v1.90.9-sunos

Commits

• 6bc07d3: util/eventbus: add tests for a subscriber trying to acquire the same mutex as a publisher (Nick Khyl) #18040
• f2100e2: util/eventbus: add tests for a subscriber publishing events (Nick Khyl) #18040
• f58cbff: util/eventbus: use unbounded event queues for DeliveredEvents in subscribers (Nick Khyl) #18040
• d7cf0cf: wgengine/userspace: run link change subscribers in eventqueue (tailscale#18024) (Claus Lensbøl) #18054
• 66826a4: VERSION.txt: this is v1.90.9 (Nick Khyl)
• ef1aca7: Merge tag 'v1.90.9' into sunos-1.90 (Nahum Shalman)

v1.90.8-sunos

Commits

• 1cb7adc: #90: SMF should use contract (Nahum Shalman)
• e602907: wgengine/magicsock: validate endpoint.derpAddr in Conn.onUDPRelayAllocResp (tailscale#17828) (Jordan Whited) #17927
• 771a9d2: wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock (tailscale#17831) (Jordan Whited) #17927
• eb03b35: net/udprelay: replace VNI pool with selection algorithm (tailscale#17868) (Jordan Whited) #17927
• 0f421d3: feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (tailscale#17881) (Jordan Whited) #17927
• ea8eeeb: feature/relayserver: fix Shutdown() deadlock (tailscale#17898) (Jordan Whited) #17927
• fa514c7: net/netmon: do not abandon a subscriber when exiting early (tailscale#17899) (tailscale#17905) (Jonathan Nobels) #17905
• don't try to read AUMs which are partway through being written #17969 (Alex Chan)
• rename a mutex to mu instead of single-letter l #17969 (Alex Chan)
• 37b63ef: ipn/ipnlocal: use an in-memory TKA store if FS is unavailable (Alex Chan) #17969
• 90d3cb3: VERSION.txt: this is v1.90.7 (Nick Khyl)
• move RemoveAll() to CompactableChonk #17971 (Alex Chan)
• ccf4f3c: VERSION.txt: this is v1.90.8 (Nick Khyl)
• 5b68a16: #90: SMF should use contract (Nahum Shalman)
• improve installer, tun driver configurable (Nahum Shalman)
• 77dd234: Merge tag 'v1.90.8' into sunos-1.90 (Nahum Shalman)

