v1.90.3-sunos

Commits

• ddc0cd7: ipn/ipnlocal: disconnect and block when key expires even when using seamless (James Sanderson) #17090
• db0b9a3: net/dns: don't timeout if inotify sends multiple events (Alex Chan) #17173
• 48029a8: util/eventbus: allow test expectations reporting only an error (tailscale#17146) (M. J. Fromberger) #17146
• df362d0: net/netmon: make ChangeDelta event not a pointer (tailscale#17112) (Claus Lensbøl) #17112
• add some more (tailscale#17177) #17177 (Elliot Blackburn)
• 6992f95: util/eventbus: add an EqualTo helper for testing (tailscale#17178) (M. J. Fromberger) #17178
• 9d66166: cmd/tsidp: update README with new repo location warning (Remy Guercio) #17171
• bump alpine v3.19 -> 3.22 (tailscale#17155) #17155 (Tom Proctor)
• 73c371f: cmd/derper: permit port 80 in ACE targets (Brad Fitzpatrick) #17181
• 55d0e6d: net/dns/recursive: remove recursive DNS resolver (Brad Fitzpatrick) #17169
• 5e3e536: cmd/tailscale/cli: add remove subcommand (Esteban-Bermudez) #15150
• 1c9aaa4: cmd/tailscale/cli: use helper function for matching profiles (Esteban-Bermudez) #15150
• cd153aa: control, ipn, tailcfg: enable seamless key renewal by default (Alex Chan) #17097
• 61751a0: scripts/installer.sh: add Siemens Industrial OS (tailscale#17185) (Erisa A) #17185
• 73bbd7c: build_dist.sh: add -trimpath (Brad Fitzpatrick) #17168
• allow custom tls.Config for TLS probes (tailscale#17186) #17186 (Andrew Lytvynov)
• 4f211ea: util/eventbus: add a LogAllEvents helper for testing (tailscale#17187) (M. J. Fromberger) #17187
• 78035fb: feature/featuretags,cmd/omitsize: support feature dependencies (Brad Fitzpatrick) #17189
• fc9a74a: util/eventbus: fix flakes in eventbustest tests (tailscale#17198) (M. J. Fromberger) #17198
• 394718a: tstest/integration: support multiple C2N handlers in testcontrol (Anton Tolchanov) #17080
• 4a04161: ipn/ipnlocal: add a C2N endpoint for fetching a netmap (Anton Tolchanov) #17080
• 2351cc0: ipn/ipnlocal: make the redactNetmapPrivateKeys test recursive (Anton Tolchanov) #17080
• b9cda4b: tsnet,internal/client/tailscale: resolve OAuth into authkeys in tsnet (tailscale#17191) (Naman Sood) #17191
• ecfdd86: net/ace, control/controlhttp: start adding ACE dialing support (Brad Fitzpatrick) #17182
• 5e698a8: cmd/tailscaled: make the outbound HTTP/SOCKS5 proxy modular (Brad Fitzpatrick) #17200
• d559a21: util/eventbus/eventbustest: fix typo of test name (Brad Fitzpatrick) #17201
• remove direct callback and replace with eventbus (tailscale#17199) #17199 (Claus Lensbøl)
• ca9d795: util/eventbus: add a Monitor type to manage subscriber goroutines (tailscale#17127) (M. J. Fromberger) #17127
• use eventbus.Client.Monitor to simplify subscriber maintenance (tailscale#17203) #17203 (M. J. Fromberger)
• f9c6998: ipn/ipnlocal: use eventbus.Monitor in expiryManager (tailscale#17204) (M. J. Fromberger) #17204
• 798fddb: feature/linuxdnsfight: move inotify watching of /etc/resolv.conf out to a feature (Brad Fitzpatrick) #17207
• d7ec043: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17212
• 1b6bc37: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17214
• db048e9: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17215
• 8ec07b5: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17222
• 986b4d1: control/controlclient: fix tka godoc (Kristoffer Dalby) #17051
• cc1761e: cmd/k8s-operator: send operator logs to tailscale (tailscale#17110) (David Bond) #17110
