v1.48.0-sunos

Commits

• 486ab42: VERSION.txt: this is v1.47.0 (tailscale#8654) (Andrea Gottardo) #66,#8654
• guard against key-length panics when verifying signatures #66,#8653 (Tom DNetto)
• 3f6b0d8: cmd/tailscale/cli: make tailscale update query softwareupdate (tailscale#8641) (Chris Palmer) #66,#8641
• efd6d90: cmd/tailscale/cli: implement update for arch-based distros (tailscale#8655) (Andrew Lytvynov) #66,#8655
• 388b124: net/dns: detect when libnss_resolve is used (Anton Tolchanov) #8640
• 3c53bed: cmd/tailscale/cli: limit Darwin-only option to Darwin (tailscale#8657) (Chris Palmer) #8657
• 32d486e: cmd/tailscale/cli: ensure custom UsageFunc is always set (tailscale#8665) (Chris Palmer) #8665
• 7560435: tstest/deptest: add test-only package to unify negative dep tests (Brad Fitzpatrick) #8668
• 88cc0ad: util/linuxfw: remove yet-unused code to fix linux/arm64 crash (Brad Fitzpatrick) #8668
• ignore io.EOF from sftp.Server.Serve #8670 (Joe Tsai)
• use tstime (tailscale#8607) #8607 (Claire Wang)
• 907c56c: api.md: add documentation to API endpoint about SCIM group warnings (Jenny Zhang) #8676
• deprecate Debug, flesh out Node.DERP docs #8681 (Brad Fitzpatrick)
• 453620d: go.toolchain.rev: bump Go version (Brad Fitzpatrick) #8685
• 2a6c237: net/dns: overwrite /tmp/resolv.conf on gokrazy (Michael Stapelberg) #8688
• add UserProfile.Groups #8693 (Brad Fitzpatrick)
• 894b237: cmd/tailscale/cli: implement update for dnf/yum-based distros (tailscale#8678) (Andrew Lytvynov) #8678
• update tailscale{,d} licenses #8610 (License Updater)
• 45b5d09: net/art: fix running tests outside of CI (David Anderson) #8611
• 486195e: net/art: make each strideTable track the IP prefix it represents (David Anderson) #8611
• fcf4d04: net/art: implement path compression optimization (David Anderson) #8611
• ac657ca: net/art: add debug hooks to strideTable (David Anderson) #8611
• 9cc3f7a: net/art: fix format of debug output (David Anderson) #8611
• b145a22: net/art: add more exhaustive table testing (David Anderson) #8611
• aaca911: net/art: add another consistency test for insert/delete (David Anderson) #8611
• 1e6f0bb: net/art: fix slowPrefixTable bugs found by fuzzing (David Anderson) #8611
• 736a442: net/art: fix comment typo (David Anderson) #8611
• de5c6ed: net/art: document valid values of strideTable.prefix (David Anderson) #8611
• 8478358: net/art: use "index", not "idx" in function names (David Anderson) #8611
• b242e2c: net/art: reword confusing function docstring (David Anderson) #8611
• b76d8a8: net/art: document return value of strideTable.delete (David Anderson) #8611
• 125b982: net/art: make Table.Get alloc-free (David Anderson) #8611
• 44ad7b3: net/art: factor out picking the right strideTable for addr family (David Anderson) #8611
• f1cd674: net/art: move slice closer to its use (David Anderson) #8611
• 4f14ed2: net/art: use encoding/binary for address bit twiddling (David Anderson) #8611
• 6afffec: net/art: use more intelligible, go-ish state tracking in table.Get (David Anderson) #8611
• 306deea: cmd/tailscale/cli,version/distro: update support for Alpine (tailscale#8701) (Andrew Lytvynov) #8701
• 1ecc16d: tailcfg,ipn/ipnlocal,wgengine: add values to PeerCapabilities (Maisem Ali) #8709
• 9edb848: cmd/tailscale/cli: implement update on FreeBSD (tailscale#8710) (Andrew Lytvynov) #8710
• c2831f6: wgengine/magicsock: delete unused stuff (David Anderson) #8716
• f7016d8: wgengine/magicsock: factor out endpoint into its own file (David Anderson) #8717
• cde37f5: wgengine/magicsock: factor out peerMap into separate file (David Anderson) #8718
• move disco pcap helper to disco package #8718 (David Anderson)
• 8477735: wgengine/magicsock: factor out more separable parts (David Anderson) #8721
