: update installSystemDaemonWindows to set the correct system service depndencies (Aaron Klotz) #16659
• e300a00: cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (tailscale#16181) (Raj Singh) #16181
• 5154bbb: k8s-operator: adding session type to cast header (tailscale#16660) (Tom Meadows) #16660
• add an ETag to UnhealthyState for change detection #16644 (James Sanderson)
• 0208462: k8s-operator: handle multiple WebSocket frames per read (tailscale#16678) (Tom Proctor) #16678
• 61d42eb: k8s-operator: fix test flake (tailscale#16680) (Tom Proctor) #16680
• 4a435ae: .github: Bump github/codeql-action from 3.29.2 to 3.29.3 (tailscale#16615) (dependabot[bot]) #16615
• 5ce3845: net/portmapper: avert a panic when a mapping is not available (tailscale#16686) (M. J. Fromberger) #16686
• a9f3fd1: wgengine/magicsock: fix magicsock deadlock around Conn.NoteRecvActivity (tailscale#16687) (Jordan Whited) #16687
• 4df02bb: util/syspolicy/setting: use a custom marshaler for time.Duration (Nick Khyl) #16690
• b34cdc9: ipn,net,tsnet,wgengine: make an eventbus mandatory where it is used (tailscale#16594) (M. J. Fromberger) #16594
• e37432a: cmd/tailscale/cli: update message for disable service (tailscale#16705) (KevinLiang10) #16705
• 3d1e4f1: tstest/natlab: fix conn.Close race with conn.ReadFromUDPAddrPort (tailscale#16710) (Jordan Whited) #16710
• aa6a2d1: drive/driveimpl: use sudo or su to run file server (Percy Wegmann) #16702
• eed3e5d: ipn/store/kubestore,kube: fix cert error in admin UI (tailscale#16717) (Tom Proctor) #16717
• 1cc842b: util/set: add more functionality to IntSet (tailscale#16640) (Joe Tsai) #16640
• 47b5f10: cmd/tsidp,tsnet: update tsidp oidc-key store path (tailscale#16735) (Mike O'Driscoll) #16735
• 23a0398: ipn/ipnlocal, net/dns: use slices.Equal to simplify code (tailscale#16641) (jishudashu) #16641
• f2fd7a0: cmd/k8s-operator,k8s-operator: allow setting a priorityClassName (tailscale#16685) (Lee Briggs) #16685
• 'generate' target (tailscale#16746) #16746 (mzbenami)
• d897d80: feature/taildrop: do not use m.opts.Dir for Android (tailscale#16316) (kari-ts) #16316
• sort make commands and fix printing newlines #16750 (Will Norris)
• 834630f: cmd/tailscale: add systray subcommand on Linux builds (Will Norris) #16749
• b0018f1: wgengine/magicsock: fix looksLikeInitiationMsg endianness (tailscale#16771) (Jordan Whited) #16771
• 5bb42e3: wgengine/router: rely on events for deleted IP rules (tailscale#16744) (Claus Lensbøl) #16744
• 9f29c42: client/systray: allow specifying tailscaled socket (Will Norris) #16774
• ad273d7: scripts/installer.sh: add bazzite handling (tailscale#16779) (Erisa A) #16779
• f80ea92: .github/workflows: enforce github action version pinning (tailscale#16768) (Andrew Lytvynov) #16768
• 57d6530: scripts/installer.sh: add FreeBSD 15 (tailscale#16741) (TheBigBear) #16741
• 908f20e: wgengine/magicsock: add receiveIP() unit tests (tailscale#16781) (Jordan Whited) #16781
