v1.62.0-sunos

github-actions released this 22 Mar 01:07

· 2530 commits to sunos-1.90 since this release

555416a

Commits

7c0651a: scripts/installer.sh: add tuxedoOS to the Ubuntu copies (Nathan Woodburn) #11050
b0e96a6: net/dns: log more info when openresolv commands fail (Andrew Dunham) #11130
61a1644: go.mod, all: move away from inet.af domain seized by Taliban (Brad Fitzpatrick) #11132
7ad2bb8: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11133
b7104cd: util/topk: add package containing a probabilistic top-K tracker (Andrew Dunham) #11029
disable auto update on NixOS (tailscale#11136) #11136 (Patrick O'Doherty)
52f16b5: doctor/ethtool, ipn/ipnlocal: add ethtool bugreport check (Andrew Dunham) #11138
4d66841: wgengine/router: fix ip rule restoration (Jason Barnett) #10858
3aca29e: VERSION.txt: this is v1.61.0 (Percy Wegmann) #11148
69f5664: ipn/ipnlocal: fix doctor API endpoint (tailscale#11155) (San) #11155
2448781: cmd/tailscale: make web client URL clickable (Will Norris) #11164
6b582cb: cmd/tailscale: support clickable IPv6 web client addresses (Will Norris) #11165
44e337c: tool/gocross: pass flags for visionOS and visionOS Simulator (tailscale#11127) (Andrea Gottardo) #11127
70b7201: net/dns: fix infinite loop when run on Amazon Linux 2023 (Andrew Dunham) #11163
allow longer idle log upload connections #11167 (James Tucker)
794af40: ipn/ipnlocal: remove ancient transition mechanism for https certs (Brad Fitzpatrick) #11168
add TLS probe constructor to split dial addr from cert name #11177 (Brad Fitzpatrick)
8fe5042: net/ktimeout: add a package to set TCP user timeout (James Tucker) #11181
d756622: util/syspolicy: add ManagedBy keys for Windows (tailscale#11183) (Andrea Gottardo) #11183
91a1019: cmd/testwrapper: apply results of all unit tests to coverage for all packages (Percy Wegmann) #11188
7708ab6: cmd/tailscale/cli: pass "-o 'CanonicalizeHostname no'" to ssh (Paul Scott) #10368
plumb context to Server.verifyClient #11192 (Brad Fitzpatrick)
10d130b: cmd/derper, derp, tailcfg: add admission controller URL option (Brad Fitzpatrick) #11193
0359c2f: util/syspolicy: add 'ResetToDefaults' (tailscale#11194) (Andrea Gottardo) #11194
edbad6d: cmd/derper: add user timeout and reduce TCP keepalive (James Tucker) #11182
72140da: client/web: update vite-plugin-svgr to latest version (tailscale#11197) (Mario Minardi) #11197
713d292: client/web: update plugin-react-swc to latest version (tailscale#11199) (Mario Minardi) #11199
e8d2fc7: net/tshttpproxy: log when we're using a proxy (Andrew Dunham) #11203
131f909: wgengine/wglog: quieten WireGuard logs for allowedips (James Tucker) #11213
15b2c67: cmd/tailscale: add node attribute instructions to share command help (Percy Wegmann) #11212
ac281dd: client/web: update vite and vitest to latest versions (tailscale#11200) (Mario Minardi) #11200
c8c999d: cli/debug: rename DERP debug mode (tailscale#11220) (Andrea Gottardo) #11220
651c489: net/interfaces: reduce & cleanup logs on iOS (James Tucker) #11221
c9b6d19: .github/workflows: fix typo in XDG_CACHE_HOME (James Tucker) #11223
0c5e65e: cmd/derper: apply TCP keepalive and timeout to TLS as well (James Tucker) #11225
8d0d464: net/dns: timeout DOH requests after 10s without response headers (James Tucker) #11227
8b9474b: wgengine/wgcfg: don't send UAPI to disable keep-alives on new peers (Brad Fitzpatrick) #11231
6ad6d6b: wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs (Brad Fitzpatrick) #11232