• 6e12849: controlclient/auto: switch eventbus to using a monitor (tailscale#17205) (Claus Lensbøl) #17205
• e59fbaa: util/eventbus: give a nicer error when attempting to use a closed client (tailscale#17208) (M. J. Fromberger) #17208
• 1b52010: ipn/ipnlocal: use eventbus.Monitor in LocalBackend (tailscale#17225) (M. J. Fromberger) #17225
• f67ad67: control/controlclient: switch ID to be incrementing instead of random (tailscale#17230) (Claus Lensbøl) #17230
• 5e79e49: cmd/tailscale/cli: show last seen time on status command (tailscale#16588) (Mahyar Mirrashed) #16588
• daad5c2: wgengine/router: use eventbus.Monitor in linuxRouter (tailscale#17232) (M. J. Fromberger) #17232
• 15b3876: client/systray: use new tailnet display name is profile title (Will Norris) #17237
• e582fb9: client/web: use network profile for displaying tailnet info (Will Norris) #17236
• e3307fb: cmd/tailscale: omit the drive subcommand in MacOS GUI apps (Percy Wegmann) #17240
• update license notices #17231 (License Updater)
• fix deadlock in SetStaticEndpoints (tailscale#17247) #17247 (Jonathan Nobels)
• 87ccfbd: ipn/ipnlocal: fix eventbus data race (Brad Fitzpatrick) #17253
• 4657cbd: client, cmd/tailscale/cli, feature/relayserver, net/udprelay: implement tailscale debug peer-relay-sessions (tailscale#17239) (Jordan Whited) #17239
• 8fe5754: feature/featuretags: add build tag to remove captive portal detection (Brad Fitzpatrick) #17255
• use buildfeatures.HasCapture const in a handful of places #17259 (Brad Fitzpatrick)
• b3e9a12: net/dns, feature/featuretags: make NetworkManager, systemd-resolved, and DBus modular (Brad Fitzpatrick) #17250
• df747f1: util/eventbus: add a Done method to the Monitor type (tailscale#17263) (M. J. Fromberger) #17263
• 21dc5f4: derp/derpserver: split off derp.Server out of derp into its own package (Brad Fitzpatrick) #17258
• db02a46: types/key: Update HardwareAttestationPublic representation (tailscale#17233) (Patrick O'Doherty) #17233
• 34242df: derp/derpserver: clean up extraction of derp.Server (tailscale#17264) (Simon Law) #17264
• 0bd4f47: ipn/ipnlocal: rename misnamed DisablePortMapperForTest to DisablePortPollerForTest (Brad Fitzpatrick) #17270
• 70400cb: cmd/tailscale/cli: reduce strength of lose-ssh risk warning (James Sanderson) #17262
• e0a77cf: tstest/integration: expand the tests for tailscale up (Alex Chan) #17275
• 0b27871: k8s-operator: add IPv6 support for DNS records (tailscale#16691) (Raj Singh) #16691
• a40f23a: util/eventbus: flesh out docs a bit (Brad Fitzpatrick) #17277
• c49ed5d: feature/tpm: implement key.HardwareAttestationKey (tailscale#17256) (Andrew Lytvynov) #17256
• bbc5107: ipn/ipnlocal: do not reset extHost on (*LocalBackend).Shutdown (Nick Khyl) #17280
• 45d635c: feature/portlist: pull portlist service porting into extension, use eventbus (Brad Fitzpatrick) #17272
• allow tailscaled shutdown via LocalAPI #17271 (Nick Khyl)
• 9154bc1: tstest/integration: skip this test rather than commenting it out (Alex Chan) #17288
• 260fe38: Makefile, cmd/tailscaled: add minimal tailscale+cli binary depaware (Brad Fitzpatrick) #17287
• c011369: cmd/tailscale/cli: start WatchIPNBus before initial Start (Alex Chan) #17074
• 41a2aaf: cmd/tailscale/cli: fix race condition in up --force-reauth (Alex Chan) #17074
• 8b3e88c: wgengine/magicsock: fix rebind debouncing (tailscale#17282) (James Tucker) #17282
• don't rebind variables in for loops #17289 (Alex Chan)
