v1.80.0-sunos

github-actions released this 31 Jan 14:28

· 1149 commits to sunos-1.90 since this release

4193480

Builds

deps: bump nanoid from 3.3.4 to 3.3.8 in /cmd/tsconnect (tailscale#14352) #14352 (dependabot[bot])
deps: bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (tailscale#12468) #12468 (dependabot[bot])

Commits

b37a478: go.mod: bump x/net and dependencies (James Tucker) #66,#14297
66aa774: cmd/gitops-pusher: default previousEtag to controlEtag (tailscale#14296) (Andrew Lytvynov) #66,#14296
cleanup options API and allow setting http.Client (tailscale#11503) #66,#11503 (Joe Tsai)
fix TestHealthMetric to pass on release branch #66,#14303 (Brad Fitzpatrick)
06a82f4: cmd,{get-authkey,tailscale}: remove unnecessary scope qualifier from OAuth clients (Percy Wegmann) #66,#14286
f817860: VERSION.txt: this is v1.79.0 (Nick Khyl) #66,#14310
c276116: cmd/stunc: enforce read timeout deadline (tailscale#14309) (Mike O'Driscoll) #66,#14309
fix testing in container (tailscale#14330) #66,#14330 (Tom Proctor)
add env var setting server send queue depth (tailscale#14334) #66,#14334 (Mike O'Driscoll)
ea3d0bc: prober,derp/derphttp: make dev-mode DERP probes work without TLS (tailscale#14347) (Mario Minardi) #66,#14347
fa28b02: .github: Bump actions/cache from 4.1.2 to 4.2.0 (tailscale#14331) (dependabot[bot]) #66,#14331
d54cd59: .github: Bump github/codeql-action from 3.27.1 to 3.27.6 (tailscale#14332) (dependabot[bot]) #66,#14332
8b1d011: cmd/containerboot: guard kubeClient against nil dereference (tailscale#14357) (Bjorn Neergaard) #66,#14357
0cc071f: cmd/containerboot: don't attempt to write kube Secret in non-kube environments (tailscale#14358) (Irbe Krumina) #66,#14358
fa655e6: cmd/containerboot: add more tests, check that egress service config only set on kube (tailscale#14360) (Irbe Krumina) #66,#14360
f1ccdcc: cmd/k8s-operator,k8s-operator: operator integration tests (tailscale#12792) (Tom Proctor) #66,#12792
6e552f6: cmd/containerboot: don't attempt to patch a Secret field without permissions (tailscale#14365) (Irbe Krumina) #66,#14365
0045860: types/iox: add function types for Reader and Writer (tailscale#14366) (Joe Tsai) #66,#14366
c9188d7: types/bools: add IfElse (tailscale#14272) (Joe Tsai) #66,#14272
716cb37: util/dnsname: use vizerror for all errors (Adrian Dewhurst) #66,#14368
73128e2: ssh/tailssh: remove unused public key support (Brad Fitzpatrick) #66,#14373
aa04f61: net/netcheck: adjust HTTPS latency check to connection time and avoid data race (James Tucker) #66,#14294
perform DERP bandwidth probes over TUN device to mimic real client #66,#14338 (Percy Wegmann)
cc168d9: cmd/k8s-operator: fix ProxyGroup hostname (tailscale#14336) (Irbe Krumina) #66,#14336
5883ca7: types/opt: fix test to be agnostic to omitzero support (tailscale#14401) (Joe Tsai) #66,#14401
0cc2a8d: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #66,#14399
fix WithBandwidthProbing behavior with optional tunAddress #66,#14403 (Brad Fitzpatrick)
b62a013: Switch logging service from log.tailscale.io to log.tailscale.com (tailscale#14398) (Joe Tsai) #66,#14398
b3d4ffe: docs/k8s: add some high-level operator architecture diagrams (tailscale#13915) (Tom Proctor) #66,#13915
add MutexValue (tailscale#14422) #66,#14422 (Joe Tsai)
6ae0287: cmd/systray: add account switcher (Andrew Lytvynov) #66,#14353
00a4504: cmd/derpprobe,prober: add ability to perform continuous queuing delay measurements against DERP servers (Percy Wegmann) #66,#14405
2d4edd8: cmd/systray: add extra padding around notification icon (Will Norris) #66,#14429
