tailscale, branch bradfitz/avoid_initial

net/netcheck: respect DERPRegion.Avoid on initial probe plan too

2024-11-20T18:11:51Z

As found by @jwhited/@raggi. Updates #8603 Updates #13969 Updates tailscale/corp#24697 Change-Id: I32bb412a06e46a5fc154d87147e75363cf0d5407 Signed-off-by: Brad Fitzpatrick

wgengine/filter: actually use the passed CapTestFunc [capver 109]

2024-11-19T19:18:35Z

Initial support for SrcCaps was added in 5ec01bf but it was not actually working without this. Updates #12542 Signed-off-by: Anton Tolchanov

util/winutil/s4u: fix token handle leak

2024-11-19T19:11:50Z

Fixes #14156 Signed-off-by: Aaron Klotz

version: fix earlier test/wording mistakes

2024-11-19T18:59:21Z

Updates #14069 Change-Id: I1d2fd8a8ab6591af11bfb83748b94342a8ac718f Signed-off-by: Brad Fitzpatrick

version: validate Long format on Android builds

2024-11-19T18:04:37Z

Updates #14069 Change-Id: I134a90db561dacc4b1c1c66ccadac135b5d64cf3 Signed-off-by: Brad Fitzpatrick

licenses: update license notices

2024-11-19T17:25:57Z

Signed-off-by: License Updater

kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator}: emit kube store Events (#14112)

2024-11-19T13:07:19Z

Adds functionality to kube client to emit Events. Updates kube store to emit Events when tailscaled state has been loaded, updated or if any errors where encountered during those operations. This should help in cases where an error related to state loading/updating caused the Pod to crash in a loop- unlike logs of the originally failed container instance, Events associated with the Pod will still be accessible even after N restarts. Updates tailscale/tailscale#14080 Signed-off-by: Irbe Krumina

ipn/ipnlocal: fix build, remove another Notify.BackendLogID reference that crept in

2024-11-18T20:17:19Z

I merged 5cae7c51bfa (removing Notify.BackendLogID) and 93db50356536e (adding another reference to Notify.BackendLogID) that didn't have merge conflicts, but didn't compile together. This removes the new reference, fixing the build. Updates #14129 Change-Id: I9bb68efd977342ea8822e525d656817235039a66 Signed-off-by: Brad Fitzpatrick

ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit

2024-11-18T18:50:30Z

Limit spamming GUIs with boring updates to once in 3 seconds, unless the notification is relatively interesting and the GUI should update immediately. This is basically @barnstar's #14119 but with the logic moved to be per-watch-session (since the bit is per session), rather than globally. And this distinguishes notable Notify messages (such as state changes) and makes them send immediately. Updates tailscale/corp#24553 Change-Id: I79cac52cce85280ce351e65e76ea11e107b00b49 Signed-off-by: Brad Fitzpatrick

sessionrecording: implement v2 recording endpoint support (#14105)

2024-11-18T17:55:54Z

The v2 endpoint supports HTTP/2 bidirectional streaming and acks for received bytes. This is used to detect when a recorder disappears to more quickly terminate the session. Updates https://github.com/tailscale/corp/issues/24023 Signed-off-by: Andrew Lytvynov