• 02967ff: wgengine/magicsock: add lazyEndpoint.InitiationMessagePublicKey tests (tailscale#16790) (Jordan Whited) #16790
• 0374e6d: wgengine/magicsock: add lazyEndpoint.FromPeer tests (tailscale#16791) (Jordan Whited) #16791
• 4666d4c: wgengine/magicsock: fix missing Conn.hasPeerRelayServers.Store() call (tailscale#16792) (Jordan Whited) #16792
• 89954fb: client/systray: add startup script generator for systemd (tailscale#16801) (Claus Lensbøl) #16801
• d4060f1: CODE_OF_CONDUCT.md: update Code of Conduct (tailscale#16806) (Erisa A) #16806
• 3fe0228: client/systray: temporarily replace systray module (tailscale#16807) (Claus Lensbøl) #16807
• b5283ab: go.toolchain.rev: bump to 1.24.6 (tailscale#16811) (Andrew Lytvynov) #16811
• 5297dc3: cmd/tailscale/cli: move systray configuration to tailscale configure (tailscale#16817) (Claus Lensbøl) #16817
• 796eb21: go.toolchain.rev: bump tsgo toolchain (Brad Fitzpatrick) #16819
• 71d51eb: .github: bump github/codeql-action from 3.29.3 to 3.29.5 (tailscale#16765) (dependabot[bot]) #16765
• d122f03: control/controlknobs,tailcfg,wgengine/magicsock: deprecate NodeAttrDisableMagicSockCryptoRouting (tailscale#16818) (Jordan Whited) #16818
• 03c4b2a: derp/derphttp: test improvements (tailscale#16723) (Mike O'Driscoll) #16723
• 36397f1: wgengine/magicsock: add clientmetrics for TX direction Peer Relay disco messages (tailscale#16831) (Jordan Whited) #16831
• 4fa27db: wgengine/magicsock: add clientmetrics for locally delivered Peer Relay alloc disco (tailscale#16833) (Jordan Whited) #16833
• cde65db: wgengine/magicsock: add clientmetric for Peer Relay challenge reception (tailscale#16834) (Jordan Whited) #16834
• ee0c7b0: cmd/tailscale: fix a panic in netcheck portmapper construction (tailscale#16843) (M. J. Fromberger) #16843
• d07166b: .github: Bump actions/cache from 4.2.3 to 4.2.4 (tailscale#16829) (dependabot[bot]) #16829
• f22c765: cmd/tailscale: add --json-docs flag (tailscale#16851) (Andrew Lytvynov) #16851
• 16bc0a5: net/{batching,packet},wgengine/magicsock: export batchingConn (tailscale#16848) (Jordan Whited) #16848
• 0f7facf: control/controlclient: fix data race on tkaHead (tailscale#16855) (Andrew Lytvynov) #16855
• e4d2822: go.toolchain.rev: bump Go for data race in Go http client (Brad Fitzpatrick) #16856
• 5402620: net/tshttpproxy: add macOS support for system proxy (tailscale#16826) (Will Hannah) #16826
• block key addition when the max number of keys is reached #16859 (Anton Tolchanov)
• c083a9b: net/batching: fix compile-time assert (tailscale#16864) (Jordan Whited) #16864
• fbb9175: cmd/viewer, types/views: implement support for json/v2 (tailscale#16852) (Joe Tsai) #16852
• b8c45a6: client/systray: add CLI error output if operator is missing (Will Norris) #16865
• 3f1851a: types/dnstype, ipn/ipnlocal: allow other DNS resolvers with exit nodes (Michael Ben-Ami) #16802
• 5b6c64b: net/tshttpproxy: use errors.New for error creation (tailscale#16860) (Will Hannah) [tailscale#16860](https://github.com/tailscale/tailscale/pull/...