v1.91.2-sunos

Commits

• d37884c: cmd/k8s-operator: remove early return in ingress matching (tailscale#17841) (Sachin Iyer) #66,#17665,#17841
• 16e90dc: net/batching: fix gro size handling for misordered UDP_GRO messages (tailscale#17842) (Sachin Iyer) #66,#17665,#17842
• e8d2f96: ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (tailscale#17691) (Jonathan Nobels) #66,#17665,#17691
• 27a0168: util/dnsname: increase maxNameLength to account for trailing dot (Fran Bull) #66,#17665,#17789
• f387b10: wgengine/wgcfg: remove two unused Config fields (Brad Fitzpatrick) #66,#17665,#17859
• 37aa7e6: util/dnsname: fix test error message (Fran Bull) #66,#17665,#17857
• update license notices #66,#17665,#17751 (License Updater)
• f4f9dd7: net/udprelay: replace VNI pool with selection algorithm (tailscale#17868) (Jordan Whited) #66,#17665,#17868
• 6ac80b7: cmd/{cloner,viewer}: handle maps of views (Andrew Dunham) #66,#17665,#17867
• ca9b68a: cmd/tailscale/cli: remove service flag from funnel command (tailscale#17850) (Naman Sood) #66,#17665,#17850
• 08e74ef: cmd/cloner: support cloning arbitrarily-nested maps (Andrew Dunham) #66,#17665,#17871
• 146ea42: ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) (Brad Fitzpatrick) #66,#17665,#17804
• 9e4d1fd: feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (tailscale#17881) (Jordan Whited) #66,#17665,#17881
• add a test for unmarshaling existing AUMs #66,#17665,#17889 (Alex Chan)
• 124301f: ipn/ipnlocal: log prefs changes and reason in Start (tailscale#17876) (James 'zofrex' Sanderson) #66,#17665,#17876
• 0285e1d: feature/relayserver: fix Shutdown() deadlock (tailscale#17898) (Jordan Whited) #66,#17665,#17898
• 0526027: control/controlclient: make Observer optional (Brad Fitzpatrick) #66,#17665,#17893
• fix nil pointer dereference with invalid TS_LOG_TARGET #66,#17665,#17895 (Andrew Dunham)
• ce10f7c: wgengine/wgcfg/nmcfg: reduce wireguard reconfig log spam (Brad Fitzpatrick) #66,#17665,#17902
• ab4b990: net/netmon: do not abandon a subscriber when exiting early (tailscale#17899) (M. J. Fromberger) #66,#17665,#17899
• bd36817: scripts/installer.sh: compare major versions numerically (tailscale#17904) (Simon Law) #66,#17665,#17904
• adds missing apostrophes to comments #66,#17665,#17896 (Alex Chan)
• 888a5d4: ipn/localapi: use constant-time comparison for RequiredPassword (tailscale#17906) (Andrew Lytvynov) #66,#17665,#17906
• c5919b4: feature/tpm: check IsZero in clone instead of just nil (tailscale#17884) (Andrew Lytvynov) #66,#17665,#17884
• a96ef43: control/controlclient,ipn/ipnlocal: replace State enum with boolean flags (James Tucker) #66,#17665,#17869
• e1f0ad7: net/udprelay: implement Server.SetStaticAddrPorts (tailscale#17909) (Jordan Whited) #66,#17665,#17909
• 8444659: cmd/tailscale/cli: fix panic in netcheck with mismatched DERP region IDs (Xinyu Kuo) #66,#17665,#17563
• 8aa46a3: util/clientmetric: fix regression causing Metric.v to be uninitialised (Avery Palmer) #66,#17665,#17919
• 4e01e8a: wgengine/netlog: fix send to closed channel in test (Brad Fitzpatrick) #66,#17665,#17923
• 98aadba: util/cache: remove unused code (Brad Fitzpatrick) #66,#17665,#17921
• 7729ec6: illumos/solaris support rebased onto main (Nahum Shalman) #66
• 6fdcc6a: Build tailscale client (Kevin Meziere) #66
• f5c16c3: solaris and illumos use PeerCreds too (Nahum Shalman) #66
• 73dc5bd: make default binary have more features, ship minimal binary too (Nahum Shalman) #66
• 6b465cc: #90: SMF should use contract (Nahum Shalman) #66
• improve installer, tun driver configurable #66 (Nahum Shalman)

