Repository navigation

feat(ci): Bump to upstream v1.104.4 - #37

Merged

ChandonPierre merged 884 commits into

coreweavefrom

cpierre/coreweave-v1.104.4

Oct 28, 2026

Merged

feat(ci): Bump to upstream v1.104.4#37
ChandonPierre merged 884 commits into
coreweavefrom
cpierre/coreweave-v1.104.4

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 1, 2026
Commits on Sep 2, 2026
- net/portmapper: avoid leaking permanent UPnP mappings
  
  jakebailey
  authored and
  bradfitz
  committed
  91d10d3
- fuzz: hide external test files from go-118-fuzz-build during fuzzer builds (#21082)
  jentfoo
  authored
  642099c
- .github/workflows: add tailcat cross-repo breakage early warning tests
  bradfitz
  committed
  6c06e00
Commits on Sep 3, 2026
- control/controlclient,ipn/ipnlocal,wgengine/{,magicsock}: route disco keys learned over TSMP directly to magicsock (#21016)
  cmol
  authored
  f53c281
- net/netcheck: mark address family sendable on STUN response
  bradfitz
  committed
  92ec102
- .github/workflows: cache the Go build and tsgo toolchain in natlab CI (#20815)
  bcreane
  authored
  8236b77
- wgengine/router/osrouter: don't destroy the FreeBSD tun from Close
  
  mminkus
  authored and
  bradfitz
  committed
  16dacb0
- licenses: update license notices
  
  License Updater
  authored and
  willnorris
  committed
  9ea7cba
Commits on Sep 4, 2026
- wgengine: support per-peer WireGuard PSKs
  bradfitz
  committed
  31d8bad
- cmd/tsconnect: copy type declarations into package directory
  neinkeinkaffee
  committed
  b82b06c
- wgengine/magicsock: fix logging for changing disco keys (#21105)
  cmol
  authored
  33cc45a
- .github/workflows: clarify tailcat breakage check is only a heads-up
  bradfitz
  committed
  b62350f
- all: use ~128KiB packet buf for batched i/o
  jwhited
  committed
  8fc6dca
- ipn/ipnlocal: don't evict another node's index entries on netmap deltas
  
  bradfitz
  and
  bcreane
  committed
  2ae2808
- ipn/ipnlocal: preserve peer deltas on expiry
  bradfitz
  committed
  0640312
- control/controlclient: replay user profiles on delta peer upserts
  bradfitz
  committed
  5201273
Commits on Sep 8, 2026
Commits on Sep 9, 2026
- metrics: use Linux 6.2+ stat fast path for CurrentFDs
  bradfitz
  committed
  1e95ec8
- paths: return an absolute default socket path on Android
  
  breken
  authored and
  bradfitz
  committed
  3945b82
- net/socks5: fix a data race on the UDP client address (#21164)
  bcreane
  authored
  0301c74
- net/socks5: log through the server when Server.Logf is nil (#21160)
  bcreane
  authored
  de01da5
- tstest/integration: wait for the daemon to exit after killing it (#21107)
  yaruk-byte
  authored
  7dfc149
- net/tstun: handle zero value stack.GSO.MSS
  jwhited
  committed
  5208e6d
- net/socks5: wait for a relayed reply in TestUDPConcurrent (#21181)
  bcreane
  authored
  f483582
- go.mod: bump go-tool-cache
  bradfitz
  committed
  653a954
- wgengine/netstack: split outbound traffic into destination queues
  jwhited
  committed
  2c30be2
- wgengine/wgcfg: size crypto & per-peer queues by CPU factor
  jwhited
  committed
  960cb50
Commits on Sep 10, 2026
Commits on Sep 11, 2026
Commits on Sep 14, 2026
Commits on Sep 15, 2026
- control/controlclient,control/ts2021,util/httpbody: bound control response sizes
  bradfitz
  committed
  8344d97
- portlist: use inet_diag for Linux listener discovery
  