ff1391a: net/dns/publicdns: add Mullvad family DNS to the list of known DoH servers (mrrfv) #11215
remove LenIter, use Go 1.22 range-over-int instead #11241 (Brad Fitzpatrick)
replace webdavfs with reverse proxies #11187 (Percy Wegmann)
cd9cf93: wgengine/netstack: expose TCP forwarder drops via clientmetrics (Anton Tolchanov) #11245
9aa704a: client/web: restrict serveAPI endpoints to peer capabilities (Sonia Appasamy) #11217
95f2656: client/web: use grants on web UI frontend (Sonia Appasamy) #11217
82c569a: go.mod: update web-client-prebuilt module (OSS Updater) #11254
b42b981: net/dns: do not wait for the interface registry key to appear if the windowsManager is being closed (Nick Khyl) #11224
7ef1fb1: cmd/tailscaled, ipn/ipnlocal, wgengine: shutdown tailscaled if wgdevice is closed (Nick Khyl) #11224
warn about reverse path filtering and exit nodes #11191 (Anton Tolchanov)
9a8c2f4: types/key: remove copy returning array by value (Brad Fitzpatrick) #11239
reduce critical section #11239 (Brad Fitzpatrick)
make pendOpen time later, after dup check #11239 (Brad Fitzpatrick)
1cf8582: ipn/ipnstate, wgengine/wgint: add handshake attempts accessors (Brad Fitzpatrick) #11239
086ef19: scripts/installer.sh: auto-start tailscale on Alpine (tailscale#11214) (Keli) #11214
fix race condition in tailfs_test #11262 (Percy Wegmann)
45d27fa: cmd/k8s-operator,k8s-operator,go.{mod,sum},tstest/tools: add Tailscale Kubernetes operator API docs (tailscale#11246) (Irbe Krumina) #11246
303125d: cmd/k8s-operator: configure all proxies with declarative config (tailscale#11238) (Irbe Krumina) #11238
95dcc17: cmd/k8s-operator: reconcile tailscale Ingresses when their backend Services change. (tailscale#11255) (Irbe Krumina) #11255
add latitude, longitude for node location (tailscale#11162) #11162 (Claire Wang)
c5abbcd: wgengine/netstack: add a per-client limit for in-flight TCP forwards (Andrew Dunham) #11258
7912d76: client/web: update to typescript 5.3.3 (tailscale#11267) (Mario Minardi) #11267
expose function to generate request IDs #11273 (Andrew Dunham)
a20e46a: util/cache: fix missing interface methods (tailscale#11275) (Andrew Dunham) #11275
3dd8ae2: net/tstun: fix spelling of "WireGuard" (Andrew Dunham) #11278
74b8985: ipn/ipnstate, wgengine: make PeerStatusLite.LastHandshake zero Time means none (Brad Fitzpatrick) #11277
use slices.Clone in two places #11277 (Brad Fitzpatrick)
rename local variable from 'found' to conventional 'ok' #11277 (Brad Fitzpatrick)
7e17aeb: .github/workflows: fix regular breakage of go toolchains (James Tucker) #11279
69f4b45: wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine (Brad Fitzpatrick) #11284
e83e2e8: client/web: fix Vite CJS deprecation warning (tailscale#11288) (Ross Zurowski) #11288
2d5d6f5: ipn,wgengine: only intercept TailFS traffic on quad 100 (Percy Wegmann) #11294
b68a09c: ipn/ipnlocal: make active IPN sessions keyed by sessionID (Brad Fitzpatrick) #11291
allow empty redirect URL in CleanRedirectURL (tailscale#11295) #11295 (Andrew Lytvynov)
plumb the PeerByKey from wgengine to magicsock #11297 (Brad Fitzpatrick)
support storing bookmark data on shares #11276 (Percy Wegmann)
include full tailfs shares in ipn notifications #11276 (Percy Wegmann)
097c5ed: util/linuxfw: insert rather than append nftables DNAT rule (tailscale#11303) (Irbe Krumina) #11303
handle multiple versions in "apk info tailscale" output (tailscale#11310) #11310 (Andrew Lytvynov)
