v0.38.0

0.38.0 (2026-06-15)

Features

• advertise a genuine-looking Hostinfo to control (#234) (fd66c5d)
• control: carry NetInfo whole across every map request (working_udp + mapping_varies) (#240) (4759ccb)
• magicsock: match Go disco ping cadence to quiet steady-state probing (#236) (0e2cecd)

Bug Fixes

• accept a reason-less PeerGone and tolerate unknown reason bytes (#230) (d2dc7b1)
• answer NOTIMP for NS/SOA/HINFO/AXFR on tailnet names (#229) (e789c79)
• control-serde: send all Hostinfo/NetInfo wire keys under Go's exact casing (#239) (da10905)
• control: macOS product OSVersion + Linux Distro hostinfo + IPNVersion/OS wire-key fix (#238) (daeafdf)
• decode SSHRecorderFailureAction wire keys as PascalCase (#231) (a900522)
• hold an idle non-home DERP connection for 60s to match wireguard-go (#233) (fb80a12)
• honor HTTP 429 Retry-After on register instead of a local retry schedule (#227) (f01c44d)
• magicsock: jitter periodic STUN re-probe to match Go cadence (#237) (fd6d174)
• make the control runner the single DERP home-region authority (#235) (a4803ea)
• refuse final-component symlinks atomically on taildrop opens (#224) (df00b72)
• reset map-poll backoff on a substantive netmap, not on keep-alives (#226) (57f381f)
• set the netstack MTU to the overlay MTU so MSS fits the tunnel (#232) (f3fa8d9)
• validate peerAPI requests against Host/Origin/Referer before dispatch (#228) (9d58d4f)