v1.91.1-sunos

Commits

• bf47d8e: VERSION.txt: this is v1.91.0 (Nick Khyl) #66,#17665,#17590
• 3dde233: ipn/ipnlocal: use eventbus.SubscribeFunc in LocalBackend (tailscale#17524) (M. J. Fromberger) #66,#17665,#17524
• ab435ce: client/systray: warn users launching the application with sudo (tailscale#17595) (Claus Lensbøl) #66,#17665,#17595
• 675b1c6: cmd/tailscale/cli: error when advertising a Service from an untagged node (tailscale#17577) (Harry Harpham) #66,#17665,#17577
• 3944809: .github/workflows: pin the google/oss-fuzz GitHub Actions (Alex Chan) #66,#17665,#17599
• 2b448f0: ipn, tka: improve the logging around TKA sync and AUM errors (Alex Chan) #66,#17665,#17591
• don't try to read AUMs which are partway through being written #66,#17665,#17601 (Alex Chan)
• mark several of these tests as known flaky #66,#17665,#17604 (Alex Chan)
• convert to semantic line breaks #66,#17665,#17605 (Will Norris)
• update document title #66,#17665,#17605 (Will Norris)
• 36ad24b: feature/tpm: check TPM family data for compatibility (tailscale#17624) (Patrick O'Doherty) #66,#17665,#17624
• 672b1f0: feature/tpm: use withSRK to probe TPM availability (tailscale#17627) (Patrick O'Doherty) #66,#17665,#17627
• 8576a80: util/linuxfw: fix 32-bit arm regression with iptables (Brad Fitzpatrick) #66,#17665,#17630
• d47c697: ipn/ipnlocal: skip TKA bootstrap request if Tailnet Lock is unavailable (Alex Chan) #66,#17665,#17603
• compare warnable codes to avoid errors on release branch (tailscale#17637) #66,#17665,#17637 (Claus Lensbøl)
• fd0e541: net/tsdial: do not panic if setting the same eventbus twice (tailscale#17640) (Claus Lensbøl) #66,#17665,#17640
• avoid racing eventbus subscriptions with Shutdown (tailscale#17639) #66,#17665,#17639 (M. J. Fromberger)
• a760cbe: control/controlclient: back out HW key attestation (tailscale#17664) (Patrick O'Doherty) #66,#17665,#17664
• 34e992f: feature/identityfederation: strip query params on clientID (tailscale#17666) (Max Coulombe) #66,#17665,#17666
• f4e2720: cmd/tailscale/cli: move JetKVM scripts to /userdata/init.d for persistence (tailscale#17610) (srwareham) #66,#17665,#17610
• 576aacd: ipn/ipnlocal/serve: add grant headers (Gesa Stupperich) #66,#17665,#17481
• d6fa899: ipn/ipnlocal/serve: remove grant header truncation logic (Gesa Stupperich) #66,#17665,#17481
• d2e4a20: ipn/ipnlocal/serve: error when PeerCaps serialisation fails (Gesa Stupperich) #66,#17665,#17481
• 0268173: .github: drop branches filter with single asterisk from workflows (tailscale#17682) (Mario Minardi) #66,#17665,#17682
• db5815f: Revert "logtail: avoid racing eventbus subscriptions with Shutdown (tailscale#17639)" (tailscale#17684) (M. J. Fromberger) #66,#17665,#17684
• 0a5ba82: CODE_OF_CONDUCT.md: update code of conduct (Will Norris) #66,#17665,#17688
• edb11e0: wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper (Brad Fitzpatrick) #66,#17665,#17686
• fix an unchecked error in a test (tailscale#17694) #66,#17665,#17694 (M. J. Fromberger)
• fcb614a: cmd/jsonimports: add static analyzer for consistent "json" imports (tailscale#17669) (Joe Tsai) #66,#17665,#17669
• 478342a: wgengine/netlog: embed node information in network flow logs (tailscale#17668) (Joe Tsai) #66,#17665,#17668
• 9ac8105: cmd/jsontags: add static analyzer for incompatible json struct tags (tailscale#17670) (Joe Tsai) #66,#17665,#17670
• rename a mutex to mu instead of single-letter l #66,#17665,#17699 (Alex Chan)
• 06b0923: ipn/ipnlocal: do not stall event processing for appc route updates (tailscale#17663) (M. J. Fromberger) #66,#17665,#17663
• da90e3d: cmd/k8s-operator: rename 'l' variables (tailscale#17700) (Fernando Serboncini) #66,#17665,#17700
• 74f1d8b: cmd/tailscale/cli: unhide serve get-config and serve set-config (tailscale#17598) (Harry Harpham) #66,#17665,#17598
• d5a40c0: cmd/k8s-operator/generate: skip tests if no network or Helm is down (Brad Fitzpatrick) #66,#17665,[tailscale#177...

v1.90.6-sunos

Commits

• dc3c15b: control/controlclient: back out HW key attestation (tailscale#17664) (Patrick O'Doherty)
• bad03ee: feature/identityfederation: strip query params on clientID (tailscale#17666) (Max Coulombe)
• 033adc3: cmd/tailscale/cli: move JetKVM scripts to /userdata/init.d for persistence (tailscale#17610) (srwareham)
• 53004dd: wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper (Brad Fitzpatrick) #17689
• 2dd72f6: Revert "logtail: avoid racing eventbus subscriptions with Shutdown (tailscale#17639)" (tailscale#17684) (M. J. Fromberger)
• 68cba30: VERSION.txt: this is v1.90.4 (Nick Khyl)
• fix regression in recent http2 package change #17706 (Brad Fitzpatrick)
• 300e606: cmd/k8s-operator/generate: skip tests if no network or Helm is down (Brad Fitzpatrick) #17706
• 6324200: VERSION.txt: this is v1.90.5 (Nick Khyl)
• faca4c0: .github/workflows: pin the google/oss-fuzz GitHub Actions (Alex Chan)
• 6e2f2bb: ipn/ipnlocal: do not stall event processing for appc route updates (tailscale#17663) (M. J. Fromberger) #17729
• b6eabd4: util/eventbus: allow logging of slow subscribers (tailscale#17705) (M. J. Fromberger) #17731
• 28f6c2d: VERSION.txt: this is v1.90.6 (Nick Khyl)
• 8ae7205: solaris and illumos use PeerCreds too (Nahum Shalman)
• 89091a3: Merge tag 'v1.90.6' into sunos-1.90 (Nahum Shalman)
• 2658e1d: make default binary have more features, ship minimal binary too (Nahum Shalman)