add ShardedInt expvar.Var type #66,#14412 (James Tucker)
89adcd8: cmd/systray: improve profile menu (Will Norris) #66,#14427
3adad36: cmd/k8s-operator,k8s-operator: include top-level CRD descriptions (tailscale#14435) (Tom Proctor) #66,#14435
make histogram buckets cumulative #66,#14437 (Percy Wegmann)
256da8d: cmd/systray: remove new menu delay on KDE (Will Norris) #66,#14439
rename and retype ServiceHost capability (tailscale#14380) #66,#14380 (Naman Sood)
cb59943: cmd/systray: add exit nodes menu (Will Norris) #66,#14444
10d4057: cmd/systray: add visual workarounds for gnome, mac, and windows (Will Norris) #66,#14446
8d4ea4d: wgengine/router: add ip rules for unifi udm-pro (Jason Barnett) #66,#10828
c4f9f95: scripts/installer.sh: add support for PikaOS (tailscale#14461) (Erisa A) #66,#14461
4267d0f: .github: update matrix of installer.sh tests (tailscale#14462) (Erisa A) #66,#14462
9e2819b: util/stringsx: add package for extra string functions, like CompareFold (Brad Fitzpatrick) #66,#14458
76ca1ad: scripts/installer.sh: accept different capitalisation of deepin (tailscale#14463) (Erisa A) #66,#14463
3837b6c: cmd/systray: rebuild menu on pref change, assorted other fixes (Will Norris) #66,#14448
72b2789: scripts/installer.sh: allow CachyOS for Arch packages (tailscale#14464) (Erisa A) #66,#14464
68b12a7: metrics,syncs: add ShardedInt support to metrics.LabelMap (James Tucker) #66,#14432
2bdbe5b: cmd/systray: add icons for exit node online and offline (Will Norris) #66,#14465
86f273d: cmd/systray: set app icon and title consistently (Will Norris) #66,#14465
5a4148e: cmd/systray: update state management and initialization (Will Norris) #66,#14485
c43c5ca: cmd/systray: properly set tooltip on different platforms (Will Norris) #66,#14488
30d3e7b: scripts/install.sh: add special case for Parrot Security (tailscale#14487) (Erisa A) #66,#14487
add means to set device posture attributes from node #66,#14163 (Brad Fitzpatrick)
update reference to Notify's Swift definition #66,#14512 (Brad Fitzpatrick)
e3bcb2e: ipn/ipnlocal: use context.CancelFunc type for doc clarity (Brad Fitzpatrick) #66,#14513
17b8815: wgengine/router: refactor udm-pro into broader ubnt support (Jason Barnett) #66,#14452
1e2e319: util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps (Brad Fitzpatrick) #66,#14515
402fc9d: control/controlclient: remove optimization that was more convoluted than useful (Brad Fitzpatrick) #66,#14514
ad8d8e3: go.mod: update github.com/go-json-experiment/json (tailscale#14522) (Joe Tsai) #66,#14522
use iterators in more places instead of Range funcs #66,#14529 (Brad Fitzpatrick)
4b56bf9: types/views: remove various Map Range funcs; use iterators everywhere (Brad Fitzpatrick) #66,#14532
convert ServeConfig Range methods to iterators #66,#14534 (Brad Fitzpatrick)
60930d1: Update README to reference correct Commit Style URL (Marc Paquette) #66,#14489
36ea792: Fix various linting, vet & static check issues (Marc Paquette) #66,#14489
declare NotifyWatchOpt consts without using iota #66,#14535 (Brad Fitzpatrick)
flesh out docs #66,#14543 (Brad Fitzpatrick)
5da772c: cmd/tailscale/cli: fix TestUpdatePrefs on macOS (Brad Fitzpatrick) #66,#14545
remove unused User fields #66,#14549 (Brad Fitzpatrick)
07aae18: ipn/ipnlocal, util/goroutines: track goroutines for tests, shutdown (Brad Fitzpatrick) #66,#14521
041622c: ipn/ipnlocal: move where auto exit node selection happens (Brad Fitzpatrick) #66,#14517
82e99fc: client/systray: move cmd/systray to client/systray (Will Norris) #66,#14554
