TestRaceAttributedToPassingTest and TestRaceSuppressesFlakyRetry run
`go test -race`, which requires cgo, but we build with CGO_ENABLED=0.
Assisted-by: Claude Code (claude-fable-5)
Patch release that bumps the upstream Go toolchain to fix segmentation
faults on MIPS and Synology platforms. No application-level code changes.
The Nix package already removes the vendored toolchain (`rm -rf ./tool`
in preBuild), so the practical impact for Nix users is minimal.
https://tailscale.com/changelog#client
- Override to go_1_26 (required by go.mod >= 1.26.1)
- Also override go_1_26 for tailscale-nginx-auth
- Remove TestConcurrent skip (test no longer exists upstream)
- Add TestOnPolicyChangeSkipsPreAuthConns skip (synctest bubble issue)
- Replace blanket substituteInPlace on tsnet/tsnet_test.go with explicit
skip list, allowing pure unit tests to actually run
This test was introduced in v1.94.0 (commit 1dfdee852) and uses Go's
testing/synctest package. However, it calls gonotify.NewDirWatcher()
inside the synctest bubble, which spawns goroutines that block on
inotify syscalls. These syscalls are outside synctest's control,
causing the test to hang for 600 seconds before timing out.
The upstream tests take a long time to run and are often flaky. Too many people need to get tailscale in order to update their system. We'll still run them in nixpkgs-review for tailscale version updates, but will not do so in normal builds.
tailscale (1.92.3)
* Fix panic in client during automatic WireGuard configuration.
tailscale (1.92.1)
* Feature: Support PROXY protocol in Tailscale Funnel and Serve to forward client source IP and port.
* Feature: Add support for static Peer Relay endpoints via 'tailscale set --relay-server-static-endpoints'.
* Feature: Add support for Workload Identity Federation authentication in 'tailscale up' via '--client-id' and '--id-token' flags.
* Feature: Allow configuring remote targets as destinations for Tailscale Services.
* Improvement: Enhance Peer Relay connection reliability by sending multiple forward bind packets per handshake.
* Improvement: Include more candidate IP:port pairs in Peer Relay endpoint advertisements.
* Improvement: Automatically record node peer information in network flow logs.
* Improvement: Stabilize JSON output format for 'tailscale lock log'.
(cherry picked from commit 7e7d0c93f8)
Changelog: https://tailscale.com/changelog#2025-10-31
- 1.90.6 (Oct 31, 2025):
App connectors: Fixed an issue where routes would stall and fail to apply when updated repeatedly in a short time period
- 1.90.5 (Oct 30, 2025)
Tailscale SSH: Fixed a bug where SSH connections would hang for 10 seconds when connecting to `tsrecorder` (this affected tailnets using Tailscale SSH recording)