v1.90.3-sunos

Commits

• ddc0cd7: ipn/ipnlocal: disconnect and block when key expires even when using seamless (James Sanderson) #17090
• db0b9a3: net/dns: don't timeout if inotify sends multiple events (Alex Chan) #17173
• 48029a8: util/eventbus: allow test expectations reporting only an error (tailscale#17146) (M. J. Fromberger) #17146
• df362d0: net/netmon: make ChangeDelta event not a pointer (tailscale#17112) (Claus Lensbøl) #17112
• add some more (tailscale#17177) #17177 (Elliot Blackburn)
• 6992f95: util/eventbus: add an EqualTo helper for testing (tailscale#17178) (M. J. Fromberger) #17178
• 9d66166: cmd/tsidp: update README with new repo location warning (Remy Guercio) #17171
• bump alpine v3.19 -> 3.22 (tailscale#17155) #17155 (Tom Proctor)
• 73c371f: cmd/derper: permit port 80 in ACE targets (Brad Fitzpatrick) #17181
• 55d0e6d: net/dns/recursive: remove recursive DNS resolver (Brad Fitzpatrick) #17169
• 5e3e536: cmd/tailscale/cli: add remove subcommand (Esteban-Bermudez) #15150
• 1c9aaa4: cmd/tailscale/cli: use helper function for matching profiles (Esteban-Bermudez) #15150
• cd153aa: control, ipn, tailcfg: enable seamless key renewal by default (Alex Chan) #17097
• 61751a0: scripts/installer.sh: add Siemens Industrial OS (tailscale#17185) (Erisa A) #17185
• 73bbd7c: build_dist.sh: add -trimpath (Brad Fitzpatrick) #17168
• allow custom tls.Config for TLS probes (tailscale#17186) #17186 (Andrew Lytvynov)
• 4f211ea: util/eventbus: add a LogAllEvents helper for testing (tailscale#17187) (M. J. Fromberger) #17187
• 78035fb: feature/featuretags,cmd/omitsize: support feature dependencies (Brad Fitzpatrick) #17189
• fc9a74a: util/eventbus: fix flakes in eventbustest tests (tailscale#17198) (M. J. Fromberger) #17198
• 394718a: tstest/integration: support multiple C2N handlers in testcontrol (Anton Tolchanov) #17080
• 4a04161: ipn/ipnlocal: add a C2N endpoint for fetching a netmap (Anton Tolchanov) #17080
• 2351cc0: ipn/ipnlocal: make the redactNetmapPrivateKeys test recursive (Anton Tolchanov) #17080
• b9cda4b: tsnet,internal/client/tailscale: resolve OAuth into authkeys in tsnet (tailscale#17191) (Naman Sood) #17191
• ecfdd86: net/ace, control/controlhttp: start adding ACE dialing support (Brad Fitzpatrick) #17182
• 5e698a8: cmd/tailscaled: make the outbound HTTP/SOCKS5 proxy modular (Brad Fitzpatrick) #17200
• d559a21: util/eventbus/eventbustest: fix typo of test name (Brad Fitzpatrick) #17201
• remove direct callback and replace with eventbus (tailscale#17199) #17199 (Claus Lensbøl)
• ca9d795: util/eventbus: add a Monitor type to manage subscriber goroutines (tailscale#17127) (M. J. Fromberger) #17127
• use eventbus.Client.Monitor to simplify subscriber maintenance (tailscale#17203) #17203 (M. J. Fromberger)
• f9c6998: ipn/ipnlocal: use eventbus.Monitor in expiryManager (tailscale#17204) (M. J. Fromberger) #17204
• 798fddb: feature/linuxdnsfight: move inotify watching of /etc/resolv.conf out to a feature (Brad Fitzpatrick) #17207
• d7ec043: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17212
• 1b6bc37: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17214
• db048e9: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17215
• 8ec07b5: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17222
• 986b4d1: control/controlclient: fix tka godoc (Kristoffer Dalby) #17051
• cc1761e: cmd/k8s-operator: send operator logs to tailscale (tailscale#17110) (David Bond) #17110
• 6e12849: controlclient/auto: switch eventbus to using a monitor (tailscale#17205) (Claus Lensbøl) #17205
• e59fbaa: util/eventbus: give a nicer error when attempting to use a closed client (tailscale#17208) (M. J. Fromberger) #17208
• 1b52010: ipn/ipnlocal: use eventbus.Monitor in LocalBackend (tailscale#17225) (M. J. Fromberger) #17225
• f67ad67: control/controlclient: switch ID to be incrementing instead of random (tailscale#17230) (Claus Lensbøl) #17230
• 5e79e49: cmd/tailscale/cli: show last seen time on status command (tailscale#16588) (Mahyar Mirrashed) #16588
• daad5c2: wgengine/router: use eventbus.Monitor in linuxRouter (tailscale#17232) (M. J. Fromberger) #17232
• 15b3876: client/systray: use new tailnet display name is profile title (Will Norris) #17237
• e582fb9: client/web: use network profile for displaying tailnet info (Will Norris) #17236
• e3307fb: cmd/tailscale: omit the drive subcommand in MacOS GUI apps (Percy Wegmann) #17240
• update license notices #17231 (License Updater)
• fix deadlock in SetStaticEndpoints (tailscale#17247) #17247 (Jonathan Nobels)
• 87ccfbd: ipn/ipnlocal: fix eventbus data race (Brad Fitzpatrick) #17253
• 4657cbd: client, cmd/tailscale/cli, feature/relayserver, net/udprelay: implement tailscale debug peer-relay-sessions (tailscale#17239) (Jordan Whited) #17239
• 8fe5754: feature/featuretags: add build tag to remove captive portal detection (Brad Fitzpatrick) #17255
• use buildfeatures.HasCapture const in a handful of places #17259 (Brad Fitzpatrick)
• b3e9a12: net/dns, feature/featuretags: make NetworkManager, systemd-resolved, and DBus modular (Brad Fitzpatrick) #17250
• df747f1: util/eventbus: add a Done method to the Monitor type (tailscale#17263) (M. J. Fromberger) #17263
• 21dc5f4: derp/derpserver: split off derp.Server out of derp into its own package (Brad Fitzpatrick) #17258
• db02a46: types/key: Update HardwareAttestationPublic representation (tailscale#17233) (Patrick O'Doherty) #17233
• 34242df: derp/derpserver: clean up extraction of derp.Server (tailscale#17264) (Simon Law) #17264
• 0bd4f47: ipn/ipnlocal: rename misnamed DisablePortMapperForTest to DisablePortPollerForTest (Brad Fitzpatrick) #17270
• 70400cb: cmd/tailscale/cli: reduce strength of lose-ssh risk warning (James Sanderson) #17262
• e0a77cf: tstest/integration: expand the tests for tailscale up (Alex Chan) #17275
• 0b27871: k8s-operator: add IPv6 support for DNS records (tailscale#16691) (Raj Singh) #16691
• a40f23a: util/eventbus: flesh out docs a bit (Brad Fitzpatrick) #17277
• c49ed5d: feature/tpm: implement key.HardwareAttestationKey (tailscale#17256) (Andrew Lytvynov) [tailscale#17256](https:...

