v1.64.0-sunos

Commits

• da3cf12: VERSION.txt: this is v1.63.0 (Anton Tolchanov) #11404
• do not allow msiexec to reboot the OS (tailscale#11409) #11409 (Andrew Lytvynov)
• decd989: ipn/ipnlocal: validate domain of PopBrowserURL on default control URL (tailscale#11394) (Andrew Lytvynov) #11394
• cf8948d: net/routetable: increase route limit used by the test (Anton Tolchanov) #11415
• ea55f96: cmd/tailscale/cli: fix configuring partially empty kubeconfig (tailscale#11417) (Irbe Krumina) #11417
• 08ebac9: version,cli,safesocket: detect non-sandboxed macOS GUI (tailscale#11369) (Andrea Gottardo) #11369
• ensure f is not nil before using it #11426 (Marwan Sulaiman)
• e0886ad: ipn/ipnlocal, tailcfg: add disable-web-client node attribute (tailscale#11418) (Mario Minardi) #11418
• 4d747c1: api.md: document device expiration endpoint (Will Norris) #11448
• d2ccfa4: cmd/tailscale,ipn/ipnlocal: enable web client over quad 100 by default (tailscale#11419) (Mario Minardi) #11419
• 7fe4cbb: types/views: optimize slices contains under some conditions (tailscale#11449) (James Tucker) #11449
• b0c3e6f: cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (tailscale#11453) (Irbe Krumina) #11453
• 349799a: api.md: format API docs with prettier (Will Norris) #11455
• 68d9e49: api.md: add missing backtick to GET searchpaths doc (tailscale#11459) (Mario Minardi) #11459
• 6288c9b: version/prop: remove IsMacAppSandboxEnabled (tailscale#11461) (Andrea Gottardo) #11461
• add Swap method #11463 (Andrew Dunham)
• fix logger data race in tests #11464 (Andrew Dunham)
• 221de01: control/controlclient: fix sending peer capmap changes (tailscale#11457) (Claire Wang) #11457
• e37eded: tool/gocross: add android autoflags (tailscale#11465) (James Tucker) #11465
• include whitespace in test share and filenames #11390 (Percy Wegmann)
• 20e9f33: control/controlclient: send load balancing hint HTTP request header (Brad Fitzpatrick) #11470
• ensure TailFS share notifications are non-nil #11471 (Percy Wegmann)
• 2f7e7be: control/controlclient: do not alias peer CapMap (Adrian Dewhurst) #11472
• 512fc0b: util/reload: add new package to handle periodic value loading (Andrew Dunham) #11476
• 5d1c72f: wgengine/magicsock: don't use endpoint debug ringbuffer on mobile. (Brad Fitzpatrick) #11480
• 6a860cf: ipn/ipnlocal: add c2n pprof option to force a GC (Brad Fitzpatrick) #11479
• d4bfe34: util/zstdframe: add package for stateless zstd compression (tailscale#11481) (Joe Tsai) #11481
• use zstdframe where sensible (tailscale#11491) #11491 (Joe Tsai)
• 8444937: control/controlclient: fix panic regression from earlier load balancer hint header (Brad Fitzpatrick) #11492
• 3f7313d: util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is disabled (James Tucker) #11494
• reduce garbage production in bus watcher #11477 (James Tucker)
• f45594d: control/controlclient: free memory on iOS before full netmap work (Brad Fitzpatrick) #11489
• 8c88853: ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint (Percy Wegmann) #11484
• b104688: ipn/ipnlocal, types/netmap: replace hasCapability with set lookup on NetworkMap (Brad Fitzpatrick) #11501
• 4992aca: tsweb/varz: flesh out munging of expvar keys into valid Prometheus metrics (Brad Fitzpatrick) #11505
• deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89] #11509 (Brad Fitzpatrick)
• a36cfb4: tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr (Brad Fitzpatrick) #11511
• 1e7050e: go.mod: bump github.com/docker/docker (tailscale#11515) (Andrew Lytvynov) #11515
• 8b8b315: net/tstun: use gaissmai/bart instead of tempfork/device (Percy Wegmann) #11488
• b6dfd74: Change type of installCRDs (tailscale#11478) (Chris Milson-Tokunaga) #11478
• 06e22a9: .github/workflows: fix path filter for 'Kubernetes manifests' test job (tailscale#11520) (Irbe Krumina) #11520