  JeremiahM37
  authored and
  bradfitz
  committed
  343e2b2
- portlist: exercise Linux discovery backends with real sockets
  
  JeremiahM37
  authored and
  bradfitz
  committed
  3dd55d6
- net/dns: validate resolved restart signals
  
  herefindalex
  authored and
  bradfitz
  committed
  d28ede9
- util/ringlog: make Clear a no-op on a nil RingLog
  
  jn-aman
  authored and
  bradfitz
  committed
  08a9050
- net/sockopts: fix TestSetBufferSize on hosts with large default buffers
  
  DevAza23
  authored and
  bradfitz
  committed
  0af7e75
- cmd/tailscaled: fail fast on Windows when wintun.dll is missing
  bradfitz
  committed
  1a311b7
- feature: add TS_DISABLE_FEATURE to disable features at runtime
  bradfitz
  committed
  2ee809d
- util/syspolicy/source: read policies without the GP lock when it's denied
  bradfitz
  committed
  0a621d2
- tsnet: deflake TestUserMetricsByteCounters
  bradfitz
  committed
  87c35ff
- tstest/natlab/vmtest: cover openresolv with a second snippet registered (#21003)
  bcreane
  authored
  3ea665b
- net/dns/resolver: only accept UDP DNS replies from the queried resolver
  bradfitz
  committed
  2fc4be0
- derp/derpserver: pool per-client send queue buffers
  bradfitz
  committed
  30f5d94
- feature/conn25,types/appctype: delete TemporaryUnsafeBypassFilter from
  mzbenami
  committed
  b5e07cb
- go.toolchain.rev: bump Go 1.27 toolchain
  bradfitz
  committed
  f1c4fe3
- tsweb: add /debug/runtime-metrics page exposing Go runtime/metrics
  bradfitz
  committed
  f92ca3f
- net/portmapper: save and verify PCP nonces (#21277)
  fmarier
  authored
  7f9de91
- net/packet: don't panic in Payload when dataofs is past length (#21232)
  Dev-next-gen
  authored
  8b5a870
Commits on Sep 16, 2026
- go.mod,wgengine/netstack,tstest/natlab/vnet: enable RACK and cubic with gVisor clock fix
  raggi
  committed
  3ec674b
- ipn/ipnlocal: don't panic on an over-long name in the peerAPI DNS debug mode
  
  Dev-next-gen
  authored and
  bradfitz
  committed
  ec1e07c
- ssh/tailssh: split the OS-specific parts of the server into their own files
  bradfitz
  committed
  664ba58
- cmd/testcontrol: add --addr and --ssh-policy flags
  bradfitz
  committed
  a226354
- go.toolchain.rev: bump tailscale/go again
  bradfitz
  committed
  678ad16
- prober: cache CRLs across TLS probes (#21286)
  thomasdesr
  authored
  7add2af
- ipn/ipnlocal: make Serve idle connection limit configurable (#21179)
  maxiscoding28
  authored
  044abcc
- appc: detect cycles in CNAME chain
  mzbenami
  committed
  407d32f
- net/dnsfallback: don't panic on nil netmon.Monitor in bootstrap DNS path
  bradfitz
  committed
  41a756c
- control/tsp: don't use bootstrap DNS from the noise client
  bradfitz
  committed
  e22eaae
- ipn/ipnlocal: log the profile's login name, not the method value
  bradfitz
  committed
  96492df
- net/portmapper: cleanup old PCP TODOs
  fmarier
  committed
  8b3b8f1
- tailcfg: add Node.StableTailnetID and bump capver (#21314)
  andrew-d
  authored
  158a247
- misc/bumpdeps: add tool to bump all go.mod deps to latest
  bradfitz
  committed
  fa7fb38
- .github/workflows: add bumpdep workflow to bump Go deps and open a PR
  bradfitz
  committed
  d1c5827
- .github/workflows: use the module proxy for generic bumpdep fetches
  bradfitz
  committed
  46332ef
- tsweb/vcstime: add a VCS-time-stamped file system wrapper for embed.FS
  raggi
  committed
  4f88a7b
- go.mod: bump all direct deps to latest
  bradfitz
  committed
  b0b1f0f
- tstest/integration: deflake TestNATPing
  bradfitz
  committed
  62f3130
Commits on Sep 17, 2026
- tka: add missing test case for "init with an untrusted key"
  alexwlchan
  committed
  ade2dc4
- ipn,tsnet: replace LocalBackend.NetMap with NetMapNoPeers/NetMapWithPeers
  alexwlchan
  committed
  b16bc95
- net/packet: fix Transport panic from a bad IPv4 IHL (#21331)
  jentfoo
  authored
  408504a
- tstest/integration: wait longer to remove the staged binaries at teardown (#21207)
  yaruk-byte
  authored
  1c7e77f
- cmd/tsidp: remove all but the warning from the in-tree tsidp code's README (#21354)
  shaver
  authored
  16d19a7
- types/nettype: add HalfCloser type
  tendstofortytwo
  committed
  3584842
- net/socks5: correctly proxy half-closed TCP connections
  tendstofortytwo
  committed
  027e249
- feature/clientupdate: require write access for update/install localapi (#21360)
  patrickod
  authored
  2e72593
- go.toolchain.rev: bump Go toolchain
  