v1.88.4-sunos

Commits

• 25ea53a: wgengine/magicsock: fix relayManager deadlock (tailscale#17449) (tailscale#17511) (Jordan Whited) #17511
• f67e6cf: wgengine/magicsock: fix rebind debouncing (tailscale#17282) (James Tucker)
• 85f4267: VERSION.txt: this is v1.88.4 (Will Hannah)
• 16620ac: Merge tag 'v1.88.4' into sunos-1.88 (Nahum Shalman)

v1.88.3-sunos

Commits

• a5e69bc: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17244
• 585248e: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17243
• c99901e: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17243
• 27b1b1f: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17243
• 9961c09: VERSION.txt: this is v1.88.3 (Will Hannah)
• 4f0d522: Merge tag 'v1.88.3' into sunos-1.88 (Nahum Shalman)

v1.88.2-sunos

Commits

• 5a56942: k8s-operator: reset service status before append (tailscale#17120) (tailscale#17137) (David Bond) #17137
• 912a84e: VERSION.txt: this is v1.88.2 (Will Hannah)
• 1e26584: Merge tag 'v1.88.2' into sunos-1.88 (Nahum Shalman)

v1.88.1-sunos

Bug Fixes

• invalid memory address or nil pointer dereference (tailscale#16922) #16922 (Need-an-AwP)