b36984c: cmd/systray: add cmd/systray back as a small client/systray wrapper (Will Norris) #66,#14554
cc4aa43: go.mod: bump github.com/tailscale/peercred for Solaris (Brad Fitzpatrick) #66,#14562
6e45a83: cmd/derper: improve logging on derp mesh connect (James Tucker) #66,#14553
f4f57b8: wgengine/magicsock: rebind on EPIPE/ECONNRESET (James Tucker) #66,#14551
do not set HTTPS port for any private coordination server IP (tailscale#14564) #66,#14564 (Andrea Gottardo)
2c07f5d: wgengine/magicsock: refactor maybeRebindOnError (James Tucker) #66,#14552
220dc56: go.mod: bump tailscale/wireguard-go for Solaris/Illumos (Brad Fitzpatrick) #66,#14567
de9d4b2: net/netmon: remove extra panic guard around ParseRIB (James Tucker) #66,#14298
fix golangci-lint errors #66,#14555 (Will Norris)
009da8a: ipn/ipnlocal: connect serve config to c2n endpoint (KevinLiang10) #66,#14541
8d4ca13: cmd/k8s-operator,k8s-operator: support ingress ProxyGroup type (tailscale#14548) (Irbe Krumina) #66,#14548
clone histogram buckets before handing to Prometheus for derp_qd_probe_delays_seconds #66,#14578 (Percy Wegmann)
8d6b996: ipn/ipnlocal: add client metric gauge for number of IPNBus connections (Brad Fitzpatrick) #66,#14580
improve accuracy of Linux desktop detection heuristic #66,#14581 (Brad Fitzpatrick)
9f17260: types/views: add MapViewsEqual and MapViewsEqualFunc (Andrew Dunham) #66,#14579
fa52035: client/systray: record that systray is running (Will Norris) #66,#14582
0b4ba40: client/web: properly show "Log In" for web client on fresh install (tailscale#14569) (Mario Minardi) #66,#14569
d8579a4: go.mod: bump go-git to v5.13.1 (tailscale#14584) (Andrew Lytvynov) #66,#14584
68997e0: cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (tailscale#14475) (Irbe Krumina) #66,#14475
record total bytes transferred in DERP bandwidth probes #66,#14577 (Percy Wegmann)
7fa07f3: types/views: add SliceEqualAnyOrderFunc (Andrew Dunham) #66,#14591
6ddeae7: types/views: optimize SliceEqualAnyOrderFunc for small slices (Andrew Dunham) #66,#14593
illumos/solaris userspace only support #66,#14571 (Nahum Shalman)
fc8b6d9: ipn/conf.go: add VIPServices to tailscaled configfile (tailscale#14345) (Irbe Krumina) #66,#14345
48a95c4: cmd/containerboot,cmd/k8s-operator: reload tailscaled config (tailscale#14342) (Irbe Krumina) #66,#14342
77017ba: cmd/containerboot: load containerboot serve config that does not contain HTTPS endpoint in tailnets with HTTPS disabled (tailscale#14538) (Irbe Krumina) #66,#14538
a841f9d: go.mod: bump some deps (Brad Fitzpatrick) #66,#14600
support filtering regions by region ID in addition to code #66,#14602 (Percy Wegmann)
2af2557: ipn/ipnlocal: add VIPServices hash to return body of vip-services c2n endpoint (KevinLiang10) #66,#14592
bump base alpine image (tailscale#14604) #66,#14604 (Andrew Lytvynov)
69b9074: util/uniq,types/lazy,*: delete code that's now in Go std (Brad Fitzpatrick) #66,#14614
use Go 1.21's binary.NativeEndian #66,#14616 (Brad Fitzpatrick)
377127c: Revert "Dockerfile: bump base alpine image (tailscale#14604)" (tailscale#14620) (Andrew Lytvynov) #66,#14620
record total bytes transferred in DERP bandwidth probes #66,#14590 (Percy Wegmann)
64ab0dd: cmd/tailscale/cli: only exit silently if len(args) == 0 (Michael Stapelberg) #66,#14611
e4385f1: cmd/tailscale/cli: add --posture-checking to tailscale up (Anton Tolchanov) #66,#14630
da9965d: cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible (Nick Khyl) #66,#14585