00554ad: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11247
only impersonate unprivileged user if able to sudo -u as that user #11314 (Percy Wegmann)
dff6f33: docs/k8s: update docs (tailscale#11307) (Irbe Krumina) #11307
add more test cases for TestCleanRedirectURL (tailscale#11331) #11331 (Chris Palmer)
add suggest exit node related node attribute (tailscale#11329) #11329 (Claire Wang)
2fa20e3: util/cmpver: add Less/LessEq helper funcs (Paul Scott) #11334
8780e33: go.toolchain.rev: bump Go toolchain to 1.22.1 (Brad Fitzpatrick) #11337
65c3c69: {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn (Sonia Appasamy) #11338
4338db2: wgengine/magicsock: prefer link-local addresses to private ones (Andrew Dunham) #11340
update tailscale{,d} licenses #11073 (License Updater)
update win/apple licenses #11100 (License Updater)
update android licenses #11093 (License Updater)
65255b0: client/tailscale: add postures to UserRuleMatch (Kristoffer Dalby) #11250
c58c59e: {ipn,cmd/tailscale/cli}: move ServeConfig mutation logic to ipn/serve (Sonia Appasamy) #11339
00373f0: ipn/ipnlocal: exclude mullvad exit nodes from TailFS peers list (Percy Wegmann) #11349
0cb8646: ipn/localapi: add set-gui-visible endpoint (Andrea Gottardo) #11308
add comment about thread-safety to StateStore #11350 (Percy Wegmann)
fd942b5: ipn/ipnlocal: reduce allocations in TailFS share notifications (Percy Wegmann) #11312
90c4067: util/linuxfw: add container-friendly IPv6 NAT check (tailscale#11353) (Irbe Krumina) #11353
add String method to tsweb.RequestID #11356 (Andrew Dunham)
62cf83e: go.mod: bump gvisor (Andrew Dunham) #11357
9884d06: net/interfaces: fix test hang on Darwin (Andrew Dunham) #11358
3047b62: docs/k8s: don't run subnet router in userspace mode (tailscale#11363) (Irbe Krumina) #11363
3417643: cmd/derper, types/logger: move log filter to shared package (Andrew Dunham) #11149
c662bd9: client/web: dedupe packages in yarn.lock (tailscale#11327) (Mario Minardi) #11327
bump CapabilityVersion (tailscale#11368) #11368 (Claire Wang)
54e5253: version/mkversion: enforce synology versions within int32 range (Sonia Appasamy) #11377
f072d01: wgengine/magicsock: don't change DERP home when not connected to control (Andrew Dunham) #11378
16ae0f6: cmd/viewer: import views when generating byteSliceField (Percy Wegmann) #11366
6c160e6: ipn,tailfs: tie TailFS share configuration to user profile (Percy Wegmann) #11366
e496451: ipn,cmd/tailscale,client/tailscale: add support for renaming TailFS shares (Percy Wegmann) #11366
50a570a: Code Improvements (tailscale#11311) (panchajanya) #11311
43fba6e: util/linuxfw: correct logical error in NAT table check (tailscale#11380) (James Tucker) #11380
055117a: util/linuxfw: fix support for containers without IPv6 iptables filters (tailscale#11381) (James Tucker) #11381
04fceae: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11359
ad33e47: ipn/{ipnlocal,localapi}: add debug verb to force spam IPN bus NetMap (Brad Fitzpatrick) #11387
7429e89: wgengine/netstack: fix bug with duplicate SYN packets in client limit (Andrew Dunham) #11298
export probe counters and cumulative latency #11287 (Anton Tolchanov)
remove unused derp prober latency measurements #11287 (Anton Tolchanov)
add a DERP bandwidth probe #11287 (Anton Tolchanov)
cc950c0: VERSION.txt: this is v1.62.0 (Anton Tolchanov)
555416a: illumos/solaris support rebased onto 1.62.0 (Nahum Shalman)

Assets 6