v1.86.4-sunos

Commits

• d6116ea: feature/taildrop: do not use m.opts.Dir for Android (tailscale#16316) (kari-ts)
• 55027d4: Revert "feature/taildrop: do not use m.opts.Dir for Android (tailscale#16316)" (kari-ts)
• 2589be2: feature/taildrop: do not use m.opts.Dir for Android (tailscale#16316) (tailscale#16789) (kari-ts) #16789
• 2b42f22: VERSION.txt: this is v1.86.3 (Jonathan Nobels) #16803
• 51c11a8: VERSION.txt: this is v1.86.4 (Jonathan Nobels) #16805
• 33ccb44: Merge tag 'v1.86.4' into sunos-1.86 (Nahum Shalman)

v1.86.2-sunos

Documentation

• fix typo in commit-messages.md #16302 (okunamayanad)

Commits

• 4980869: cmd/tsidp: Fix sending string for refresh_token (Tim Klocke) #16074
• 09582bd: cmd/tsidp: add web UI for managing OIDC clients (tailscale#16068) (Raj Singh) #16068
• cd49faa: feature/capture: fix wireshark decoding and add new disco frame types (tailscale#16089) (Mike O'Driscoll) #16089
• 4b59f1d: .github/workflows: use Ubuntu 24.04 images (tailscale#16097) (Irbe Krumina) #16097
• set RouteAll=true by default for new accounts on iOS and Android (tailscale#16110) #16110 (Jonathan Nobels)
• ffc8ec2: wgengine/magicsock: implement relayManager endpoint probing (tailscale#16029) (Jordan Whited) #16029
• 5e54819: net/dns: cache dns.Config for reuse when compileConfig fails (tailscale#16059) (Jonathan Nobels) #16059
• remove an expired configuration-path migration step (tailscale#16120) #16120 (M. J. Fromberger)
• b0d3597: go.toolchain.rev: bump to 1.24.3 (tailscale#16060) (Andrew Lytvynov) #16060
• dca4036: util/set: add SmallSet (Brad Fitzpatrick) #16109
• 4cccd15: ipn/ipnlocal: fix data race when accessing b.appConnector (Nick Khyl) #16131
• 191afd3: net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier (Nick Khyl) #16130
• 401d6c0: go.mod: bump golang.org/x deps (Brad Fitzpatrick) #16132
• ef49e75: util/set: add SmallSet.SoleElement, fix bug, add more tests (Brad Fitzpatrick) #16133
• 5b670eb: cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (tailscale#16129) (Irbe Krumina) #16129
• 11e83f9: controlclient,health,ipnlocal,tailcfg: add DisplayMessage support (James Sanderson) #15851
• fix AtomicValue.CompareAndSwap (tailscale#16137) #16137 (Joe Tsai)
• enable writing state to disk #16105 (Fran Bull)
• 5f35143: go.mod,wgengine/magicsock: update wireguard-go (tailscale#16148) (Jordan Whited) #16148
• 8a3afa5: ipn/ipnlocal: fix deadlock when filtering DisplayMessage URLs (James Sanderson) #16163
• propagate serial number from MDM on Android #16152 (Anton Tolchanov)
• 5f0e139: cmd/tsidp: add Docker image building support (tailscale#16078) (Raj Singh) #16078
• 1635ccc: ssh/tailssh: display more useful error messages when authentication fails (Percy Wegmann) #16127
• add watch opt to include actions in health messages #16177 (James Sanderson)
• show DisplayMessage actions in 'tailscale status' #16188 (James Sanderson)
• 486a55f: cmd/natc: add optional consensus backend (Fran Bull) #15712
• 75a7d28: net/packet: fix Parsed docs (tailscale#16200) (Jordan Whited) #16200
• 3e08eab: cmd/natc: use new on disk state store for consensus (Fran Bull) #16190
• 3f7a9f8: wgengine/magicsock: fix bpf fragmentation jump offsets (tailscale#16204) (Claus Lensbøl) #16204