• f2b8d37: feature/tpm: only register HardwareAttestationKey on linux/windows (tailscale#17293) (Andrew Lytvynov) #17293
• b3ae1cb: wgengine/netstack/gro: permit building without GRO (Brad Fitzpatrick) #17284
• f715ee2: cmd/tailscaled: start implementing ts_omit_netstack (Brad Fitzpatrick) #17286
• 0b994ef: docs/windows/policy: add ADMX policy definition for AllowTailscaledRestart (Nick Khyl) #17285
• 09a33b9: net/tstun: support ts_omit_netstack (Brad Fitzpatrick) #17296
• e7a79ef: tstest/integration: deflake TestC2NDebugNetmap, disable service collection (Brad Fitzpatrick) #17300
• e766adf: net/tstun: use ts_omit_gro in another place I missed earlier (Brad Fitzpatrick) #17299
• afe9096: types/opt: de-weird the API a bit with new True and False consts (Brad Fitzpatrick) #17301
• c95fdb0: net/packet/checksum: copy the gvisor checksum, remove the dep (Brad Fitzpatrick) #17297
• eaecc0b: cmd/tailscale/cli: use tabwriter for tailscale status (tailscale#16596) (Mahyar Mirrashed) #16596
• 87ee0f4: ipn/ipnlocal: move last unconditional gvisor import, complete ts_omit_netstack support (Brad Fitzpatrick) #17302
• add ts_omit_doctor support #17304 (Brad Fitzpatrick)
• 9ae8155: cmol/pprof health (tailscale#17303) (Claus Lensbøl) #17303
• use ts_omit_tailnetlock in another spot, for ed25519consensus #17309 (Brad Fitzpatrick)
• d01a0ad: types/dnstype: delete unused func, move other one to its sole caller (Brad Fitzpatrick) #17310
• 7df7e01: tstest/integration/vms,.github/workflows: bump Ubuntu and NixOS for VM tests + cleanup (tailscale#16098) (Irbe Krumina) #16098
• dd615c8: util/linuxfw, feature/buildfeatures: add ts_omit_iptables to make IPTables optional (Brad Fitzpatrick) #17308
• delete AppendTextOrJSONLocked #17249 (Joe Tsai)
• 475b520: tsconst, util/linuxfw, wgengine/router: move Linux fw consts to tsconst (Brad Fitzpatrick) #17314
• 01e645f: util/backoff: rename logtail/backoff package to util/backoff (Brad Fitzpatrick) #17324
• delete unused package #17326 (Brad Fitzpatrick)
• e466488: cmd/k8s-operator: add replica support to nameserver (tailscale#17246) (David Bond) #17246
• 11b770f: feature/logtail: pull logtail + netlog out to modular features (Brad Fitzpatrick) #17325
• 7bcab4a: feature/featuretags: make CLI connection error diagnostics modular (Brad Fitzpatrick) #17328
• 976389c: feature/sdnotify: move util/systemd to a modular feature (Brad Fitzpatrick) #17316
• 65d6c80: cmd/tailscale/cli,client,ipn: add appc-routes cli command (Fran Bull) #17269
• 39e3537: wgengine/router{,/osrouter}: split OS router implementations into subpackage (Brad Fitzpatrick) #17315
• 72bc733: net/speedtest: mark flaky test, and skip it by default as it's slow (Brad Fitzpatrick) #17340
• update the version of Go in the README #17335 (Alex Chan)
• bdb69d1: net/dns/resolver: fix data race in test (Brad Fitzpatrick) #17341
• 54e5023: net/memnet: allow listener address reuse (tailscale#17342) (Brian Palmer) #17342
• 69c79cb: ipn/store, feature/condregister: move AWS + Kube store registration to condregister (Brad Fitzpatrick) #17346
• 038cdb4: feature/clientupdate: move clientupdate to a modular feature, disabled for tsnet (Brad Fitzpatrick) #17312
• ba76578: ipn/ipnlocal, feature/posture: pull posture out into a modular feature (Brad Fitzpatrick) #17348
• 9aa16bf: feature/featuretags, Makefile: fix bug with CLI build tag and depaware, add variant (Brad Fitzpatrick) #17350
• a45473c: cmd/k8s-operator: add DNS policy and config support to ProxyClass (tailscale#16887) (Raj Singh) #16887
