v1.1.3

Changelog

• 90124b6: CI: run govulncheck on the job's Go (go.mod's toolchain) (@GrowlyX)
• a555fc1: CI: run govulncheck with go.mod's toolchain, not the action's "stable" (@GrowlyX)
• 890daa3: Go 1.27.2 and x/net v0.60.0: HTTP/2 and TLS security fixes (@GrowlyX)
• 86c3f9a: Keep go 1.27.1 as the minimum; build with toolchain go1.27.2 (@GrowlyX)
• 63ad134: Menu bar app: build with only the Command Line Tools again (@GrowlyX)
• 868e6ef: Merge pull request #28 from GrowlyX/fix/go-1.27.2-xnet (@GrowlyX)
• e0db585: Merge pull request #30 from GrowlyX/fix/panel-state-clt (@GrowlyX)
• 76cdac6: Merge pull request #31 from GrowlyX/fix/tailnet-logins (@GrowlyX)
• ed146af: Tailnets: harden login state handling from review (@GrowlyX)
• 82b6f50: Tailnets: keep logins with the tailnet, not its name; add log out (@GrowlyX)
• 9fcc1b5: Tailnets: keep new state paths inside state_dir where CodeQL can see it (@GrowlyX)

v1.1.2

Changelog

• d5fc579: Add tailmux cli: the tailscale CLI against any tailnet (@GrowlyX)
• 203e554: Homebrew updates: never run brew as root, and use brew upgrade only (@GrowlyX)
• 908d39f: Homebrew updates: override an inherited HOMEBREW_NO_AUTO_UPDATE; skip deleted owners (@GrowlyX)
• fddff2e: Merge pull request #23 from bwees-forks/fix/hide-mullvad-peers (@GrowlyX)
• 9e19fa5: Merge pull request #25 from bwees-forks/fix/bar-panel-resize (@GrowlyX)
• 22950ca: Merge pull request #26 from GrowlyX/fix/brew-update-as-root (@GrowlyX)
• 4dbdb3d: Merge pull request #27 from GrowlyX/feat/tailscale-cli (@GrowlyX)
• 23f79f9: chore: cleanup (@bwees)
• 28d096e: fix(bar): resize the menu bar panel when its content changes (@bwees)
• 2915459: fix(mux): hide mullvad nodes from device lists and counts (@bwees)
• de32c6a: tailmux cli: share stdin with '*' runs, don't double-escape the tailnet (@GrowlyX)
• 76c4e30: test(mux): cover mullvad filtering in device lists and counts (@bwees)

v1.1.1

Highlights

• Linux desktop packages now build on Ubuntu 22.04 with a glibc 2.35 baseline, addressing the AppImage startup failures on older distributions. Release builds check bundled binaries and libraries for newer glibc requirements.
• Fix exit-node connection cleanup and ping support.
• Preserve split-DNS domains that are parents of the MagicDNS suffix.

Changelog

• b702284: Merge pull request #20 from bwees-forks/fix/exit-node-connections (@GrowlyX)
• ba6732a: Merge pull request #21 from bwees-forks/fix/exit-node-ping (@GrowlyX)
• 3fd4d03: Merge pull request #22 from eliezerlp/fix/split-dns-parent-of-magicdns (@GrowlyX)
• 63d3f37: fix(desktop): build Linux bundles on the glibc 2.35 baseline (@GrowlyX)
• f27b2cf: fix(dns): keep a split domain that is a parent of the MagicDNS suffix (@eliezerlp)
• c335af4: fix(exit): close exit node connections when the exit node changes (@bwees)
• ed1dcdc: fix(exit): close old connections after the tailnets switch exit node (@bwees)
• f606087: fix(tun): answer pings through the exit node (@bwees)
• ffa4296: test(exit): skip the exit ping test when this host can't ping the internet (@bwees)

v1.1.0

Changelog

• 512ef41: Merge pull request #15 from GrowlyX/macos-app-polish (@GrowlyX)
• e763929: Merge pull request #16 from bwees-forks/fix/macos-exit-node-scoped-default (@GrowlyX)
• 11aaf59: Merge pull request #17 from GrowlyX/real-ips (@GrowlyX)
• d84f00c: Merge pull request #18 from GrowlyX/tailnet-lock (@GrowlyX)
• a93a854: Merge pull request #19 from GrowlyX/security-fixes (@GrowlyX)
• 5358c9f: TUN mode: answer with real 100.x addresses unless they collide (@GrowlyX)
• 8eaf4e3: TailmuxBar: wait for the /Applications copy before relaunching from Homebrew (@GrowlyX)
• b546cc1: Tailnet Lock: keep the last known state when a status read fails (@GrowlyX)
• 0b902a7: Tailnet Lock: report each tailnet's state and how to sign tailmux (@GrowlyX)
• 537e785: desktop: don't echo proxy errors to the page; pin source-map-js 1.2.2 (@GrowlyX)
• 98e65e6: feat: add SECURITY.md (@GrowlyX)
• c65263c: fix(tun): keep owned scoped default routes when repair fails (@bwees)
• 0f08e8f: fix(tun): pin a scoped default route on macOS so tsnet traffic survives exit node routes (@bwees)
• 31fb3b8: fix(tun): restore, report and retry scoped default routes on macOS (@bwees)
• 4763cdd: macOS app copy: don't let a held lock stall anything (@GrowlyX)
• f06d8f3: macOS app copy: lock the swap, stage privately, match the real keg link (@GrowlyX)
• 7bc614e: macOS: TailmuxBar.app in /Applications, and an app icon (@GrowlyX)

v1.0.0

Highlights

Exit nodes: pick any exit node in any of your tailnets, Mullvad's included, and traffic outside your tailnets leaves through it, like the official app's Exit Node menu. Tailnet traffic still goes to its tailnet and your local network stays direct. If the exit node can't be used, that traffic is blocked rather than leaking out directly.