• move a scratch buffer to Logger #11486 (Brad Fitzpatrick)
• 90a4d6c: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11516
• 55baf94: metrics, tsweb/varz: add multi-label map metrics (Brad Fitzpatrick) #11521
• 4cbef20: cmd/k8s-operator: redact auth key from debug logs (tailscale#11523) (Irbe Krumina) #11523
• acb611f: ipn/localipn: introduce logs for tailfs (tailscale#11496) (Charlotte Brandhorst-Satzkorn) #11496
• 5d41259: cmd/tailscale/cli: remove Beta tag from tailscale update (tailscale#11529) (Andrew Lytvynov) #11529
• eb42a16: ipn/ipnlocal: report Taildrive access message on failed responses (Percy Wegmann) #11528
• 0d8cd16: go.mod: bump github.com/gaissmai/bart (Maisem Ali) #11531
• bed818a: ipn/localapi: add support for multipart POST to file-put (Percy Wegmann) #11468
• 66e4d84: ipn/localapi: add support for multipart POST to file-put (Percy Wegmann) #11468
• 008676f: cmd/serve: update warning for sandboxed macOS builds (tailscale#11530) (Andrea Gottardo) #11530
• init (tailscale#11467) #11467 (Patrick O'Doherty)
• 3e6306a: derp/derphttp: make CONNECT Host match request-target's authority-form (Brad Fitzpatrick) #11539
• return http.Handler from safeweb.RedirectHTTP (tailscale#11538) #11538 (Patrick O'Doherty)
• 9e2f58f: cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (tailscale#11017) (Irbe Krumina) #11017
• 9b5176c: cmd/k8s-operator: fix failing tests (tailscale#11541) (Irbe Krumina) #11541
• 9401b09: control/controlclient: move client watchdog to cover initial request (James Tucker) #11543
• 354cac7: tsweb/varz: add charset=utf-8 to varz handler (Brad Fitzpatrick) #11533
• make BucketedStats not track 400s, 404s, etc #11548 (Brad Fitzpatrick)
• add opt-in inline style CSP toggle (tailscale#11551) #11551 (Patrick O'Doherty)
• 5fb721d: util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (tailscale#11546) (Irbe Krumina) #11546
• prevent js/wasm clients from picking TLS client cert #11560 (Brad Fitzpatrick)
• detect mux handler conflicts (tailscale#11562) #11562 (Andrew Lytvynov)
• update license notices #11566 (License Updater)
• 1d2af80: .github/workflows: remove go-licenses action (Will Norris) #11567
• e20ce7b: net/dns: close ctx when close dns directManager (Asutorufa) #11555
• 7558a1d: ipn/ipnlocal: disable sockstats on (unstable) mobile by default (James Tucker) #11579
• always zstd compress with FastestCompression and LowMemory (tailscale#11583) #11583 (Joe Tsai)
• delete unused code from old way to configure zstd #11584 (Brad Fitzpatrick)
• cache device model to speed up init #11577 (Kyle Carberry)
• 92ca770: util/linuxfw: fix MSS clamping in nftables mode (tailscale#11588) (Irbe Krumina) #11588
• f384742: net/packet: allow more ICMP errors (James Tucker) #11591
• move http.Serve for HTTP redirects into lib (tailscale#11592) #11592 (Patrick O'Doherty)
• 1c25910: cmd/{derper,derpprobe}: add --version flag (Brad Fitzpatrick) #11593
• update tailfs file and package names (tailscale#11590) #11590 (Charlotte Brandhorst-Satzkorn)
• update doc on BucketedStatsOptions.Finish to match behavior #11596 (James Tucker)
• 262fa8a: ipn/ipnlocal: populate peers' capabilities (tailscale#11365) (Claire Wang) #11365
• b961146: ipn/ipnlocal: q-encode (RFC 2047) Tailscale serve header values (Brad Fitzpatrick) #11605
• 2409661: control/controlclient: delete old naclbox code, require ts2021 Noise (Brad Fitzpatrick) #11586
• update tailfs functions and vars to use drive naming (tailscale#11597) #11597 (Charlotte Brandhorst-Satzkorn)
• 92d3f64: go.toolchain.rev: bump to Go 1.22.2 (Brad Fitzpatrick) #11611
• 8d7894c: clientupdate, net/dns: fix some "tailsacle" typos (Brad Fitzpatrick) #11619
• add helper function to check all IPs for a DNS hostname #11612 (Andrew Dunham)
