v1.92.4-sunos

Commits

• 3e7abb6: cmd/k8s-operator: fixes helm template for oauth secret volume mount (tailscale#18230) (tailscale#18234) (Tom Meadows) #18234
• 0d206ff: ipn/ipnlocal: log cert renewal failures (tailscale#18246) (tailscale#18247) (Irbe Krumina) #18247
• 5065307: VERSION.txt: This is 1.92.4 (chaosinthecrd)
• f82b090: Merge tag 'v1.92.4' into sunos-1.92 (Nahum Shalman)

v1.92.3-sunos

Commits

• 653d073: types/netmap: remove PrivateKey from NetworkMap (Brad Fitzpatrick) #17926
• 3a41c0c: ipn/ipnlocal: add PROXY protocol support to Funnel/Serve (Andrew Dunham) #17592
• add Mutex/RWMutex alias/wrappers for future mutex debugging #17920 (Brad Fitzpatrick)
• 139c395: cmd/tailscale/cli: stabilise the output of tailscale lock log --json (Alex Chan) #17683
• a5b2f18: control/controlclient: remove some public API, move to Options & test-only (Brad Fitzpatrick) #17934
• fix typo in comment #17939 (Brad Fitzpatrick)
• add more missing apostrophes in comments #17940 (Alex Chan)
• d010816: go.mod: bump golang.org/x/crypto (tailscale#17907) (Andrew Lytvynov) #17907
• 1723cb8: ipn/ipnlocal: use an in-memory TKA store if FS is unavailable (Alex Chan) #17946
• fix typo in comment #17947 (Brad Fitzpatrick)
• f1cddc6: ipn{,/local},cmd/tailscale: add "sync" flag and pref to disable control map poll (Brad Fitzpatrick) #17941
• 26f9b50: feature/tpm: disable dictionary attack protection on sealing key (tailscale#17952) (Andrew Lytvynov) #17952
• 41662f5: ssh/tailssh: fix incubator tests on macOS arm64 (James Tucker) #17929
• 4860c46: wgengine/netlog: strip dot suffix from node name (tailscale#17954) (Joe Tsai) #17954
• a2e9dfa: cmd/tailscale/cli: warn if a simple up would change prefs (tailscale#17877) (James 'zofrex' Sanderson) #17877
• 9048ea2: ipn/localapi: log calls to localapi (tailscale#17880) (James 'zofrex' Sanderson) #17880
• rename variables with lowercase-l/uppercase-I #17949 (Alex Chan)
• move RemoveAll() to CompactableChonk #17961 (Alex Chan)
• af7c26a: cmd/vet/jsontags: fix a typo in an error message (Alex Chan) #17964
• 4e2f2d1: feature/buildfeatures: re-run go generate (Brad Fitzpatrick) #17958
• 2a6cbb7: .github/workflows: make go_generate check detect new files (Brad Fitzpatrick) #17958
• bd29b18: types/netmap,*: remove some redundant fields from NetMap (Brad Fitzpatrick) #17968
• mark young AUMs as active even if the chain is long #17970 (Anton Tolchanov)
• marshal AUMHash totext even if Tailnet Lock is omitted #17948 (Alex Chan)
• add ippool type #17953 (Fran Bull)
• c09c95e: types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation (James Tucker) #17756
• 3b865d7: cmd/netlogfmt: support resolving IP addresses to synonymous labels (tailscale#17955) (Joe Tsai) #17955
• add some omitzero, adjust some omitempty to omitzero #17975 (Brad Fitzpatrick)
• 408336a: feature/featuretags: add CacheNetMap feature tag for upcoming work (Brad Fitzpatrick) #17979
• 38ccdbe: cmd/k8s-operator: default to stable image (tailscale#17848) (David Bond) #17848
• e1dd922: ipn/ipnlocal, tka: compact TKA state after every sync (Alex Chan) #17942