• 66ae873: wgengine/magicsock: make endpoint.bestAddr Geneve-aware (tailscale#16195) (Jordan Whited) #16195
• 7b06532: ipn/ipnlocal: Update hostinfo to control on service config change (tailscale#16146) (KevinLiang10) #16146
• prefix Warnables received from the control plane #16208 (James Sanderson)
• 4456f77: cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ingress with ProxyGroup (tailscale#16199) (Tom Meadows) #16199
• 67b1693: wgengine/magicsock: enable setting relay epAddr's as bestAddr (tailscale#16229) (Jordan Whited) #16229
• c343bff: wgengine/relaymanager: don't start runLoop() on init() (tailscale#16231) (Jordan Whited) #16231
• 9501f66: wgengine/magicsock: don't cancel in-progress relayManager work (tailscale#16233) (Jordan Whited) #16233
• cc8dc9e: types/netmap: fix NodeMutationEndpoints docs typo (tailscale#16234) (Jordan Whited) #16234
• db34cdc: cmd/tailscale/cli: add a risk message about rp_filter (Anton Tolchanov) #16062
• e72c528: cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (tailscale#15414) (Mike O'Driscoll) #15414
• 8114260: go.toolchain.rev: bump to go 1.24.4 (tailscale#16230) (Patrick O'Doherty) #16230
• 6a93b17: types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoint (tailscale#16244) (Jordan Whited) #16244
• 3b25e94: cmd/natc: allow specifying the tsnet state dir (Fran Bull) #16249
• 6010812: ipn/localapi,client/local: add debug watcher for bus events (tailscale#16239) (Claus Lensbøl) #16239
• 8baa016: .github: Bump github/codeql-action from 3.28.15 to 3.28.19 (tailscale#16227) (dependabot[bot]) #16227
• 75a4297: .github: Bump slackapi/slack-github-action from 2.0.0 to 2.1.0 (tailscale#15948) (dependabot[bot]) #15948
• 7c05811: .github: Bump actions/setup-go from 5.4.0 to 5.5.0 (tailscale#15947) (dependabot[bot]) #15947
• 3219de4: cmd/k8s-operator: ensure status update errors are displayed to users (tailscale#16251) (Irbe Krumina) #16251
• 3b5ce9d: tsweb/varz: add binary name to version metric (Brad Fitzpatrick) #16256
• 3ed76ce: feature/relayserver,net/{netcheck,udprelay}: implement addr discovery (tailscale#16253) (Jordan Whited) #16253
• b0f7b23: net/netcheck: preserve live home DERP through packet loss (James Tucker) #16254
• 9206e76: net/packet: cleanup IPv4 fragment guards (James Tucker) #16185
• record DERP dropped packets as they occur #16252 (James Tucker)
• dac00e9: go.mod: bump github.com/cloudflare/circl (tailscale#16264) (Andrew Lytvynov) #16264
• 6a4d92e: ipn/ipnlocal: replace nodeContext with nodeBackend in comments (Nick Khyl) #16275
• fe391d5: client/local: use an iterator to stream bus events (tailscale#16269) (M. J. Fromberger) #16269
• 733bfae: ipn/ipnlocal: signal nodeBackend readiness and shutdown (Nick Khyl) #16274
• e29e3c1: cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (tailscale#16262) (Irbe Krumina) #16262
• 59fab8b: .github: Bump github/codeql-action from 3.28.19 to 3.29.0 (tailscale#16287) (dependabot[bot]) #16287
• reject removal of the last signing key #16268 (Anton Tolchanov)
• 8e6f63c: ipn/ipnlocal,wgengine/magicsock: use eventbus for node & filter updates (tailscale#16271) (Jordan Whited) #16271
• 5b7cf7f: .github/workflows: do a go mod download & cache it before all jobs (Brad Fitzpatrick) #16281
• 8666142: util/eventbus: r...