414a011: go.mod: bump mdlayher/netlink and u-root/uio to use Go 1.21 NativeEndian (Brad Fitzpatrick) #66,#14632
cfda1ff: cmd/viewer,all: consistently use "read-only" instead of "readonly" (Brad Fitzpatrick) #66,#14633
66269dc: ipn/ipnlocal: allow Peer API access via either V4MasqAddr or V6MasqAddr when both are set (Nick Khyl) #66,#14637
add Node.HomeDERP int, phase out "127.3.3.40:$region" hack [capver 111] #66,#14641 (Brad Fitzpatrick)
2747798: control/controlclient: remove misleading TS_DEBUG_NETMAP, make it TS_DEBUG_MAP=2 (or more) (Brad Fitzpatrick) #66,#14642
d818a58: net/dns: ensure the Windows configurator does not touch the hosts file unless the configuration actually changed (Aaron Klotz) #66,#14639
d0ba91b: ipn/ipnserver: use ipnauth.Actor instead of *ipnserver.actor whenever possible (Nick Khyl) #66,#14626
c3c4c96: ipn/{ipnauth,ipnlocal,ipnserver}, client/tailscale: make ipnserver.Server testable (Nick Khyl) #66,#14626
f33f5f9: ipn/{ipnlocal,ipnserver}: remove redundant (*LocalBackend).ResetForClientDisconnect (Nick Khyl) #66,#14626
6fac290: ipn/ipnserver: fix race condition where LocalBackend is reset after a different user connects (Nick Khyl) #66,#14626
2ac1898: client/tailscale: fix typo in comment (Nick Khyl) #66,#14643
6364b5f: net/netmon: trim IPv6 endpoints in already routable subnets (James Tucker) #66,#14605
7ecb69e: tailcfg,control/controlclient: treat nil AllowedIPs as Addresses [capver 112] (Brad Fitzpatrick) #66,#14644
db05e83: cmd/derper: support explicit configuration of mesh dial hosts (Percy Wegmann) #66,#14560
beb951c: .github: Bump actions/setup-go from 5.1.0 to 5.2.0 (tailscale#14391) (dependabot[bot]) #66,#14391
3431ab1: .github: Bump github/codeql-action from 3.27.6 to 3.28.1 (tailscale#14618) (dependabot[bot]) #66,#14618
use ReplaceFile on Windows so that attributes and ACLs are preserved #66,#14640 (Aaron Klotz)
1b303ee: ipn/ipnlocal: re-advertise appc routes on startup (tailscale#14609) (Andrew Lytvynov) #66,#14609
f023c86: types/lazy: fix flaky TestDeferAfterDo (Nick Khyl) #66,#14645
d8b00e3: cmd/tailscaled: add some more depchecker dep tests (Brad Fitzpatrick) #66,#14653
62fb857: ipn/ipnserver: fix TestConcurrentOSUserSwitchingOnWindows (Nick Khyl) #66,#14656
0481042: ipn/ipnserver: fix a deadlock in (*Server).blockWhileIdentityInUse (Nick Khyl) #66,#14657
remove per-packet DERP pub key copying overheads (tailscale#14658) #66,#14658 (Jordan Whited)
remove DERP pub key copying overheads in qd and non-tun measures (tailscale#14659) #66,#14659 (Jordan Whited)
2d1f6f1: cmd/k8s-operator: require namespace config (tailscale#14648) (Tom Proctor) #66,#14648
7d73a38: net/dns: only populate OSConfig.Hosts when MagicDNS is enabled (Aaron Klotz) #66,#14638
change packets_dropped metric to also have reason and kind labels (tailscale#14651) #66,#14651 (Mario Minardi)
d912a49: net/tstun: add logging to aid developers missing Start calls (Brad Fitzpatrick) #66,#14671
97a44d6: go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (tailscale#14601) (Irbe Krumina) #66,#14601
allow overriding os.Hostname() via syspolicy (tailscale#14676) #14676 (Andrea Gottardo)
[serve] warn that foreground funnel won't work if shields are up (tailscale#14685) #14685 (Irbe Krumina)
add bytes dropped metric (tailscale#14698) #14698 (Mike O'Driscoll)
174af76: .github: Bump actions/upload-artifact from 4.4.3 to 4.6.0 (tailscale#14697) (dependabot[bot]) #14697
33e62a3: .github: Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (tailscale#14695) (dependabot[bot]) #14695