  Dep Updater
  authored and
  bradfitz
  committed
  178ef3d
- tsweb/compserve, client/web: add zstd, remove brotli for precompressed assets
  raggi
  committed
  6608b9a
- go.mod: update golangci-lint to v2
  raggi
  committed
  aa1134d
Commits on Sep 18, 2026
- tstest/integration: stop skipping Windows integration tests (#21187)
  yaruk-byte
  authored
  be89526
- go.mod: update web-client-prebuilt module
  
  OSS Updater
  authored and
  raggi
  committed
  2883638
- tsweb: restore AcceptsEncoding
  bradfitz
  committed
  3323dc0
- cmd/testwrapper: run all package patterns in one go test invocation
  bradfitz
  committed
  1033e71
- derp/derpserver: don't build debug log arguments on the packet path
  bradfitz
  committed
  47debc5
- util/multierr: mark multierr.New as deprecated
  sailorfrag
  committed
  c2dc086
- derp/derpserver: pool received packet payload buffers
  bradfitz
  committed
  f87a1b1
- tailcfg: add nodecap conn25-connector-apps
  franbull
  committed
  a9bb6d1
- net/portmapper/pcp: use all-zero address for PCP releases
  fmarier
  committed
  2578d08
- net/portmapper: fix potential race around pcpNonce
  fmarier
  committed
  b7a3b1b
Commits on Sep 19, 2026
- derp/derpserver: make unique sender cardinality tracking opt-in
  bradfitz
  committed
  630e704
- derp/derpserver: drop per-client writer goroutine, start on demand
  bradfitz
  committed
  51682d2
- gokrazy, .github/workflows: build the natlab image with tool/go
  bradfitz
  committed
  574ef3b
- net/netmon, ipn/ipnlocal, wgengine: don't lose a network change during startup
  bradfitz
  committed
  1c77864
- go.mod: bump github.com/bradfitz/go-tool-cache
  
  Dep Updater
  authored and
  bradfitz
  committed
  9617640
- go.toolchain.rev: bump Go toolchain
  
