v1.58.0-sunos

Documentation

• add Windows administrative template #10721 (Adrian Dewhurst)

Commits

• 971fa8d: VERSION.txt: this is v1.57.0 (Sonia Appasamy) #10587
• bac4890: net/portmapper: be smarter about selecting a UPnP device (Andrew Dunham) #10489
• 727acf9: net/netcheck: use DERP frames as a signal for home region liveness (Andrew Dunham) #10528
• b62a3fc: client/web: keep redirects on-site (tailscale#10525) (Chris Palmer) #10525
• 1a08ea5: cmd/k8s-operator: operator can create subnetrouter (tailscale#9505) (Irbe Krumina) #9505
• 3ae5623: ipn/ipnlocal: fix usage of slices.Compact (Andrew Dunham) #10601
• 685b853: wgengine/magicsock: fix handling of derp.PeerGoneMessage (tailscale#10589) (Jordan Whited) #10589
• c6a2746: client/web: use Tailscale IP known by peer node (Sonia Appasamy) #10603
• correct noun for nacl box type in disco docs #10608 (James Tucker)
• 3a635db: cmd/connector-gen: add helper tool for wide app connector configurations (James Tucker) #10609
• 3fb6ee7: tailscale/logtail: redact public ipv6 and ipv4 ip addresses within tailscaled. (tailscale#10531) (as2643) #10531
• dc2792a: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10598
• 38b4eb9: cmd/k8s-operator/deploy/chart: document passing multiple proxy tags + log level values (tailscale#10624) (Irbe Krumina) #10624
• d05a572: net/portmapper: handle multiple UPnP discovery responses (Andrew Dunham) #10623
• apply tailnet-wide default for auto-updates (tailscale#10508) #10508 (Andrew Lytvynov)
• a661287: util/cmpx: remove code that's in the stdlib now (Andrew Dunham) #10643
• 865ee25: cmd/tailscale/cli: update debug.go (tailscale#10644) (Gavin Greenwalt) #10644
• 0957258: appc,ipn: prevent undesirable route advertisements (James Tucker) #10649
• 5e3126f: tool/gocross: make all Windows DLLs build with static libgcc (Nick Khyl) #10621
• 03f22cd: client/tailscale: add Device.PostureIdentity field (Paul Scott) #10021
• 65f2d32: api.md: add device.postureIdentity field (Paul Scott) #10021
• 09136e5: net/netutil: add function to check rp_filter value (tailscale#5703) (Andrew Dunham) #5703
• remove use of reflect.MethodByName (tailscale#10652) #10652 (Andrew Lytvynov)
• 01286af: net/interfaces: better handle multiple interfaces in LikelyHomeRouterIP (Andrew Dunham) #10653
• f815d66: api.md: add docs for setting an IP address (David Crawshaw) #10650
• 3c333f6: net/portmapper: add logs about obtained mapping(s) (Andrew Dunham) #10663
• cleanup unused code, part 1 (tailscale#10661) #10661 (Andrew Lytvynov)
• remove ConnectionStrategy (tailscale#10662) #10662 (Andrew Lytvynov)
• c9836b4: net/netmon: fix goroutine leak in winMon if the monitor is never started (Nick Khyl) #10668
• cleanup unused code, part 2 (tailscale#10670) #10670 (Andrew Lytvynov)
• cae6edf: ipn/ipnlocal: fix data race with capForcedNetfilter field (Andrew Dunham) #10672
• 5812093: util/winutil: publicize existing functions for opening read-only connections to the Windows Service Control Manager (Aaron Klotz) #10678
• 5deeb56: cmd/tailscale/cli: document usage more clearly (tailscale#10681) (Chris Palmer) #10681
• add shebang to the debian postinst script #10717 (Anton Tolchanov)
• e72f2b7: go.{mod,sum}: bump mkctr (tailscale#10722) (Irbe Krumina) #10722
• 1406a9d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10723
• use syspolicy to override LogTarget #10720 (Adrian Dewhurst)
• use object-src instead of plugin-types (tailscale#10719) #10719 (Chris Palmer)
• b084888: wgengine/magicsock: fix typos in docs (tailscale#10729) (Jordan Whited) #10729
• fa36397: net/portmapper: check returned epoch from PMP and PCP protocols (Andrew Dunham) #10673
• e32a064: cmd/tailscaled: don't create a network monitor in the parent tailscaled on Windows (Aaron Klotz) #10733
• 5a2eb26: cmd/containerboot: ensure that subnet routes can be unset. (tailscale#10734) (Irbe Krumina) #10734
• 3a9450b: cmd/containerboot: don't parse empty subnet routes (tailscale#10738) (Irbe Krumina) #10738
• 10c595d: ipn/ipnlocal: refresh node key without blocking if cap enabled (tailscale#10529) (James 'zofrex' Sanderson) #10529
• d9aeb30: net/interfaces: handle iOS network transitions (tailscale#10680) (Andrea Gottardo) #10680
• 124dc10: controlclient,tailcfg,types: expose MaxKeyDuration via localapi (tailscale#10401) (James 'zofrex' Sanderson) #10401
• 29e98e1: ssh/tailssh: use a local error instead of gossh.ErrDenied (tailscale#10743) (Andrew Lytvynov) #10743
• 46bdbb3: cmd/tailscaled, tsnet: don't return an interface containing a nil pointer (Andrew Dunham) #10752