• 9d89e85: wgengine/magicsock: document mysterious-looking assignment (David Anderson) #8722
• introduce exit-node subcommand to list and filter exit nodes #8617 (Charlotte Brandhorst-Satzkorn)
• aa37be7: api.md: update device authorize API docs to allow for deauth (tailscale#8728) (tinku-tailscale) #8728
• c1ecae1: ipn/{ipnlocal,localapi}: actually renew certs before expiry (tailscale#8731) (Andrew Lytvynov) #8731
• use tstime (tailscale#8597) #8597 (Claire Wang)
• use tstime (tailscale#8634) #8634 (Claire Wang)
• update exp/slices and fix call sites #8740 (David Anderson)
• 6114247: types/logid: add a Compare method (David Anderson) #8742
• update tailscale{,d} licenses #8741 (License Updater)
• 68f8e56: wgengine/magicsock: remove dead code (tailscale#8745) (salman aljammaz) #8745
• add helper to unmarshal PeerCap values #8747 (Maisem Ali)
• 5ebb271: derp/derphttp: add optional Client.BaseContext hook (Brad Fitzpatrick) #8752
• ed46442: client/tailscale/apitype: document never-nil property of WhoIsResponse (David Anderson) #8758
• eef15b4: cmd/dist,release/dist: sign release tarballs with an ECDSA key (tailscale#8759) (Andrew Lytvynov) #8759
• ec9213a: cmd/sniproxy: add client metrics (Denton Gentry) #8755
• 7adf15f: cmd/tailscale/cli, util/winutil/authenticode: flesh out authenticode support (Aaron Klotz) #8285
• implement lock revoke-keys command #8644 (Tom DNetto)
• update tailscale{,d} licenses #8764 (License Updater)
• 66e46bf: ipnlocal, net/*: deprecate interfaces.GetState, use netmon more for it (Brad Fitzpatrick) #8765
• add CapabilityHTTPS const #8767 (Sonia Appasamy)
• c3b979a: go.toolchain.rev: bump to ~go1.21rc4 (Brad Fitzpatrick) #8768
• update android licenses #8766 (License Updater)
• f57cc19: cmd/tailscale/cli: add latest version output to "tailscale version" (tailscale#8700) (Andrew Lytvynov) #8700
• ab7749a: go.toolchain.rev: go1.21rc4 (now that VERSION file is updated upstream) (Brad Fitzpatrick) #8775
• 301e59f: tailcfg,ipn/localapi,client/tailscale: add QueryFeature endpoint (Sonia Appasamy) #8774
• 37925b3: go.mod, cmd/tailscaled, ipn/localapi, util/osdiag, util/winutil, util/winutil/authenticode: add Windows module list to OS-specific logs that are written upon bugreport (Aaron Klotz) #8783
• eb6883b: go.mod: upgrade nfpm to v2 (tailscale#8786) (Andrew Lytvynov) #8786
• 371e1eb: cmd/dist,release/dist: expose RPM signing hook (tailscale#8789) (Andrew Lytvynov) #8789
• update tailscale{,d} licenses #8784 (License Updater)
• use tstime instead of time (tailscale#8595) #8595 (Claire Wang)
• 10acc06: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #8609
• update android licenses #8797 (License Updater)
• avoid useless no-op WriteState calls #8793 (Brad Fitzpatrick)
• 49896cb: ipn/ipnlocal: add profile pic header to serve HTTP proxy (Sonia Appasamy) #8808
• 25a7204: wgengine,ipn,cmd/tailscale: add size option to ping (tailscale#8739) (salman aljammaz) #8739
• 82454b5: ipn/ipnlocal: make tests pass when offline (Maisem Ali) #8812
• 17ed2da: control/controlclient: use ptr.To (Maisem Ali) #8813
• ae63c51: wgengine/router: add auto selection heuristic for iptables/nftables (KevinLiang10) #8762
• 6aaf1d4: types/persist: drop duplicated Persist.LoginName (Maisem Ali) #8816
• 734928d: control/controlclient: make Direct own all changes to Persist (Maisem Ali) #8816
• 500b957: ipn/ipnlocal: add test to find issues with profile duplication (Maisem Ali) #8816
• 3e255d7: ipn/ipnlocal: fix profile duplication (Maisem Ali) #8816
• 682fd72: util/testenv: add new package to hold InTest (Maisem Ali) #8815
• require Go 1.21 #8820 (Brad Fitzpatrick)
• be4eb6a: derp, net/dns/recursive: use Go 1.21 min (Brad Fitzpatrick) #8821
• b3618c2: go.toolchain.rev: merge Go 1.21.0 final (non-rc) (Brad Fitzpatrick) #8822