• 62d64c0: cmd/k8s-operator: fix type comparison in apiserver proxy template (tailscale#17981) (Raj Singh) #17981
• aeda3e8: ipn/ipnlocal: reduce profileManager boilerplate in network-lock tests (Alex Chan) #17984
• 336df56: cmd/tailscale/cli: remove Latin abbreviations from CLI help text (Alex Chan) #17983
• 6ac4356: util/eventbus: simplify some reflect in Bus.pump (Brad Fitzpatrick) #17980
• 976bf24: ipn/ipnlocal: remove the always-true CanSupportNetworkLock() (Alex Chan) #17987
• update license notices #17938 (License Updater)
• a0d059d: cmd/tailscale/cli: allow remote target as service destination (tailscale#17607) (KevinLiang10) #17607
• 86a8498: cmd/k8s-operator: use stable image for k8s-nameserver (tailscale#17985) (David Bond) #17985
• 7d19813: net/batching: fix import formatting (Brad Fitzpatrick) #17999
• 682172c: net/netns: remove spammy logs for interface binding caps (Jonathan Nobels) #17991
• 42a5262: cmd/k8s-operator: add multi replica support for recorders (tailscale#17864) (David Bond) #17864
• ac74d28: ipn/ipnlocal: add validations when setting serve config (tailscale#17950) (Harry Harpham) #17950
• de8ed20: go.mod: bump golang.org/x/crypto (tailscale#18011) (Andrew Lytvynov) #18011
• c679aab: cmd/tailscaled,ipn: show a health warning when state store fails to open (tailscale#17883) (Andrew Lytvynov) #17883
• don't panic if no clock set in tka.Mem #18025 (Alex Chan)
• 016ccae: util/eventbus: add tests for a subscriber trying to acquire the same mutex as a publisher (Nick Khyl) #18004
• 3780f25: util/eventbus: add tests for a subscriber publishing events (Nick Khyl) #18004
• e7f5ca1: wgengine/userspace: run link change subscribers in eventqueue (tailscale#18024) (Claus Lensbøl) #18024
• 9245c71: feature/relayserver: don't publish from within a subscribe fn goroutine (Jordan Whited) #18027
• 1ccece0: util/eventbus: use unbounded event queues for DeliveredEvents in subscribers (Nick Khyl) #18020
• 1658774: portlist,tstest: skip tests on kernels with /proc/net/tcp regression (Andrew Dunham) #18033
• a20cdb5: tstest/integration/testcontrol: de-flake TestUserMetricsRouteGauges (Andrew Dunham) #18028
• 698eecd: ipn/ipnlocal: fix panic in driveTransport on network error (Andrew Dunham) #18030
• 6637003: cmd/cigocacher,go.mod: add cigocacher cmd (Tom Proctor) #17976
• 755309c: net/udprelay: use blake2s-256 MAC for handshake challenge (Jordan Whited) #18016
• 7426eca: cmd/tailscale,feature/relayserver,ipn: add relay-server-static-endpoints set flag (Jordan Whited) #18044
• 9c3a2aa: ipn/ipnlocal: replace log.Printf with logf (tailscale#18045) (Simon Law) #18045
• d4821cd: cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not exist (tailscale#18050) (David Bond) #18050
• 7073f24: ipn/ipnlocal: do not call controlclient.Client.Shutdown with b.mu held (Nick Khyl) #18053
• 848978e: ipn/ipnlocal: test traffic-steering when feature is not enabled (tailscale#17997) (Simon Law) #17997
• ac0b153: tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to a nodeattr (Brad Fitzpatrick) #18056
• s...