• bcd79b1: feature/featuretags: add option to turn off DNS (Brad Fitzpatrick) #17353
• 3f5c560: ipn/ipnlocal: drop h2c package, use net/http's support (Brad Fitzpatrick) #17351
• 2c956e3: ipn/ipnlocal: proxy h2c grpc using net/http.Transport instead of x/net/http2 (Brad Fitzpatrick) #17352
• 1803226: net/tstun: fix typo in doc (Brad Fitzpatrick) #17362
• 9b997c8: feature/tpm: don't log to stderr in tests (Brad Fitzpatrick) #17360
• 442a3a7: feature, net/tshttpproxy: pull out support for using proxies as a feature (Brad Fitzpatrick) #17364
• b9cdef1: util/prompt: add a default and take default in non-interactive cases (James Tucker) #17119
• don't use regexp package in leaf types package #17368 (Brad Fitzpatrick)
• ee034d4: feature/featuretags: add a catch-all "Debug" feature flag (Brad Fitzpatrick) #17365
• be6cfa0: util/eventbus: when ts_omit_debugeventbus is set, don't import tsweb (Brad Fitzpatrick) #17369
• 840c766: types/key: add IsZero method to HardwareAttestationKey (tailscale#17370) (Andrew Lytvynov) #17370
• 9386a10: cmd/tailscaled, ipn/localapi, util/eventbus: don't link in regexp when debug is omitted (Brad Fitzpatrick) #17371
• 6c6a1d8: feature/appconnectors: start making it modular (Brad Fitzpatrick) #17373
• f7afb9b: feature/featuretags, ipn/conffile: make HuJSON support in config files optional (Brad Fitzpatrick) #17372
• 5b09913: ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug (Brad Fitzpatrick) #17374
• 9781b7c: ipn/ipnlocal: plumb logf into nodeBackend (Nick Khyl) #17378
• af1114e: cmd/k8s-proxy: importing feature/condregister on cmd/k8s-proxy (tailscale#17383) (Tom Meadows) #17383
• ebc370e: ipn/ipnlocal: fail test if more notifies are put than expected (James Sanderson) #17385
• 91fa51c: ipn/store, feature/condregister: permit callers to empty import optonal ipn stores (Brad Fitzpatrick) #17386
• use Go 1.20's errors.Join instead of our multierr package #17379 (Brad Fitzpatrick)
• remove AuthenticatedAPITransport (API-over-noise) support #17380 (Brad Fitzpatrick)
• factor app connector arguments into a Config type (tailscale#17389) #17389 (M. J. Fromberger)
• ce752b8: net/netmon: remove usage of direct callbacks from netmon (tailscale#17292) (Claus Lensbøl) #17292
• 67f1081: appc,ipn/ipnlocal: add a required event bus to the AppConnector type (tailscale#17390) (M. J. Fromberger) #17390
• 801aac5: Makefile, cmd/*/depaware.txt: split out vendor packages explicitly (Brad Fitzpatrick) #17391
• 78af49d: control/ts2021: rename from internal/noiseconn in prep for controlclient split (Brad Fitzpatrick) #17393
• cca70dd: cmd/tailscaled: default --encrypt-state to true if TPM is available (tailscale#17376) (Andrew Lytvynov) #17376
• 7dfa267: derp/derphttp: de-flake DERP HTTP clients tests with memnet and synctest (Alex Chan) #17356
• 16e0abe: build_docker.sh: support including extra files (tailscale#17405) (Tom Proctor) #17405
• aa5b2ce: cmd/k8s-operator: add .gitignore for generated chart CRDs (tailscale#17406) (Tom Proctor) #17406
• c45f881: feature/featuretags, all: add build features, use existing ones in more places (Brad Fitzpatrick) #17377
• 1d93bdc: control/controlclient: remove x/net/http2, use net/http (Brad Fitzpatrick) #17394
• 3c32f87: feature/relayserver: use eventbus.Monitor to simplify lifecycle management (tailscale#17234) (M. J. Fromberger) #17234
• 127a967: appc,*: publish events for route updates and storage (tailscale#17392) (M. J. Fromberger) #17392