682c06a: .github: Bump golangci/golangci-lint-action from 6.1.0 to 6.2.0 (tailscale#14696) (dependabot[bot]) #14696
69a985f: ipn/ipnlocal,tailcfg: communicate to control whether funnel is enabled (tailscale#14688) (Irbe Krumina) #14688
817ba1c: cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (tailscale#14583) (Irbe Krumina) #14583
51adaec: Revert "ipn/ipnlocal: re-advertise appc routes on startup (tailscale#14609)" (Brad Fitzpatrick) #14710
fix panic on race between listener.Close and incoming packet #14717 (Brad Fitzpatrick)
fix nil pointer access in tcp-in-tcp probes #14681 (Percy Wegmann)
block in Server.Dial until backend is Running #14716 (Brad Fitzpatrick)
8b9d5fd: go.mod: bump github.com/inetaf/tcpproxy (James Tucker) #14718
e12b2a7: cmd/tailscale/cli: clean up how optional commands get registered (Brad Fitzpatrick) #14725
150cd30: ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation (Brad Fitzpatrick) #14724
042ed6b: net/bakedroots: add LetsEncrypt ISRG Root X2 (Brad Fitzpatrick) #14724
add missing debug pprof endpoints #14731 (Brad Fitzpatrick)
8c8750f: ipn/ipnlocal: Support TCP and Web VIP services (KevinLiang10) #14508
ccd1643: add copyright header (KevinLiang10) #14508
0a57051: add blank line (KevinLiang10) #14508
550923d: fix handler related and some nit (KevinLiang10) #14508
e477914: delete extra struct in tailcfg (KevinLiang10) #14508
remove now-unused TailscaleFunnelEnabled method #14732 (Brad Fitzpatrick)
8b65598: util/slicesx: add AppendNonzero (Brad Fitzpatrick) #14735
d1b3785: .github: Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 (tailscale#14141) (dependabot[bot]) #14141
add ServiceName #14722 (Adrian Dewhurst)
3dabea0: cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (tailscale#14727) (Andrea Gottardo) #14727
3fb8a1f: ipn/ipnlocal: re-advertise appc routes on startup, take 2 (tailscale#14740) (Andrew Lytvynov) #14740
1562a6f: feature/*: make Wake-on-LAN conditional, start supporting modular features (Brad Fitzpatrick) #14738
3033a96: cmd/k8s-operator: fix reconciler name clash (tailscale#14712) (Tom Proctor) #14712
a00623e: derp,wgengine/magicsock: remove unexpected label (tailscale#14711) (Mike O'Driscoll) #14711
f1710f4: appc,ipn/ipnlocal: log DNS parsing errors in app connectors (tailscale#14607) (Andrew Lytvynov) #14607
d6abbc2: net/tstun: move TAP support out to separate package feature/tap (Brad Fitzpatrick) #14741
413fb5b: control/controlclient: delete unreferenced mapSession UserProfiles (Brad Fitzpatrick) #14749
f0db473: cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the GP lock during service startup (Nick Khyl) #14669
61bea75: cmd/tailscale: fix, test some recent doc inconsistencies (Brad Fitzpatrick) #14757
3a39f08: util/usermetric: add more drop labels (Kristoffer Dalby) #14434
5756bc1: wgengine/filter: return drop reason for metrics (Kristoffer Dalby) #14434
f39ee8e: net/tstun: add back outgoing drop metric (Kristoffer Dalby) #14434
f0b63d0: wgengine/filter: add check for unknown proto (Kristoffer Dalby) #14434
move Conn interface to derp.go #14744 (Percy Wegmann)
450bc9a: cmd/derper,derp: make TCP write timeout configurable (Percy Wegmann) #14744
05afa31: util/clientmetric: use counter in aggcounter (Kristoffer Dalby) #14759
adjust ServiceName.Validate to use vizerror #14748 (Adrian Dewhurst)
69bc164: ipn/ipnlocal: include DNS SAN in cert CSR (tailscale#14764) (Tom Proctor) #14764
716e4fc: client/web: remove advanced options from web client login (tailscale#14770) (Mario Minardi) #14770
cbf1a9a: go.{mod,sum}: update web-client-prebuilt (tailscale#14772) (Mario Minardi) #14772