v1.90.9-sunos

Commits

• 6bc07d3: util/eventbus: add tests for a subscriber trying to acquire the same mutex as a publisher (Nick Khyl) #18040
• f2100e2: util/eventbus: add tests for a subscriber publishing events (Nick Khyl) #18040
• f58cbff: util/eventbus: use unbounded event queues for DeliveredEvents in subscribers (Nick Khyl) #18040
• d7cf0cf: wgengine/userspace: run link change subscribers in eventqueue (tailscale#18024) (Claus Lensbøl) #18054
• 66826a4: VERSION.txt: this is v1.90.9 (Nick Khyl)
• ef1aca7: Merge tag 'v1.90.9' into sunos-1.90 (Nahum Shalman)

v1.90.8-sunos

Commits

• 1cb7adc: #90: SMF should use contract (Nahum Shalman)
• e602907: wgengine/magicsock: validate endpoint.derpAddr in Conn.onUDPRelayAllocResp (tailscale#17828) (Jordan Whited) #17927
• 771a9d2: wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock (tailscale#17831) (Jordan Whited) #17927
• eb03b35: net/udprelay: replace VNI pool with selection algorithm (tailscale#17868) (Jordan Whited) #17927
• 0f421d3: feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (tailscale#17881) (Jordan Whited) #17927
• ea8eeeb: feature/relayserver: fix Shutdown() deadlock (tailscale#17898) (Jordan Whited) #17927
• fa514c7: net/netmon: do not abandon a subscriber when exiting early (tailscale#17899) (tailscale#17905) (Jonathan Nobels) #17905
• don't try to read AUMs which are partway through being written #17969 (Alex Chan)
• rename a mutex to mu instead of single-letter l #17969 (Alex Chan)
• 37b63ef: ipn/ipnlocal: use an in-memory TKA store if FS is unavailable (Alex Chan) #17969
• 90d3cb3: VERSION.txt: this is v1.90.7 (Nick Khyl)
• move RemoveAll() to CompactableChonk #17971 (Alex Chan)
• ccf4f3c: VERSION.txt: this is v1.90.8 (Nick Khyl)
• 5b68a16: #90: SMF should use contract (Nahum Shalman)
• improve installer, tun driver configurable (Nahum Shalman)
• 77dd234: Merge tag 'v1.90.8' into sunos-1.90 (Nahum Shalman)

v1.91.2-sunos

Commits

• d37884c: cmd/k8s-operator: remove early return in ingress matching (tailscale#17841) (Sachin Iyer) #66,#17665,#17841
• 16e90dc: net/batching: fix gro size handling for misordered UDP_GRO messages (tailscale#17842) (Sachin Iyer) #66,#17665,#17842
• e8d2f96: ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (tailscale#17691) (Jonathan Nobels) #66,#17665,#17691
• 27a0168: util/dnsname: increase maxNameLength to account for trailing dot (Fran Bull) #66,#17665,#17789
• f387b10: wgengine/wgcfg: remove two unused Config fields (Brad Fitzpatrick) #66,#17665,#17859
• 37aa7e6: util/dnsname: fix test error message (Fran Bull) #66,#17665,#17857
• update license notices #66,#17665,#17751 (License Updater)
• f4f9dd7: net/udprelay: replace VNI pool with selection algorithm (tailscale#17868) (Jordan Whited) #66,#17665,#17868
• 6ac80b7: cmd/{cloner,viewer}: handle maps of views (Andrew Dunham) #66,#17665,#17867
• ca9b68a: cmd/tailscale/cli: remove service flag from funnel command (tailscale#17850) (Naman Sood) #66,#17665,#17850
• 08e74ef: cmd/cloner: support cloning arbitrarily-nested maps (Andrew Dunham) #66,#17665,#17871
• 146ea42: ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) (Brad Fitzpatrick) #66,#17665,#17804
• 9e4d1fd: feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (tailscale#17881) (Jordan Whited) #66,#17665,#17881
• add a test for unmarshaling existing AUMs #66,#17665,#17889 (Alex Chan)
• 124301f: ipn/ipnlocal: log prefs changes and reason in Start (tailscale#17876) (James 'zofrex' Sanderson) #66,#17665,#17876
• 0285e1d: feature/relayserver: fix Shutdown() deadlock (tailscale#17898) (Jordan Whited) #66,#17665,#17898
• 0526027: control/controlclient: make Observer optional (Brad Fitzpatrick) #66,#17665,#17893
• fix nil pointer dereference with invalid TS_LOG_TARGET #66,#17665,#17895 (Andrew Dunham)
• ce10f7c: wgengine/wgcfg/nmcfg: reduce wireguard reconfig log spam (Brad Fitzpatrick) #66,#17665,#17902
• ab4b990: net/netmon: do not abandon a subscriber when exiting early (tailscale#17899) (M. J. Fromberger) #66,#17665,#17899
• bd36817: scripts/installer.sh: compare major versions numerically (tailscale#17904) (Simon Law) #66,#17665,#17904
• adds missing apostrophes to comments #66,#17665,#17896 (Alex Chan)
• 888a5d4: ipn/localapi: use constant-time comparison for RequiredPassword (tailscale#17906) (Andrew Lytvynov) #66,#17665,#17906
• c5919b4: feature/tpm: check IsZero in clone instead of just nil (tailscale#17884) (Andrew Lytvynov) #66,#17665,#17884
• a96ef43: control/controlclient,ipn/ipnlocal: replace State enum with boolean flags (James Tucker) #66,#17665,#17869
• e1f0ad7: net/udprelay: implement Server.SetStaticAddrPorts (tailscale#17909) (Jordan Whited) #66,#17665,#17909
• 8444659: cmd/tailscale/cli: fix panic in netcheck with mismatched DERP region IDs (Xinyu Kuo) #66,#17665,#17563
• 8aa46a3: util/clientmetric: fix regression causing Metric.v to be uninitialised (Avery Palmer) #66,#17665,#17919
• 4e01e8a: wgengine/netlog: fix send to closed channel in test (Brad Fitzpatrick) #66,#17665,#17923
• 98aadba: util/cache: remove unused code (Brad Fitzpatrick) #66,#17665,#17921
• 7729ec6: illumos/solaris support rebased onto main (Nahum Shalman) #66
• 6fdcc6a: Build tailscale client (Kevin Meziere) #66
• f5c16c3: solaris and illumos use PeerCreds too (Nahum Shalman) #66
• 73dc5bd: make default binary have more features, ship minimal binary too (Nahum Shalman) #66
• 6b465cc: #90: SMF should use contract (Nahum Shalman) #66
• improve installer, tun driver configurable #66 (Nahum Shalman)