• 69f1324: cmd/tailscale: refactor shared utility methods (Will Norris) #8818
• f9066ac: client/web: extract web client from cli package (Will Norris) #8819
• 3d2e35c: util/winutil/authenticode: fix an inaccurate doc comment (Aaron Klotz) #8832
• 90081a2: control/controlhttp: remove tstest.Clock from tests (tailscale#8830) (Andrew Lytvynov) #8830
• 7815fbe: tailscale/cli: add interactive flow for enabling Funnel (Sonia Appasamy) #8782
• 2bc98ab: client/web: add web client Server struct (Sonia Appasamy) #8828
• 6ee85ba: client/web: fix rendering of node owner profile (Will Norris) #8838
• add new example serving the Tailscale web client #8835 (Will Norris)
• 7a5263e: util/linuxfw: rename ErrorFWModeNotSupported (Brad Fitzpatrick) #8840
• d169468: control/controlclient: add Auto.updateRoutine (Maisem Ali) #8836
• 53c7229: tool/{node,yarn}: update node and yarn tools (Sonia Appasamy) #8842
• 215480a: cmd/tailscale/cli,clientupdate: extract new clientupdate package (tailscale#8827) (Andrew Lytvynov) #8827
• 16bc935: client/web: add barebones vite dev setup (Sonia Appasamy) #8841
• set the don't fragment sockopt (tailscale#8715) #8715 (salman aljammaz)
• 92fc9a0: cmd/tailscale: add debug commands to break connections (Brad Fitzpatrick) #8847
• 98ec892: ipn/ipnlocal,net/tsdial: update docs/rename funcs (Maisem Ali) #8814
• 3f12b9c: client/web: pipe through to React in dev mode (Sonia Appasamy) #8851
• 21e32b2: .github: use testwrapper on windows (Maisem Ali) #8852
• d5ac18d: client/web: add tsconfig.json (Sonia Appasamy) #8853
• de8e55f: net/netcheck,wgengine/magicsock: reduce coupling between netcheck and magicsock (James Tucker) #8724
• add Home Assistant Add-On detection (tailscale#8857) #8857 (shayne)
• a1b8d70: tstime/mono: remove unsafe (Brad Fitzpatrick) #8848
• implement updates for Synology (tailscale#8858) #8858 (Andrew Lytvynov)
• 9e24a65: control/controlclient: avert a data race when logging (tailscale#8863) (M. J. Fromberger) #8863
• 4940a71: scripts/installer.sh: set Deepin to a debian version (Denton Gentry) #8864
• 2398993: control/controlclient: refactor in prep for optimized delta handling (Brad Fitzpatrick) #8865
• 1fcae42: control/controlclient: move lastUpdateGenInformed to tighter scope (Brad Fitzpatrick) #8869
• b073476: util/winutil/authenticode: add missing docs for CertSubjectError (Aaron Klotz) #8876
• 12238da: client/web: add tailwind styling to react app (Sonia Appasamy) #8875
• 411e336: wgengine/router: use iptablesRunner when no firewall tool is available: (KevinLiang10) #8879
• c17a817: util/osdiag: add logging for winsock layered service providers to Windows bugreports (Aaron Klotz) #8854
• 8e63d75: client/tailscale: add LocalClient.IncrementMetric func (Sonia Appasamy) #8880
• 0052830: cli/serve: funnel interactive enablement flow tweaks (Sonia Appasamy) #8882
• 1a64166: cli/serve: add interactive flow for enabling HTTPS certs (Sonia Appasamy) #8892
• adjust debug logging for WireGuard-only peers #8894 (Brad Fitzpatrick)
• 25a8daf: wgengine/router: always use nftables mode on gokrazy (Brad Fitzpatrick) #8895
• bd02d00: ssh/tailssh: fix gokrazy SSH crash (Brad Fitzpatrick) #8896
• ddba482: client/web: add prettier and format scripts (Will Norris) #8885
• 9c4364e: client/web: copy existing UI to basic react components (Will Norris) #8885
• 95d776b: wgengine/magicsock: only cache N most recent endpoints per-Addr (Andrew Dunham) #8891
• Add FirewallMode to NetInfo to record wether host using iptables or nftables #8902 (KevinLiang10)
• include src IPs in mesh watch messages #8903 (Brad Fitzpatrick)
• 77c7323: VERSION.txt: this is v1.48.0 (Andrew Lytvynov)
• af56dc4: illumos/solaris support rebased onto 1.48.0 (Nahum Shalman)