• 3ae7a35: feature/featuretags: make clientmetrics optional (Brad Fitzpatrick) #17397
• 2cd518a: control/controlclient: optimize zstd decode of KeepAlive messages (Brad Fitzpatrick) #17344
• a208cb9: feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes (Brad Fitzpatrick) #17410
• 24e38eb: control/controlclient,health,ipn/ipnlocal,health: fix deadlock by deleting health reporting (Brad Fitzpatrick) #17412
• cd523ea: ipn/ipnlocal: introduce the concept of client-side-reachability (tailscale#17367) (Simon Law) #17367
• 206d98e: control/controlclient: restore aggressive Direct.Close teardown (Brad Fitzpatrick) #17416
• 304dabc: ipn/ipnauth: fix a null pointer panic in GetConnIdentity (Alex Chan) #17422
• 8d4ea55: cmd/k8s-proxy: switching to using ipn/store/kubestore (tailscale#17402) (Tom Meadows) #17402
• 59a3984: tstest/integration: mark TestClientSideJailing as flaky (Alex Chan) #17420
• use buildfeature constants in a few more places #17424 (Brad Fitzpatrick)
• 9c3aec5: ipn/ipnlocal: remove junk from suggestExitNodeUsingTrafficSteering (tailscale#17436) (Simon Law) #17436
• make it omittable #17431 (Brad Fitzpatrick)
• 141eb64: wgengine/router/osrouter: fix data race in magicsock port update callback (Brad Fitzpatrick) #17434
• 223ced8: feature/ace: make ACE modular (Brad Fitzpatrick) #17437
• db65f3f: ipn/ipnlocal: use buildfeature consts in a few more places (Brad Fitzpatrick) #17443
• 2e38155: feature/c2n: move answerC2N code + deps out of control/controlclient (Brad Fitzpatrick) #17443
• 3c7e351: net/connstats: make it modular (omittable) (Brad Fitzpatrick) #17444
• 3aa8b6d: wgengine/magicsock: remove misleading unexpected log message (tailscale#17445) (Jordan Whited) #17445
• e44e28e: wgengine/magicsock: fix relayManager deadlock (tailscale#17449) (Jordan Whited) #17449
• stop importing flowtrack when unused #17447 (Brad Fitzpatrick)
• f80c7e7: net/wsconn: clarify package comment (kscooo) #17400
• cf520a3: feature/featuretags: add LazyWG modular feature (Brad Fitzpatrick) #17446
• f208bf8: types/lazy: document difference from sync.OnceValue (Brad Fitzpatrick) #17463
• 6db8957: tstest/integration: mark TestPeerRelayPing as flaky (Alex Chan) #17454
• bump CapVer for magicsock deadlock fix (tailscale#17450) #17450 (Jordan Whited)
• use buildfeatures consts in a few more places #17465 (Brad Fitzpatrick)
• 525f992: cmd/testwrapper/flakytest: use t.Attr annotation on flaky tests (Brad Fitzpatrick) #17461
• update license notices #17459 (License Updater)
• d816454: feature/featuretags: make usermetrics modular (Brad Fitzpatrick) #17466
• 7407f40: ipn/ipnlocal: fix setAuthURL / setWgengineStatus race condition (tailscale#17408) (James 'zofrex' Sanderson) #17408
• e0f222b: appc,ipn/ipnlocal: receive AppConnector updates via the event bus (tailscale#17411) (M. J. Fromberger) #17411
• 192f8d2: wgengine/magicsock: add more handleNewServerEndpointRunLoop tests (tailscale#17469) (Jordan Whited) #17469
• 059f53e: feature/condlite/expvar: add expvar stub package when metrics not needed (Brad Fitzpatrick) #17468
• 0415a56: ipn/ipnlocal: fix another racy test (tailscale#17472) (M. J. Fromberger) #17472
• 10cb59f: build_dist.sh: keep --extra-small making a usable build, add --min (Brad Fitzpatrick) #17474
• 28b1b4c: cmd/tailscaled: guard some flag work with buildfeatures checks (Brad Fitzpatrick) #17473
• 316afe7: util/checkchange: stop using deephash everywhere (Brad Fitzpatrick) #17448