v1.91.1-sunos

Commits

• bf47d8e: VERSION.txt: this is v1.91.0 (Nick Khyl) #66,#17665,#17590
• 3dde233: ipn/ipnlocal: use eventbus.SubscribeFunc in LocalBackend (tailscale#17524) (M. J. Fromberger) #66,#17665,#17524
• ab435ce: client/systray: warn users launching the application with sudo (tailscale#17595) (Claus Lensbøl) #66,#17665,#17595
• 675b1c6: cmd/tailscale/cli: error when advertising a Service from an untagged node (tailscale#17577) (Harry Harpham) #66,#17665,#17577
• 3944809: .github/workflows: pin the google/oss-fuzz GitHub Actions (Alex Chan) #66,#17665,#17599
• 2b448f0: ipn, tka: improve the logging around TKA sync and AUM errors (Alex Chan) #66,#17665,#17591
• don't try to read AUMs which are partway through being written #66,#17665,#17601 (Alex Chan)
• mark several of these tests as known flaky #66,#17665,#17604 (Alex Chan)
• convert to semantic line breaks #66,#17665,#17605 (Will Norris)
• update document title #66,#17665,#17605 (Will Norris)
• 36ad24b: feature/tpm: check TPM family data for compatibility (tailscale#17624) (Patrick O'Doherty) #66,#17665,#17624
• 672b1f0: feature/tpm: use withSRK to probe TPM availability (tailscale#17627) (Patrick O'Doherty) #66,#17665,#17627
• 8576a80: util/linuxfw: fix 32-bit arm regression with iptables (Brad Fitzpatrick) #66,#17665,#17630
• d47c697: ipn/ipnlocal: skip TKA bootstrap request if Tailnet Lock is unavailable (Alex Chan) #66,#17665,#17603
• compare warnable codes to avoid errors on release branch (tailscale#17637) #66,#17665,#17637 (Claus Lensbøl)
• fd0e541: net/tsdial: do not panic if setting the same eventbus twice (tailscale#17640) (Claus Lensbøl) #66,#17665,#17640
• avoid racing eventbus subscriptions with Shutdown (tailscale#17639) #66,#17665,#17639 (M. J. Fromberger)
• a760cbe: control/controlclient: back out HW key attestation (tailscale#17664) (Patrick O'Doherty) #66,#17665,#17664
• 34e992f: feature/identityfederation: strip query params on clientID (tailscale#17666) (Max Coulombe) #66,#17665,#17666
• f4e2720: cmd/tailscale/cli: move JetKVM scripts to /userdata/init.d for persistence (tailscale#17610) (srwareham) #66,#17665,#17610
• 576aacd: ipn/ipnlocal/serve: add grant headers (Gesa Stupperich) #66,#17665,#17481
• d6fa899: ipn/ipnlocal/serve: remove grant header truncation logic (Gesa Stupperich) #66,#17665,#17481
• d2e4a20: ipn/ipnlocal/serve: error when PeerCaps serialisation fails (Gesa Stupperich) #66,#17665,#17481
• 0268173: .github: drop branches filter with single asterisk from workflows (tailscale#17682) (Mario Minardi) #66,#17665,#17682
• db5815f: Revert "logtail: avoid racing eventbus subscriptions with Shutdown (tailscale#17639)" (tailscale#17684) (M. J. Fromberger) #66,#17665,#17684
• 0a5ba82: CODE_OF_CONDUCT.md: update code of conduct (Will Norris) #66,#17665,#17688
• edb11e0: wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper (Brad Fitzpatrick) #66,#17665,#17686
• fix an unchecked error in a test (tailscale#17694) #66,#17665,#17694 (M. J. Fromberger)
• fcb614a: cmd/jsonimports: add static analyzer for consistent "json" imports (tailscale#17669) (Joe Tsai) #66,#17665,#17669
• 478342a: wgengine/netlog: embed node information in network flow logs (tailscale#17668) (Joe Tsai) #66,#17665,#17668
• 9ac8105: cmd/jsontags: add static analyzer for incompatible json struct tags (tailscale#17670) (Joe Tsai) #66,#17665,#17670
• rename a mutex to mu instead of single-letter l #66,#17665,#17699 (Alex Chan)
• 06b0923: ipn/ipnlocal: do not stall event processing for appc route updates (tailscale#17663) (M. J. Fromberger) #66,#17665,#17663
• da90e3d: cmd/k8s-operator: rename 'l' variables (tailscale#17700) (Fernando Serboncini) #66,#17665,#17700
• 74f1d8b: cmd/tailscale/cli: unhide serve get-config and serve set-config (tailscale#17598) (Harry Harpham) #66,#17665,#17598
• d5a40c0: cmd/k8s-operator/generate: skip tests if no network or Helm is down (Brad Fitzpatrick) #66,#17665,[tailscale#177...