• support creating multiple probes in ForEachAddr #11624 (Andrew Dunham)
• 1a38d2a: util/zstdframe: support specifying a MaxWindowSize (tailscale#11595) (Joe Tsai) #11595
• 853e3e2: wgengine/router: provide explicit hook to signal Android when VPN needs to be reconfigured (Percy Wegmann) #11623
• switch tailfs to drive syntax for api and logs (tailscale#11625) #11625 (Charlotte Brandhorst-Satzkorn)
• 4bbac72: util/truncate: support []byte as well (tailscale#11614) (Joe Tsai) #11614
• fe0cfec: wgengine/router: enable ip forwarding on gokrazy (Joonas Kuorilehto) #11408
• fix outdated docs on MultiLabelMap #11631 (Brad Fitzpatrick)
• 306bacc: cmd/tailscale/cli: Add CLI command to update certs on Synology devices. (Will Morrison) #10994
• move normalizeShareName into pkg drive and make func public (tailscale#11638) #11638 (Charlotte Brandhorst-Satzkorn)
• 1fbaf26: util/linuxfw: fix chain comparison (tailscale#11639) (Irbe Krumina) #11639
• 6e334e6: net/netcheck,wgengine/magicsock: align DERP frame receive time heuristics (James Tucker) #11640
• ac25220: cmd/tailscale/cli: make exit-node list not random (Brad Fitzpatrick) #11630
• handle panics in retHandler #11642 (Maisem Ali)
• 38377c3: ipn/localapi: sort localapi handler map keys (Brad Fitzpatrick) #11644
• efb710d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #11532
• 5e7c0b0: ipn/ipnlocal: add some "lockedOnEntry" helpers + guardrails, fix bug (Brad Fitzpatrick) #11650
• aa084a2: ipn/ipnlocal: name the unlockOnce type, plumb more, add Unlock method (Brad Fitzpatrick) #11656
• fe22032: net/dns/{publicdns,resolver}: add start of Control D support (alexelisenko) #11659
• 3f4c5da: wgengine/netstack: remove SubnetRouterWrapper (Maisem Ali) #9750
• a5e1f7d: ipn/{ipnlocal,localapi}: add API to toggle use of exit node (Brad Fitzpatrick) #11615
• b0fbd85: net/tsdial: partially fix "tailscale nc" (UserDial) on macOS (Brad Fitzpatrick) #11660
• remove unused notification code #11536 (Anton Tolchanov)
• export probe class and metrics from bandwidth prober #11536 (Anton Tolchanov)
• c71e8db: cmd/tailscale/cli: stop spamming os.Stdout/os.Stderr in tests (Brad Fitzpatrick) #11661
• 0f3a292: cli/configure: respect $KUBECONFIG (tailscale#11604) (Chloé Vulquin) #11604
• e6983ba: cmd/tailscale/cli: fix macOS crash reading envknob in init (tailscale#11667) (Brad Fitzpatrick) #11667
• b27238b: derp/derphttp: don't block in LocalAddr method (Brad Fitzpatrick) #11648
• 0001237: docs/policy: update ADMX and ADML files with new Windows 1.62 syspolicies (Andrea Gottardo) #11451
• 231e44e: Revert "cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (tailscale#11017)" (tailscale#11669) (Irbe Krumina) #11669
• require Buffer.Write to not retain the provided slice (tailscale#11617) #11617 (Joe Tsai)
• 1e0ebc6: cmd/tailscale/cli: rename share command to drive (Percy Wegmann) #11670
• 9da135d: cmd/tailscale/cli: moved share.go to drive.go (Percy Wegmann) #11670
• da4e92b: cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying (Paul Scott) #11364
• 8d83add: util/winutil/winenv: add package for current Windows environment details (Nick Khyl) #11668
• db760d0: cmd/tailscaled: move cleanup to an implicit action during startup (James Tucker) #11601
• d0f3fa7: util/fastuuid: add a more efficient uuid generator (James Tucker) #11680
• switch to fastuuid for request ID generation #11680 (James Tucker)
• 7f4cda2: scripts/installer.sh: add rpm GPG key import (tailscale#11686) (Patrick O'Doherty) #11686
• a2eb1c2: wgengine/magicsock: allow disco communication without known endpoints (James Tucker) #11545
• 78dc862: VERSION.txt: this is v1.64.0 (Jenny Zhang) #11690
• b4ad50c: illumos/solaris support rebased onto 1.64.0 (Nahum Shalman)
• 1692e99: build tailscale client (Kevin Meziere)
• hopefully my cleanup the same as cleanUp (Nahum Shalman)