  Dep Updater
  authored and
  bradfitz
  committed
  ae69c6b
Commits on Sep 20, 2026
- tsweb/varz: read memstats via runtime/metrics, export fork metrics
  bradfitz
  committed
  7d96cf5
- tstest/natlab/{vmtest,vnet}: bound "tailscale up", dump tailscaled logs on failure
  bradfitz
  committed
  3014ad8
Commits on Sep 21, 2026
Commits on Sep 22, 2026
- cmd/k8s-operator/e2e: select matching family IP addresses (#21415)
  tomhjp
  authored
  b26751e
- cmd/k8s-operator/e2e: allow concurrent and partially torn down tests (#21416)
  tomhjp
  authored
  df0bd83
- feature/conn25: add ipv6 test coverage for datapath (#21362)
  mazdakn
  authored
  1edf391
- scripts/installer.sh: add Omarchy as an Arch derivative
  
  costajohnt
  authored and
  bradfitz
  committed
  9ceb71a
- ipn/ipnlocal, net/netns: bind Linux peerapi listener to the tun device
  bradfitz
  committed
  b3de3b2
- cmd/k8s-operator/e2e: add tests for kube-apiserver ProxyGroups (#20993)
  davidsbond
  authored
  8af8f86
Commits on Sep 23, 2026
- go.mod: bump github.com/gokrazy/kernel.amd64, github.com/gokrazy/kernel.arm64, github.com/gokrazy/kernel.rpi, github.com/gokrazy/rpi-eeprom, github.com/gokrazy/gokrazy
  
  Dep Updater
  authored and
  bradfitz
  committed
  610b05c
- cmd/containerboot: recover from IPN watch closure (#21374)
  Raj Singh
  authored
  5f0cf87
- misc/bumpdeps, .github/workflows: unify the bumpdeps tool and bumpdep workflow
  bradfitz
  committed
  63f6253
- ipnlocal: fix portlist service event type mismatch (#21433)
  YewFence
  authored
  7122baa
- tstest/natlab: move running instructions to a README
  fmarier
  committed
  a35aff2
- feature/androiddns: fall back to getaddrinfo on Android 9 and older
  bradfitz
  committed
  0931824
- tstest/natlab: ignore transport errors during gokrazy update (#21441)
  fmarier
  authored
  02de76b
- tstest/natlab/vmtest: close unused pipe read FD to avoid leak
  fmarier
  committed
  8d43ba6
- feature/conn25: extend datapath test to verify full packets (#21422)
  mazdakn
  authored
  b6c6c59
- go.mod,wgengine/wgcfg: add wireguard-go handshake metrics
  jwhited
  committed
  8665988
- ssh/tailssh: record stderr on non-PTY sessions (#21369)
  patrickod
  authored
  9cdbc3a
Commits on Sep 24, 2026
- licenses: update license notices
  
  License Updater
  authored and
  willnorris
  committed
  b166458
- logtail: stop retrying uploads after logger is disabled (#21459)
  kari-ts
  authored
  9020fdc
- ipn/desktop: skip the extension when sessions can't be enumerated
  bradfitz
  committed
  6612bed
- ipn/auditlog: store the audit log in the backend's state directory
  bradfitz
  committed
  e87076a
- log/filelogger, logpolicy: put Windows disk logs next to the log config
  bradfitz
  committed
  506f261
- wgengine/router/osrouter: use unspecified NextHop for on-link routes instead of interface IP
  nickkhyl
  committed
  d229a06
Commits on Sep 25, 2026
- ipn/ipnlocal: add TS_SERVE_ALLOW_ALL_INTERFACES to opt serve out of the tun bind
  ChaosInTheCRD
  committed
  3d62394
- cmd/k8s-operator: opt serve out of the tun bind for cluster-traffic ingress
  ChaosInTheCRD
  committed
  7aa7021
- tstest/natlab/vnet: tear down gVisor network stacks at Server shutdown
  fmarier
  committed
  ef50433
- feature/conn25: validate ConnectorTransitIPRequest contains TransitIPs in the pool
  mazdakn
  committed
  5af313f
- feature/conn25: clean up formatting in conn25*.go files
  mazdakn
  committed
  72fa821
- derp/derpserver: don't hold s.mu while writing debug traffic to the network
  bradfitz
  committed
  1985578
- derp/derpserver: bound the size of unknown frames the server will discard
  bradfitz
  committed
  cbcca9d
- derp/derpserver: bound dup client sendHistory growth
  bradfitz
  committed
  ec5d510
- go.mod,wgengine/wgcfg: add wireguard cookie reply metric
  jwhited
  committed
  7f51756
- ipn/localapi: restrict debug-log access to PermitWrite (#21447)
  jentfoo
  authored
  94ea82a
- ipn/ipnlocal: skip the kernel peerapi listener on FreeBSD when netstack is present
  bradfitz
  committed
  d4f2bb4
- wgengine/router/osrouter: leave pf and forwarding alone in FreeBSD netstack mode
  