v1.90.6-sunos

Commits

• dc3c15b: control/controlclient: back out HW key attestation (tailscale#17664) (Patrick O'Doherty)
• bad03ee: feature/identityfederation: strip query params on clientID (tailscale#17666) (Max Coulombe)
• 033adc3: cmd/tailscale/cli: move JetKVM scripts to /userdata/init.d for persistence (tailscale#17610) (srwareham)
• 53004dd: wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper (Brad Fitzpatrick) #17689
• 2dd72f6: Revert "logtail: avoid racing eventbus subscriptions with Shutdown (tailscale#17639)" (tailscale#17684) (M. J. Fromberger)
• 68cba30: VERSION.txt: this is v1.90.4 (Nick Khyl)
• fix regression in recent http2 package change #17706 (Brad Fitzpatrick)
• 300e606: cmd/k8s-operator/generate: skip tests if no network or Helm is down (Brad Fitzpatrick) #17706
• 6324200: VERSION.txt: this is v1.90.5 (Nick Khyl)
• faca4c0: .github/workflows: pin the google/oss-fuzz GitHub Actions (Alex Chan)
• 6e2f2bb: ipn/ipnlocal: do not stall event processing for appc route updates (tailscale#17663) (M. J. Fromberger) #17729
• b6eabd4: util/eventbus: allow logging of slow subscribers (tailscale#17705) (M. J. Fromberger) #17731
• 28f6c2d: VERSION.txt: this is v1.90.6 (Nick Khyl)
• 8ae7205: solaris and illumos use PeerCreds too (Nahum Shalman)
• 89091a3: Merge tag 'v1.90.6' into sunos-1.90 (Nahum Shalman)
• 2658e1d: make default binary have more features, ship minimal binary too (Nahum Shalman)