v1.84.2-sunos

Commits

• f1b8c4a: cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (tailscale#16129) (tailscale#16140) (Irbe Krumina) #16140
• 2e915f4: cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ingress with ProxyGroup (tailscale#16199) (tailscale#16226) (Tom Meadows) #16226
• 5f702f4: VERSION.txt: this is v1.84.2 (tailscale#16232) (Nick O'Neill) #16232
• f97aa98: Merge tag 'v1.84.2' into sunos-1.84 (Nahum Shalman)

v1.84.1-sunos

Commits

• set RouteAll=true by default for new accounts on iOS and Android (tailscale#16110) (Jonathan Nobels)
• c417248: net/dns: cache dns.Config for reuse when compileConfig fails (tailscale#16059) (Jonathan Nobels)
• 72ec281: VERSION.txt: this is v1.84.1 (Jonathan Nobels)
• e2bc1b0: Merge tag 'v1.84.1' into sunos-1.84 (Nahum Shalman)

v1.84.0-sunos

Commits

• 1ec1a60: VERSION.txt: this is v1.83.0 (tailscale#15443) (kari-ts) #15443
• a3bc0bc: net/dns: add debug envknob to enable dual stack MagicDNS (Brad Fitzpatrick) #15405
• 7fc9099: cmd/tailscale: fix default for tailscale set --accept-dns (Simon Law) #15320
• e932423: cmd/tailscale: fix default for tailscale set --accept-routes (Simon Law) #15320
• a8c3490: install.sh - fix DNF 5 detection on all locales (tailscale#15325) (Raúl Blanco) #15325
• 272854d: ipn/ipnlocal: unconfigure wgengine when switching profiles (Nick Khyl) #15317
• 6a9a7f3: cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly imported (Nick Khyl) #15415
• 4c5112e: cmd/tailscaled: make embedded CLI run earlier, support triggering via env (Brad Fitzpatrick) #15457
• bf8c8e9: cmd/k8s-operator,k8s-operator: enable HA Ingress again. (tailscale#15453) (Irbe Krumina) #15453
• 2a12e63: cmd/vnet: add wsproxy mode (Brad Fitzpatrick) #15464
• cdde301: ipn/ipnlocal: return old hwaddrs if missing (Kristoffer Dalby) #15273
• a7be3a3: ipn/ipnlocal: add debug logging to initPeerAPIListener (Percy Wegmann) #15436
• e720b98: net/netcheck: use NoMeasureNoHome in another spot (Brad Fitzpatrick) #15483
• 96fe8a6: net/netmon: always remember ifState as old state, even on minor changes (Brad Fitzpatrick) #15485
• e8b5f0b: client/systray: use ico image format for windows (Will Norris) #15487
• 886ab4f: net/udprelay: start of UDP relay server implementation (tailscale#15480) (Jordan Whited) #15480
• return explicit lo0 for loopback addrs on sandboxed macOS (tailscale#15493) #15493 (Jonathan Nobels)
• 95034e1: cmd/natc: fix ip allocation runtime (James Tucker) #15424
• faaa364: .github: Bump github/codeql-action from 3.28.11 to 3.28.13 (tailscale#15477) (dependabot[bot]) #15477
• 13f6981: go.toolchain.rev: bump for Go 1.24.2 + plan9 fixes (Brad Fitzpatrick) #15498
• add VIPServiceView #15501 (Adrian Dewhurst)
• 6084712: net/tstun: add Plan 9 'tun' support (Brad Fitzpatrick) #15491
• e3282c1: wgengine/magicsock: avoid some log spam on Plan 9 (Brad Fitzpatrick) #15491
• bbdd3c3: wgengine/router: add Plan 9 implementation (Brad Fitzpatrick) #15491
• fix Plan 9 implementation #15491 (Brad Fitzpatrick)
• 7426a36: net/netmon: disable time jump monitoring on Plan 9 (Brad Fitzpatrick) #15491
• 5df0661: net/tsdial: tolerate empty default route on Plan 9 (Brad Fitzpatrick) #15491
• 21d12ec: cmd/tailscaled: let net/netmon know what our TUN interface is (Brad Fitzpatrick) #15491