• eabc62a: ipn/ipnlocal: don't send LoginFinished unless auth was in progress (tailscale#17266) (James 'zofrex' Sanderson) #17266
• 63f7a40: wgengine/{magicsock,userspace,router}: move portupdates to the eventbus (tailscale#17423) (Claus Lensbøl) #17423
• 232b928: feature/linkspeed: move cosmetic tstun netlink code out to modular feature (Brad Fitzpatrick) #17475
• a933457: ipn/ipnlocal: use named arguments for mockControl.send() (Alex Chan) #17479
• 5c1e26b: ipn/localapi: dead code eliminate unreachable/useless LocalAPI handlers when disabled (Brad Fitzpatrick) #17482
• 98a0ccc: cmd/tailscaled: default state encryption off for incompatible args (tailscale#17480) (Tom Proctor) #17480
• ad6cf2f: util/eventbus: add a function-based subscriber type (tailscale#17432) (M. J. Fromberger) #17432
• f25e47c: flake.nix: use tailscale go fork (tailscale#17486) (Mike O'Driscoll) #17486
• cd2a342: cmd/tsrecorder: adds sending api level logging to tsrecorder (tailscale#16960) (Tom Meadows) #16960
• 0586d5d: k8s-operator/sessionrecording: gives the connection to the recorder from the hijacker a dedicated context (tailscale#17403) (Tom Meadows) #17403
• 2d1014e: ipn/ipnlocal: fix data race on captiveCtx in enterStateLockedOnEntry (tailscale#17495) (James 'zofrex' Sanderson) #17495
• use eventbus.SubscribeFunc in userspaceEngine #17489 (M. J. Fromberger)
• 5833730: wgengine/router: use eventbus.SubscribeFunc in linuxRouter (M. J. Fromberger) #17489
• 241ea1c: wgengine/magicsock: use eventbus.SubscribeFunc in Conn (M. J. Fromberger) #17489
• 109cb50: ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager (M. J. Fromberger) #17489
• 9556a0c: control/ts2021: fix data race during concurrent Close and conn ending (Brad Fitzpatrick) #17497
• 57bd875: control/controlclient: add missing comment (tailscale#17498) (Claus Lensbøl) #17498
• 9a72513: go.toolchain.rev: bump Go to 1.25.2 (Brad Fitzpatrick) #17496
• 4543ea5: wgengine/magicsock: start peer relay path discovery sooner (tailscale#17485) (Jordan Whited) #17485
• 06f1218: tstest/integration: test tailscale up when device approval is required (Alex Chan) #17382
• bb6bd46: tstest/integration: log all the output printed by tailscale up (Alex Chan) #17382
• b7fe1ce: cmd/tailscale/cli: only print authURLs and device approval URLs once (Alex Chan) #17382
• 7edb5b7: flake.nix: update Nix to use tailscale/go 1.25.2 (tailscale#17500) (Mike O'Driscoll) #17500
• f270c31: net/dns, ipn/ipnlocal: fix regressions from change moving away from deephash (Brad Fitzpatrick) #17499
• 9123932: net/dns, wgengine: use viewer/cloner for Config (Brad Fitzpatrick) #17507
• 0f4dec9: feature/featuretags: make bird depend on advertiseroutes (Brad Fitzpatrick) #17507
• e2233b7: feature/relayserver: init server at config time instead of request time (tailscale#17484) (Jordan Whited) #17484
• d72370a: wgengine/magicsock: remove unused arg in deregisterMetrics (tailscale#17513) (Jordan Whited) #17513
• adf308a: wgengine/magicsock: add clientmetrics for RX bytes by af & conn type (tailscale#17512) (Jordan Whited) #17512
• 16a05c7: wgengine/magicsock: fix docs for send clientmetrics (tailscale#17514) (Jordan Whited) #17514
• 154d36f: wgengine/magicsock: do not apply node view updates to a closed Conn (tailscale#17517) (M. J. Fromberger) #17517
• 072e6a3: tsweb/varz: add support for ShardedInt metrics (Anton Tolchanov) #17519
• add destination to struct for tsrecorder (tailscale#17520) #17520 (Tom Meadows)