v1.90.3-sunos

Commits

• ddc0cd7: ipn/ipnlocal: disconnect and block when key expires even when using seamless (James Sanderson) #17090
• db0b9a3: net/dns: don't timeout if inotify sends multiple events (Alex Chan) #17173
• 48029a8: util/eventbus: allow test expectations reporting only an error (tailscale#17146) (M. J. Fromberger) #17146
• df362d0: net/netmon: make ChangeDelta event not a pointer (tailscale#17112) (Claus Lensbøl) #17112
• add some more (tailscale#17177) #17177 (Elliot Blackburn)
• 6992f95: util/eventbus: add an EqualTo helper for testing (tailscale#17178) (M. J. Fromberger) #17178
• 9d66166: cmd/tsidp: update README with new repo location warning (Remy Guercio) #17171
• bump alpine v3.19 -> 3.22 (tailscale#17155) #17155 (Tom Proctor)
• 73c371f: cmd/derper: permit port 80 in ACE targets (Brad Fitzpatrick) #17181
• 55d0e6d: net/dns/recursive: remove recursive DNS resolver (Brad Fitzpatrick) #17169
• 5e3e536: cmd/tailscale/cli: add remove subcommand (Esteban-Bermudez) #15150
• 1c9aaa4: cmd/tailscale/cli: use helper function for matching profiles (Esteban-Bermudez) #15150
• cd153aa: control, ipn, tailcfg: enable seamless key renewal by default (Alex Chan) #17097
• 61751a0: scripts/installer.sh: add Siemens Industrial OS (tailscale#17185) (Erisa A) #17185
• 73bbd7c: build_dist.sh: add -trimpath (Brad Fitzpatrick) #17168
• allow custom tls.Config for TLS probes (tailscale#17186) #17186 (Andrew Lytvynov)
• 4f211ea: util/eventbus: add a LogAllEvents helper for testing (tailscale#17187) (M. J. Fromberger) #17187
• 78035fb: feature/featuretags,cmd/omitsize: support feature dependencies (Brad Fitzpatrick) #17189
• fc9a74a: util/eventbus: fix flakes in eventbustest tests (tailscale#17198) (M. J. Fromberger) #17198
• 394718a: tstest/integration: support multiple C2N handlers in testcontrol (Anton Tolchanov) #17080
• 4a04161: ipn/ipnlocal: add a C2N endpoint for fetching a netmap (Anton Tolchanov) #17080
• 2351cc0: ipn/ipnlocal: make the redactNetmapPrivateKeys test recursive (Anton Tolchanov) #17080
• b9cda4b: tsnet,internal/client/tailscale: resolve OAuth into authkeys in tsnet (tailscale#17191) (Naman Sood) #17191
• ecfdd86: net/ace, control/controlhttp: start adding ACE dialing support (Brad Fitzpatrick) #17182
• 5e698a8: cmd/tailscaled: make the outbound HTTP/SOCKS5 proxy modular (Brad Fitzpatrick) #17200
• d559a21: util/eventbus/eventbustest: fix typo of test name (Brad Fitzpatrick) #17201
• remove direct callback and replace with eventbus (tailscale#17199) #17199 (Claus Lensbøl)
• ca9d795: util/eventbus: add a Monitor type to manage subscriber goroutines (tailscale#17127) (M. J. Fromberger) #17127
• use eventbus.Client.Monitor to simplify subscriber maintenance (tailscale#17203) #17203 (M. J. Fromberger)
• f9c6998: ipn/ipnlocal: use eventbus.Monitor in expiryManager (tailscale#17204) (M. J. Fromberger) #17204
• 798fddb: feature/linuxdnsfight: move inotify watching of /etc/resolv.conf out to a feature (Brad Fitzpatrick) #17207
• d7ec043: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17212
• 1b6bc37: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17214
• db048e9: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17215
• 8ec07b5: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17222
• 986b4d1: control/controlclient: fix tka godoc (Kristoffer Dalby) #17051
• cc1761e: cmd/k8s-operator: send operator logs to tailscale (tailscale#17110) (David Bond) #17110
• 6e12849: controlclient/auto: switch eventbus to using a monitor (tailscale#17205) (Claus Lensbøl) #17205