• TUN mode covers every app; proxy mode covers apps that use the proxy.
• tailmux exit-node lists them, tailmux exit-node use se (or Tokyo, or nas.home) picks one, tailmux exit-node off goes direct again.
• The menu bar app and the desktop app have a picker with Mullvad grouped by country and city, and a "Best available" choice.
• Docs: exit nodes.

Linux, beyond Debian

• tailmux-cli packages (CLI and daemon, no tray app) as .deb, .rpm, .apk (Alpine) and .pkg.tar.zst (Arch), for x86-64 and arm64.
• The desktop app now also ships as an .rpm.
• Build from source on any distro with make && sudo make install (make desktop for the tray app), or makepkg -si with packaging/arch/PKGBUILD. Source builds never replace themselves with a release binary.
• Install docs cover every distro family and OpenRC/runit instead of systemd.
• Removing the desktop app or a tailmux-cli package also removes the service it installed.

Also

• tailscale.com 1.104.
• macOS DNS search domains in TUN mode (ssh db without a suffix).
• More robust TUN teardown and device recreation.

Changelog

• 4acb0fe: Adapt the TUN engine to wireguard-go's new Read API (@GrowlyX)
• 38912a1: Desktop app: exit node picker (@GrowlyX)
• 9200a82: Exit nodes in TUN mode, the CLI and the docs (@GrowlyX)
• 4ea19f5: Exit nodes: route non-tailnet traffic through a chosen exit node (@GrowlyX)
• a64d1e7: Fix lint on Linux and a host-dependent DNS assertion (@GrowlyX)
• 4764b41: Linux: CLI packages for every distro, .rpm, and building from source (@GrowlyX)
• 2a497d6: Menu bar app: exit node picker (@GrowlyX)
• cc3bc4c: Merge main into exit-nodes (@GrowlyX)
• 8a2aefd: Merge main into linux-packaging (@GrowlyX)
• e6746d1: Merge main into readme-banner (@GrowlyX)
• 5def86b: Merge pull request #10 from GrowlyX/fix-uninstall-service (@GrowlyX)
• 2bdbc57: Merge pull request #11 from GrowlyX/readme-banner (@GrowlyX)
• cd56849: Merge pull request #3 from GrowlyX/tun-recreate-device (@GrowlyX)
• 255da7a: Merge pull request #4 from aaronflorey/fix/tunnel-ownership-and-startup-cleanup (@GrowlyX)
• 2954d5d: Merge pull request #5 from GrowlyX/dependabot/go_modules/tailscale-2df9ca97c8 (@GrowlyX)
• 82e5b26: Merge pull request #6 from GrowlyX/dependabot/go_modules/go-deps-8860a66e7c (@GrowlyX)
• a8fbbe3: Merge pull request #8 from GrowlyX/exit-nodes (@GrowlyX)
• 9a9dd72: Merge pull request #9 from GrowlyX/linux-packaging (@GrowlyX)
• 241ef84: PKGBUILD: no empty debug package (@GrowlyX)
• 7b9e652: README banner: the current panel, with an exit node (@GrowlyX)
• 30b48f5: Remove the service when the desktop app is uninstalled (@GrowlyX)
• ac4f71e: TUN exit node: re-apply Linux rules in place; kernel-level test (@GrowlyX)
• 24a90ef: feat(tun): manage macOS DNS search domains (@aaronflorey)
• 8345090: fix(mux): preserve errors when tailnet startup fails (@aaronflorey)
• e60be0e: fix(tun): serialize device teardown with OS configuration (@aaronflorey)
• a379d63: tun: survive ENOBUFS and recreate a lost device (@GrowlyX)

v0.1.7

Changelog

• 5367ccf: Desktop app for Windows and Linux (Tauri) (@GrowlyX)
• 47792c9: Ship the desktop app: CI, release, docs (@GrowlyX)
• a916669: Windows service releases and updates; fix CI's app screenshots (@GrowlyX)
• 90ac971: desktop: own binary name, bundle wintun.dll on Windows (@GrowlyX)

v0.1.6

Changelog

• 28021b5: Management API for the desktop apps (@GrowlyX)
• 02e43f3: Menu bar panel: drop the header rate totals (@GrowlyX)
• 3887b27: Menu bar panel: settings cog and quit door in the header (@GrowlyX)
• 871f7a8: Windows TUN mode and tailmux service install (@GrowlyX)
• b8b00d4: macOS app: full window with tailnets, devices, settings and logs (@GrowlyX)
• 18aaec3: macOS window: own sidebar, white tab icons, no divider (@GrowlyX)

v0.1.5

Changelog

• d3c3450: tun: survive sleep, wake and network changes (@GrowlyX)

v0.1.4

Changelog

• bdaaec3: Menu bar and README design pass (@GrowlyX)
• 50d4f9b: README: banner with the menu bar panel, set in Satoshi (@GrowlyX)
• 947455f: update: root daemon removes old root-owned Homebrew versions (@GrowlyX)

v0.1.3

Changelog

• d29c32a: update: the Update button always checks for a new release first (@GrowlyX)