  mminkus
  authored and
  bradfitz
  committed
  27b2a7d
- go.mod: bump github.com/go4org/hashtriemap
  
  Dep Updater
  authored and
  bradfitz
  committed
  6b3a45f
Commits on Sep 26, 2026
- tstun: skip netstack checksum handling for raw injections
  
  unisequence
  authored and
  bradfitz
  committed
  fe0d7d1
Commits on Sep 27, 2026
- net/dns: don't take over DNS when the OS has no upstream resolvers (#20794)
  bcreane
  authored
  2d43793
Commits on Sep 28, 2026
- go.mod: bump 4 modules
  
  Dep Updater
  authored and
  bradfitz
  committed
  48c7fbc
- derp/derpserver, cmd/derper: add /debug/clients/ page listing connected clients
  bradfitz
  committed
  7bb87d3
- feature/conn25: skip AAAA records with IPv4-in-IPv6 addresses
  mazdakn
  committed
  8a119e1
- feature/conn25: unmap addresses in TransitIPRequest
  mazdakn
  committed
  ecedfff
- derp/derphttp: reject invalid DERP node hostname before proxy CONNECT (#21038)
  
  basavaraj-sm05
  and
  jentfoo
  authored
  a40d145
- safesocket: let a non-administrator listen on the Windows named pipe
  bradfitz
  committed
  48ec628
- cmd/tailscaled, safesocket: add --windows-mode=dev
  bradfitz
  committed
  b4e3a52
Commits on Sep 29, 2026
Commits on Sep 30, 2026
Commits on Oct 5, 2026
- appc: fix issue removing overlapping routes
  franbull
  committed
  05c2a67
Commits on Oct 7, 2026
- VERSION.txt: this is v1.104.1
  nickoneill
  committed
  9a522a9
Commits on Oct 20, 2026
- net/dns: don't make quad-100 the primary resolver on Windows when hosts are unrouted
  nickkhyl
  committed
  1b03a9f
- go.toolchain.rev: bump to Go 1.27.3 (#21870)
  nickoneill
  authored
  42347eb
- VERSION.txt: this is v1.104.2
  nickoneill
  committed
  e26db7a
Commits on Oct 26, 2026
- wgengine/magicsock: ensure discoKey nodeKey match (#21956) (#21964)
  cmol
  authored
  7d1b436
Commits on Oct 27, 2026
- ssh/tailssh: record the raw client command in session recordings
  raggi
  committed
  338bcaf
- ssh/tailssh: make acceptEnv pattern matching linear time
  raggi
  committed
  b47604d
- ssh/tailssh: extend dangerous env var denylist, re-check child-side
  raggi
  committed
  851c99c
- util/osuser: validate 'id' input, reject corrupt getent passwd output
  raggi
  committed
  0ab8931
- ssh/tailssh: treat numerically-zero uids as root in isRootUser
  raggi
  committed
  37b8705
- ssh/tailssh: write private host keys with 0600 permissions
  raggi
  committed
  8b27acf
- ssh/tailssh: pin rejection-banner content to policy-derived facts
  raggi
  committed
  b9684f8
- ssh/tailssh: hand the agent forwarding dir to the user, remove it on session end
  raggi
  committed
  0284e16
- ssh/tailssh: refuse direct-exec fallback for non-root users as root
  raggi
  committed
  4f7d3ce
- ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names
  raggi
  committed
  93856e2
- ssh/tailssh: fix off-by-one and clamp c2n SSH username hint cap
  raggi
  committed
  90e1ac6
- ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)
  