• 3da1728: cmd/tailscaled: make state dir on Plan 9 (Brad Fitzpatrick) #15491
• da8e8eb: types/logger, logpolicy: disable rate limiting, don't upload on Plan 9 (Brad Fitzpatrick) #15491
• 03b9b87: ipn/ipnserver: treat all plan9 safesocket connections as permitted (Brad Fitzpatrick) #15491
• 6f75647: net/netcheck: avoid ICMP unimplemented log spam on Plan 9 (Brad Fitzpatrick) #15491
• b3953ce: ssh/tailssh: add Plan 9 support for Tailscale SSH (Brad Fitzpatrick) #15491
• add Plan 9 support #15491 (Brad Fitzpatrick)
• 84c82ac: net/dns: add Plan 9 support (Brad Fitzpatrick) #15491
• 7dbb21c: cmd/tailscale: add tailscale.rc Plan 9 wrapper (Brad Fitzpatrick) #15491
• 4c9b37f: control/controlhttp: set forceNoise443 on Plan 9 (Brad Fitzpatrick) #15491
• 29c2bb1: control/controlhttp: reduce some log spam on context cancel (Brad Fitzpatrick) #15491
• use network less when running in v86 emulator #15491 (Brad Fitzpatrick)
• 85bcc2e: cmd/tsidp: use advertised env vars for config (Kot) #15465
• c86afac: Move env var flag passing to Dockerfile (Kot) #15465
• 1284482: Change README to reflect configuration (Kot) #15465
• d18b994: .github: Bump actions/upload-artifact from 4.6.1 to 4.6.2 (tailscale#15400) (dependabot[bot]) #15400
• 8c062c0: ipn/ipnlocal: fix taildrive logf formatting verb (tailscale#15514) (Jordan Whited) #15514
• add relay client and server NodeAttr's (tailscale#15513) #15513 (Jordan Whited)
• 8811694: .github: Bump actions/setup-go from 5.3.0 to 5.4.0 (tailscale#15397) (dependabot[bot]) #15397
• add UDP relay PeerCapability's (tailscale#15516) #15516 (Jordan Whited)
• 66664b3: wgengine/router: default to a fake router on android (David Anderson) #15518
• 7a922c3: net/routetable: don't try to fetch the route table on android (David Anderson) #15518
• 5e4fae0: net/tstun: don't try to set link attributes on android (David Anderson) #15518
• 7b29d39: client/systray: add menu item to rebuild the menu (Will Norris) #15529
• e2eb6eb: cmd/natc: separate perPeerState from connector (Fran Bull) #15510
• 46505ca: tempfork/acme: update to latest version (tailscale#15543) (Andrew Lytvynov) #15543
• 603a1d3: cmd/natc: move address storage behind an interface (Fran Bull) #15538
• 6d117d6: util/testenv: add func to report whether a testing.TB is in parallel mode (Brad Fitzpatrick) #15561
• c76d075: nettest, *: add option to run HTTP tests with in-memory network (Brad Fitzpatrick) #15558
• fix minor typos in comments #15519 (Craig Hesling)
• update license notices #15569 (License Updater)
• 161a8ea: .github: Bump actions/cache from 4.2.2 to 4.2.3 (dependabot[bot]) #15567
• dd07cb9: .github: Bump github/codeql-action from 3.28.13 to 3.28.14 (dependabot[bot]) #15566
• 0655dd7: client/local: fix path with delete profile request (Esteban-Bermudez) #15482
• ad2b075: cmd/nardump: support symlinks, add basic test (phanirithvij) #15447
• 03b47a5: tstest/nettest: pull the non-test Network abstraction out to netx package (Brad Fitzpatrick) #15584
• unify some redundant testing.TB interface copies #15585 (Brad Fitzpatrick)
• C what I did there? #15588 (Brad Fitzpatrick)
• update nix and use go 1.24 (tailscale#15578) [tailscale#15578](https://github.com/tailscale/tailscale/pull...