• e59fbaa: util/eventbus: give a nicer error when attempting to use a closed client (tailscale#17208) (M. J. Fromberger) #17208
• 1b52010: ipn/ipnlocal: use eventbus.Monitor in LocalBackend (tailscale#17225) (M. J. Fromberger) #17225
• f67ad67: control/controlclient: switch ID to be incrementing instead of random (tailscale#17230) (Claus Lensbøl) #17230
• 5e79e49: cmd/tailscale/cli: show last seen time on status command (tailscale#16588) (Mahyar Mirrashed) #16588
• daad5c2: wgengine/router: use eventbus.Monitor in linuxRouter (tailscale#17232) (M. J. Fromberger) #17232
• 15b3876: client/systray: use new tailnet display name is profile title (Will Norris) #17237
• e582fb9: client/web: use network profile for displaying tailnet info (Will Norris) #17236
• e3307fb: cmd/tailscale: omit the drive subcommand in MacOS GUI apps (Percy Wegmann) #17240
• update license notices #17231 (License Updater)
• fix deadlock in SetStaticEndpoints (tailscale#17247) #17247 (Jonathan Nobels)
• 87ccfbd: ipn/ipnlocal: fix eventbus data race (Brad Fitzpatrick) #17253
• 4657cbd: client, cmd/tailscale/cli, feature/relayserver, net/udprelay: implement tailscale debug peer-relay-sessions (tailscale#17239) (Jordan Whited) #17239
• 8fe5754: feature/featuretags: add build tag to remove captive portal detection (Brad Fitzpatrick) #17255
• use buildfeatures.HasCapture const in a handful of places #17259 (Brad Fitzpatrick)
• b3e9a12: net/dns, feature/featuretags: make NetworkManager, systemd-resolved, and DBus modular (Brad Fitzpatrick) #17250
• df747f1: util/eventbus: add a Done method to the Monitor type (tailscale#17263) (M. J. Fromberger) #17263
• 21dc5f4: derp/derpserver: split off derp.Server out of derp into its own package (Brad Fitzpatrick) #17258
• db02a46: types/key: Update HardwareAttestationPublic representation (tailscale#17233) (Patrick O'Doherty) #17233
• 34242df: derp/derpserver: clean up extraction of derp.Server (tailscale#17264) (Simon Law) #17264
• 0bd4f47: ipn/ipnlocal: rename misnamed DisablePortMapperForTest to DisablePortPollerForTest (Brad Fitzpatrick) #17270
• 70400cb: cmd/tailscale/cli: reduce strength of lose-ssh risk warning (James Sanderson) #17262
• e0a77cf: tstest/integration: expand the tests for tailscale up (Alex Chan) #17275
• 0b27871: k8s-operator: add IPv6 support for DNS records (tailscale#16691) (Raj Singh) #16691
• a40f23a: util/eventbus: flesh out docs a bit (Brad Fitzpatrick) #17277
• c49ed5d: feature/tpm: implement key.HardwareAttestationKey (tailscale#17256) (Andrew Lytvynov) [tailscale#17256](https:...

v1.88.4-sunos

Commits

• 25ea53a: wgengine/magicsock: fix relayManager deadlock (tailscale#17449) (tailscale#17511) (Jordan Whited) #17511
• f67e6cf: wgengine/magicsock: fix rebind debouncing (tailscale#17282) (James Tucker)
• 85f4267: VERSION.txt: this is v1.88.4 (Will Hannah)
• 16620ac: Merge tag 'v1.88.4' into sunos-1.88 (Nahum Shalman)

v1.88.3-sunos

Commits

• a5e69bc: ipn/ipnauth: don't crash on OpenBSD trying to log username of unknown peer (Brad Fitzpatrick) #17244
• 585248e: net/dnscache: fix case where Resolver could return zero IP with single IPv6 address (Brad Fitzpatrick) #17243
• c99901e: cmd/tailscale/cli: add ts2021 debug flag to set a dial plan (Brad Fitzpatrick) #17243
• 27b1b1f: control/controlhttp: simplify, fix race dialing, remove priority concept (Brad Fitzpatrick) #17243
• 9961c09: VERSION.txt: this is v1.88.3 (Will Hannah)
• 4f0d522: Merge tag 'v1.88.3' into sunos-1.88 (Nahum Shalman)