  jentfoo
  authored and
  raggi
  committed
  3f43695
- ssh/tailssh: record sftp sessions and honor recording failure policy
  raggi
  committed
  420cd43
- ipn/ipnlocal: fix serve app caps leaking across mounts (#21931)
  
  jentfoo
  authored and
  raggi
  committed
  d090b5a
- go.mod: update gliderssh to remove data race on timeouts
  raggi
  committed
  d3357d4
- ssh/tailssh: drain the sftp test helper's stderr copier
  raggi
  committed
  532e32e
- tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound
  raggi
  committed
  930da8d
- go.mod: update gliderssh for resource exhaustion fixes
  raggi
  committed
  92bc90a
- ssh/tailssh: add monitor RPC codec and SCM_RIGHTS fd passing
  raggi
  committed
  4947a2f
- ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops
  raggi
  committed
  da7cdd3
- ssh/tailssh: route SSH forwarding through the privileged monitor
  raggi
  committed
  4adc3c0
- ssh/tailssh: launch sessions via the monitor
  raggi
  committed
  c001879
- go.mod: bump gliderssh for window resize fix
  raggi
  committed
  64b25e6
- ssh/tailssh: enforce SSH policy at the connection level
  raggi
  committed
  d036eda
- ssh/tailssh: initialize username hint exclusions
  raggi
  committed
  3135835
- ssh/tailssh: enforce recording failure before notifying control
  raggi
  committed
  28da431
- ssh/tailssh: relay Unix forward payloads as the bound user
  raggi
  committed
  19523b1
- ssh/tailssh: retain the latest session window size
  raggi
  committed
  028f061
- ssh/tailssh: dial TCP forwards as the bound user
  raggi
  committed
  342ebd6
- ssh/tailssh: register connections atomically with shutdown
  raggi
  committed
  5919a9d
- ssh/tailssh: clarify lifecycle and protocol comments
  raggi
  committed
  637efe2
- ssh/tailssh: name the monitor for its connection-wide role
  raggi
  committed
  2cbe0aa
- ssh/tailssh: give delegated action fetches one timeout owner
  raggi
  committed
  baefbd5
- ssh/tailssh: set $LOGNAME to same value as $USER in incubator
  
  oxtoacart
  authored and
  raggi
  committed
  5d9906d
- ssh/tailssh: release reverse-forward cancellation callbacks
  raggi
  committed
  116c1d2
- derp/derphttp: bound response body read on non-101 upgrade response (#21980)
  
  pawel-ts
  authored and
  raggi
  committed
  1fb2bb8
- ipn/ipnlocal: refuse serving TCP to the tailscaled socket (#21966)
  
  samj-ts
  authored and
  raggi
  committed
  21b7a44
- ssh/tailssh: parse UIDs consistently in isRootUser()
  
  fmarier
  authored and
  raggi
  committed
  83b3257
- ipn/ipnlocal: check the tailscaled socket on every serve unix dial
  
  samj-ts
  and
  raggi
  committed
  7faa0a9
- net/netmon,net/netns: cache Windows default interface indices
  
  raggi
  authored and
  nickkhyl
  committed
  199bafa
- VERSION.txt: this is v1.104.4
  nickoneill
  committed
  2704763
Commits on Oct 28, 2026
- Merge tag 'v1.104.4' into cpierre/coreweave-v1.104.4
  ChandonPierre
  committed
  aa59db3

Commits

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Commits on Sep 4, 2026

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Commits on Sep 11, 2026

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026