Builds

• deps: bump form-data from 4.0.0 to 4.0.4 in /client/web (tailscale#16623) #16623 (dependabot[bot])
• deps: bump @babel/runtime from 7.23.4 to 7.26.10 in /client/web (tailscale#15299) #15299 (dependabot[bot])

Commits

• 2a5d9c7: VERSION.txt: this is v1.87.0 (Aaron Klotz) #16648
• c572442: cmd/tailscale: allow SSH to IPs or DNS names without MagicDNS (tailscale#16591) (Danni Popova) #16591
• bfebf87: cmd/tailscaled: update installSystemDaemonWindows to set the correct system service depndencies (Aaron Klotz) #16659
• e300a00: cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (tailscale#16181) (Raj Singh) #16181
• 5154bbb: k8s-operator: adding session type to cast header (tailscale#16660) (Tom Meadows) #16660
• add an ETag to UnhealthyState for change detection #16644 (James Sanderson)
• 0208462: k8s-operator: handle multiple WebSocket frames per read (tailscale#16678) (Tom Proctor) #16678
• 61d42eb: k8s-operator: fix test flake (tailscale#16680) (Tom Proctor) #16680
• 4a435ae: .github: Bump github/codeql-action from 3.29.2 to 3.29.3 (tailscale#16615) (dependabot[bot]) #16615
• 5ce3845: net/portmapper: avert a panic when a mapping is not available (tailscale#16686) (M. J. Fromberger) #16686
• a9f3fd1: wgengine/magicsock: fix magicsock deadlock around Conn.NoteRecvActivity (tailscale#16687) (Jordan Whited) #16687
• 4df02bb: util/syspolicy/setting: use a custom marshaler for time.Duration (Nick Khyl) #16690
• b34cdc9: ipn,net,tsnet,wgengine: make an eventbus mandatory where it is used (tailscale#16594) (M. J. Fromberger) #16594
• e37432a: cmd/tailscale/cli: update message for disable service (tailscale#16705) (KevinLiang10) #16705
• 3d1e4f1: tstest/natlab: fix conn.Close race with conn.ReadFromUDPAddrPort (tailscale#16710) (Jordan Whited) #16710
• aa6a2d1: drive/driveimpl: use sudo or su to run file server (Percy Wegmann) #16702
• eed3e5d: ipn/store/kubestore,kube: fix cert error in admin UI (tailscale#16717) (Tom Proctor) #16717
• 1cc842b: util/set: add more functionality to IntSet (tailscale#16640) (Joe Tsai) #16640
• 47b5f10: cmd/tsidp,tsnet: update tsidp oidc-key store path (tailscale#16735) (Mike O'Driscoll) #16735
• 23a0398: ipn/ipnlocal, net/dns: use slices.Equal to simplify code (tailscale#16641) (jishudashu) #16641
• f2fd7a0: cmd/k8s-operator,k8s-operator: allow setting a priorityClassName (tailscale#16685) (Lee Briggs) #16685
• 'generate' target (tailscale#16746) #16746 (mzbenami)
• d897d80: feature/taildrop: do not use m.opts.Dir for Android (tailscale#16316) (kari-ts) #16316
• sort make commands and fix printing newlines #16750 (Will Norris)
• 834630f: cmd/tailscale: add systray subcommand on Linux builds (Will Norris) #16749
• b0018f1: wgengine/magicsock: fix looksLikeInitiationMsg endianness (tailscale#16771) (Jordan Whited) #16771
• 5bb42e3: wgengine/router: rely on events for deleted IP rules (tailscale#16744) (Claus Lensbøl) #16744
• 9f29c42: client/systray: allow specifying tailscaled socket (Will Norris) #16774
• ad273d7: scripts/installer.sh: add bazzite handling (tailscale#16779) (Erisa A) #16779
• f80ea92: .github/workflows: enforce github action version pinning (tailscale#16768) (Andrew Lytvynov) #16768