• aed2cfe: util/winutil: add some missing docs to restartmgr errors (Aaron Klotz) #10754
• d3574a3: cmd/tailscale, ipn/ipnlocal: add 'debug dial-types' command (Andrew Dunham) #10753
• Allow category Z unicode characters (tailscale#10750) #10750 (Rhea Ghosh)
• 35c3032: net/dns/resolver: add ID to verbose logs in forwarder (Andrew Dunham) #10751
• apply ControlURL policy before login #10765 (Adrian Dewhurst)
• 1336992: cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passing tailscaled config in a file (tailscale#10759) (Irbe Krumina) #10759
• 55d302b: client/web: rename Disconnect to Log out (Sonia Appasamy) #10756
• d96e0a5: tstest/integration: add tests for auto-update defaulting behavior (tailscale#10763) (Andrew Lytvynov) #10763
• update tailscale{,d} licenses #10520 (License Updater)
• update win/apple licenses #10476 (License Updater)
• 569b914: client/web: ensure path prefix has a leading slash (Will Norris) #10784
• 953fa80: cmd/{derper,stund},net/stunserver: add standalone stun server (James Tucker) #10757
• 05093ea: cmd/k8s-operator,k8s-operator: allow the operator to deploy exit nodes via Connector custom resource (tailscale#10724) (Irbe Krumina) #10724
• 20f3f70: net/netutil: allow 16-bit 4via6 site IDs (Andrew Dunham) #10760
• 7df9af2: .github/workflows/govulncheck: migrate to a Github App (tailscale#10793) (Andrew Lytvynov) #10793
• remove breaking abstraction layers for apple (tailscale#10728) #10728 (Rhea Ghosh)
• ea9c7f9: cli/set: add printout when web client started (Sonia Appasamy) #10795
• 35f49ac: cmd/k8s-operator: add Connector CRD to Helm chart and static manifests (tailscale#10775) (Irbe Krumina) #10775
• e7d52eb: go.mod: update web-client-prebuilt module (OSS Updater) #10797
• detect macsys from within tailscaled #10798 (Will Norris)
• 4ec6a78: go.mod: update golang-x-crypto fork (tailscale#10786) (Andrew Lytvynov) #10786
• 86e476c: version/mkversion: allow version override with $TS_VERSION_OVERRIDE (tailscale#10799) (Andrew Lytvynov) #10799
• 91c7dfe: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10802
• ca48db0: Makefile,build_docker.sh: allow to configure target platform. (tailscale#10806) (Irbe Krumina) #10806
• 6540d1f: wgengine/router: look up absolute path to netsh.exe on Windows (Andrew Dunham) #10805
• 331a6d1: client/web: add initial types for using peer capabilities (Sonia Appasamy) #10808
• 469af61: cmd/k8s-operator: fix base truncating for extra long Service names (tailscale#10825) (Irbe Krumina) #10825
• 5cc1bfe: cmd/k8s-operator: remove configuration knob for Connector (tailscale#10791) (Irbe Krumina) #10791
• reduce excess goroutines blocking on broadcasts #10826 (James Tucker)
• b89c113: client/web: skip connectivity check on https (Will Norris) #10827
• 169778e: cmd/k8s-operator: minor fix in name gen (tailscale#10830) (Irbe Krumina) #10830
• e691097: cmd/tailscale/cli: add description to exit-node CLI command (Charlotte Brandhorst-Satzkorn) #10832
• optimize field order to reduce GC cost #10834 (James Tucker)
• d841ddc: go.mod: update web-client-prebuilt module (OSS Updater) #10833
• remove unused per-client struct field #10835 (James Tucker)
• optimize another per client field alignment #10836 (James Tucker)
• 236531c: ipn/ipnserver: always allow Windows SYSTEM user to connect (Will Norris) #10809
• c9fd166: net/netmon: when a new network is added, trigger netmon update (tailscale#10840) (kari-ts) #10840
• 241a541: util/ctxkey: add package for type-safe context keys (tailscale#10841) (Joe Tsai) #10841
• update win/apple licenses #10785 (License Updater)
• d0492fd: cmd/k8s-operator: adds a tailscale IngressClass resource, prints warning if class not found. (tailscale#10823) (Irbe Krumina) #10823
• 50b52db: cmd/k8s-operator: sync StatefulSet labels to their Pods (tailscale#10861) (Irbe Krumina) #10861
• 1c3c3d6: cmd/k8s-operator: warn if unsupported Ingress Exact path type is used. (tailscale#10865) (Irbe Krumina) #10865
• 7732377: tstime/rate: implement Value.{Marshal,Unmarshal}JSON (tailscale#8481) (Joe Tsai) #8481
• make use of ctxkey everywhere (tailscale#10846) #10846 (Joe Tsai)
• update android licenses #10816 (License Updater)
• update tailscale{,d} licenses #10803 (License Updater)
• mention tvOS in apple.md (tailscale#10872) #10872 (Andrea Gottardo)
• 24df1ef: appc,ipn/ipnlocal,types/appctype: implement control provided routes (James Tucker) #10877
• 32f01ac: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #10838
• dfc5715: VERSION.txt: this is v1.58.0 (kari-ts)
• 60b2539: illumos/solaris support rebased onto 1.58.0 (Nahum Shalman)