What's Changed
- gateway: enforce unknown_host deny for unmatched HTTPS SNI by @magurotuna in #782
- join: commit whole-machine marker after routing succeeds by @magurotuna in #783
- join: stage WireGuard CA until setup succeeds by @magurotuna in #785
- fix: join: reuse the tailnet-bootstrap HTTP transport for peer claim by @yhay81 in #780
- run: forward per-process UDP over IPv6 by @magurotuna in #786
- pluginsdk: fix tunnel Dial teardown deadlock on early callback return by @magurotuna in #795
- sandbox: mirror the dynamic loader into the namespaces sandbox by @magurotuna in #796
- mitm: sanitize request read errors by @magurotuna in #799
New Contributors
Full Changelog: v0.5.8...v0.5.9
Contributors
yhay81 and magurotuna