1a7274f: control/controlclient: skip SetControlClientStatus when queue has newer results later (Brad Fitzpatrick) #14768
ca39c4e: cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc (James Tucker) #14755
2089f4b: ipn/ipnlocal: add debug envknob for ACME directory URL (tailscale#14771) (Tom Proctor) #14771
82e41dd: cmd/natc: expose netstack metrics in client metrics in natc (James Tucker) #14756
2c98c44: control/controlclient: sanitize invalid DERPMap nil Region from control (Brad Fitzpatrick) #14753
68a66ee: feature/capture: move packet capture to feature/*, out of iOS + CLI (Brad Fitzpatrick) #14758
66b2e9f: envknob/featureknob: allow use of exit node on unraid (tailscale#14754) (Derek Kaser) #14754
e701fde: control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance (Brad Fitzpatrick) #14789
04029b8: tstest/deptest: verify that tailscale.com BadDeps actually exist (Brad Fitzpatrick) #14787
8c92589: go.mod: bump depaware, add --internal flag to stop hiding internal packages (Brad Fitzpatrick) #14786
bce05ec: control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n (Brad Fitzpatrick) #14785
3fec806: .github: Bump actions/setup-go from 5.2.0 to 5.3.0 (tailscale#14793) (dependabot[bot]) #14793
76dc028: .github: Bump github/codeql-action from 3.28.1 to 3.28.5 (tailscale#14794) (dependabot[bot]) #14794
do Warnable dependency filtering in tailscaled #14796 (Brad Fitzpatrick)
relax no-derp-home warnable to not fire if not in map poll #14799 (Brad Fitzpatrick)
2691b9f: tempfork/acme: add new package for x/crypto package acme fork, move (Brad Fitzpatrick) #13508
ba1f9a3: types/persist: remove Persist.LegacyFrontendPrivateMachineKey (Brad Fitzpatrick) #14777
079973d: tempfork/acme: fix TestSyncedToUpstream with Windows line endings (Brad Fitzpatrick) #14804
6f10fe8: cmd/tailscale: add warning to help text of --force-reauth (tailscale#14778) (yejingchen) #14778
return from Accept when the listener gets closed #14809 (Anton Tolchanov)
46fd4e5: ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh (Percy Wegmann) #14803
f1514a9: go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (tailscale#14814) (Mario Minardi) #14814
0aa5415: .github: Bump actions/checkout from 3.6.0 to 4.2.2 (tailscale#14139) (dependabot[bot]) #14139
eb29930: types/views: fix SliceEqualAnyOrderFunc short optimization (Andrew Dunham) #14815
b406f20: cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (tailscale#14436) (Irbe Krumina) #14436
52f88f7: cmd/k8s-operator: don't set deprecated configfile hash on new proxies (tailscale#14817) (Irbe Krumina) #14817
b60f6b8: Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh" (Percy Wegmann) #14820
8bd04bd: go.mod: bump gorilla/csrf for security fix (tailscale#14822) (Brad Fitzpatrick) #14822
3f39211: cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (tailscale#14792) (Irbe Krumina) #14792
ed8bb3b: control/controlclient: add missing word in comment (Brad Fitzpatrick) #14830
0ed4aa0: control/controlclient: flesh out a recently added comment (Brad Fitzpatrick) #14830
a49af98: cmd/k8s-operator: temporarily disable HA Ingress controller (tailscale#14833) (Irbe Krumina) #14833
support multiple probes running concurrently #14818 (Anton Tolchanov)
138a83e: cmd/containerboot: wait for consistent state on shutdown (tailscale#14263) (Tom Proctor) #14263
649a71f: VERSION.txt: this is v1.80.0 (tailscale#14837) (Andrea Gottardo) #14837
6582cdb: illumos/solaris support rebased onto v1.80.0 (Nahum Shalman)
4193480: build tailscale client (Kevin Meziere)

Assets 10