• f157f32: cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (tailscale#17435) (Naman Sood) #17435
• 0a33aae: util/eventbus: run subscriber functions in a goroutine (tailscale#17510) (M. J. Fromberger) #17510
• af15ee9: wgengine/magicsock: add clientmetrics for TX bytes/packets by af & conn type (tailscale#17515) (Jordan Whited) #17515
• 8e98ecb: net/netmon: handle net.IPAddr types during interface address parsing (tailscale#17523) (Jonathan Nobels) #17523
• specify explicit JSON format for time.Duration (tailscale#17307) #17307 (Joe Tsai)
• e45557a: types/persist: add AttestationKey (tailscale#17281) (Patrick O'Doherty) #17281
• 7c49cab: clientupdate, util/osshare, util/winutil, version: improve Windows GUI filename resolution and WinUI build awareness (Aaron Klotz) #17502
• d8a6d01: ipn/ipnlocal: strip AttestationKey in redacted prefs view (tailscale#17527) (Patrick O'Doherty) #17527
• 005e264: util/eventbus/eventbustest: add support for synctest instead of timers (tailscale#17522) (Claus Lensbøl) #17522
• 1a93a8a: feature/tpm: quiet log output a bit (Brad Fitzpatrick) #17451
• 743e5ac: cmd/tailscale: surface relay-server-port set flag (tailscale#17528) (Jordan Whited) #17528
• 6d897c4: types/netlogtype: remove CBOR representation (tailscale#17545) (Joe Tsai) #17545
• e75f13b: net/connstats: prepare to remove package (tailscale#17554) (Joe Tsai) #17554
• e804b64: wgengine/netlog: merge connstats into package (tailscale#17557) (Joe Tsai) #17557
• 419fba4: k8s-operator/api-proxy: put kube api server events behind environment variable (tailscale#17550) (David Bond) #17550
• use a consistent capitalisation for "Tailnet Lock" #17558 (Alex Chan)
• remove an unused Mem.Orphans() method #17569 (Alex Chan)
• don't look up parent/child information from purged AUMs #17567 (Alex Chan)
• 8d119f6: wgengine/magicsock: minor tidies in Test_endpoint_maybeProbeUDPLifetimeLocked (Alex Chan) #17568
• 6493206: .github/workflows: pin nix-related github actions (tailscale#17574) (Andrew Lytvynov) #17574
• 9083ef1: cmd/k8s-operator: allow pod tolerations on nameservers (tailscale#17260) (David Bond) #17260
• 54cee33: go.toolchain.rev: update to Go 1.25.3 (Brad Fitzpatrick) #17573
• 6a73c0b: cmd/tailscale/cli,feature: add support for identity federation (tailscale#17529) (Max Coulombe) #17529
• c961d58: cmd/tailscale: improve the error message for lock log with no lock (Alex Chan) #17587
• created a shared testing library for Chonk #17572 (Alex Chan)
• update license notices #17589 (License Updater)
• 3c78146: VERSION.txt: this is v1.90.0 (Nick Khyl)
• 75b0c6f: VERSION.txt: this is v1.90.1 (Nick Khyl) #17621
• a8ae316: feature/tpm: check TPM family data for compatibility (tailscale#17624) (Patrick O'Doherty)
• 9fe44b3: feature/tpm: use withSRK to probe TPM availability (tailscale#17627) (Patrick O'Doherty)
• c81ef90: util/linuxfw: fix 32-bit arm regression with iptables (Brad Fitzpatrick)
• compare warnable codes to avoid errors on release branch (tailscale#17637) (Claus Lensbøl)
• 8bcd44e: VERSION.txt: this is v1.90.2 (Nick Khyl)
• e6a3669: net/tsdial: do not panic if setting the same eventbus twice (tailscale#17640) (Claus Lensbøl)
• avoid racing eventbus subscriptions with Shutdown (tailscale#17639) (M. J. Fromberger)
• c50fe71: VERSION.txt: this is v1.90.3 (Nick Khyl)
• 59d9bc7: illumos/solaris support rebased onto v1.90.3 (Nahum Shalman)
• 40f430d: Build tailscale client (Kevin Meziere)