• 57d6530: scripts/installer.sh: add FreeBSD 15 (tailscale#16741) (TheBigBear) #16741
• 908f20e: wgengine/magicsock: add receiveIP() unit tests (tailscale#16781) (Jordan Whited) #16781
• 02967ff: wgengine/magicsock: add lazyEndpoint.InitiationMessagePublicKey tests (tailscale#16790) (Jordan Whited) #16790
• 0374e6d: wgengine/magicsock: add lazyEndpoint.FromPeer tests (tailscale#16791) (Jordan Whited) #16791
• 4666d4c: wgengine/magicsock: fix missing Conn.hasPeerRelayServers.Store() call (tailscale#16792) (Jordan Whited) #16792
• 89954fb: client/systray: add startup script generator for systemd (tailscale#16801) (Claus Lensbøl) #16801
• d4060f1: CODE_OF_CONDUCT.md: update Code of Conduct (tailscale#16806) (Erisa A) #16806
• 3fe0228: client/systray: temporarily replace systray module (tailscale#16807) (Claus Lensbøl) #16807
• b5283ab: go.toolchain.rev: bump to 1.24.6 (tailscale#16811) (Andrew Lytvynov) #16811
• 5297dc3: cmd/tailscale/cli: move systray configuration to tailscale configure (tailscale#16817) (Claus Lensbøl) #16817
• 796eb21: go.toolchain.rev: bump tsgo toolchain (Brad Fitzpatrick) #16819
• 71d51eb: .github: bump github/codeql-action from 3.29.3 to 3.29.5 (tailscale#16765) (dependabot[bot]) #16765
• d122f03: control/controlknobs,tailcfg,wgengine/magicsock: deprecate NodeAttrDisableMagicSockCryptoRouting (tailscale#16818) (Jordan Whited) #16818
• 03c4b2a: derp/derphttp: test improvements (tailscale#16723) (Mike O'Driscoll) #16723
• 36397f1: wgengine/magicsock: add clientmetrics for TX direction Peer Relay disco messages (tailscale#16831) (Jordan Whited) #16831
• 4fa27db: wgengine/magicsock: add clientmetrics for locally delivered Peer Relay alloc disco (tailscale#16833) (Jordan Whited) #16833
• cde65db: wgengine/magicsock: add clientmetric for Peer Relay challenge reception (tailscale#16834) (Jordan Whited) #16834
• ee0c7b0: cmd/tailscale: fix a panic in netcheck portmapper construction (tailscale#16843) (M. J. Fromberger) #16843
• d07166b: .github: Bump actions/cache from 4.2.3 to 4.2.4 (tailscale#16829) (dependabot[bot]) #16829
• f22c765: cmd/tailscale: add --json-docs flag (tailscale#16851) (Andrew Lytvynov) #16851
• 16bc0a5: net/{batching,packet},wgengine/magicsock: export batchingConn (tailscale#16848) (Jordan Whited) #16848
• 0f7facf: control/controlclient: fix data race on tkaHead (tailscale#16855) (Andrew Lytvynov) #16855
• e4d2822: go.toolchain.rev: bump Go for data race in Go http client (Brad Fitzpatrick) #16856
• 5402620: net/tshttpproxy: add macOS support for system proxy (tailscale#16826) (Will Hannah) #16826
• block key addition when the max number of keys is reached #16859 (Anton Tolchanov)
• c083a9b: net/batching: fix compile-time assert (tailscale#16864) (Jordan Whited) #16864
• fbb9175: cmd/viewer, types/views: implement support for json/v2 (tailscale#16852) (Joe Tsai) #16852
• b8c45a6: client/systray: add CLI error output if operator is missing (Will Norris) #16865
• 3f1851a: types/dnstype, ipn/ipnlocal: allow other DNS resolvers with exit nodes (Michael Ben-Ami) #16802
• 5b6c64b: net/tshttpproxy: use errors.New for error creation (tailscale#16860) (Will Hannah) [tailscale#16860](https://github.com/tailscale/tailscale/pull/...