1.0.0-pre.11

• fix(portal): Serve static files with digests at root @AndrewDryga (#4386)
• fix(porta): Greatly improve HTTP 500 error page @AndrewDryga (#4382)
• fix(portal): Do not redact userpass virtual state (its a virtual field anyway) @AndrewDryga (#4370)
• fix(portal): Filter group actors by group id @AndrewDryga (#4369)
• fix(Windows client): fix "Tauri error" to "Firezone is already running" @ReactorScram (#4364)- feat(connlib): react to config updates @conectado (#4322)- fix(apple client): sign in crash, closes #4350 @ReactorScram (#4353)
• fix(portal): Fix bug in actor edit page preventing updates @bmanifold (#4347)
• fix(portal): Allow deleting synced actors after all identities are removed @AndrewDryga (#4346)
• fix(portal): Fix pagination issues with flows and activities, improve error handling around live tables @AndrewDryga (#4330)- fix(apple): sync tunnel configuration after saving @jamilbk (#4338)
• fix(connlib): only update the interface when setting dns if the effective dns changed @conectado (#4327)- fix(apple): Use keychain from the tunnel process *only* @jamilbk (#4335)
• fix(apple): Avoid getting stuck at the "load resources" view @jamilbk (#4336)
• fix(apple): Debounce sign in button @jamilbk (#4334)
• feat(apple): Handle network changes reliably on macOS and iOS @jamilbk (#4133)
• feat(phoenix-channel): fail on missing heartbeat after 5s @thomaseizinger (#4296)- fix(phoenix-channel): re-queue message upon send failure @thomaseizinger (#4294)- fix(portal): Fix online status on clients page @AndrewDryga (#4307)- fix(connlib): use quinn fork for quinn to work on ios @conectado (#4279)
• fix(gateway): answer with empty list of addresses on DNS resolution failure @thomaseizinger (#4266)- feat(portal): Add styled errors pages (404, 422, 500) @bmanifold (#4231)
• feat(android): changing managed config restarts TunnelService @jasonboukheir (#4181)
• feat(snownet): minimize delay when roaming @thomaseizinger (#4246)- feat(android): use device serial for deviceName @jasonboukheir (#4180)
• fix(phoenix-channel): queue join message before others @thomaseizinger (#4242)
• feat(android): detect network and dns changes and send them to connlib @conectado (#4163)
• feat(portal): Sync accounts between stripe and portal @AndrewDryga (#4173)- fix(portal): Fix various issues with presence-triggered table reloads @AndrewDryga (#4228)
• fix(connlib): remove outdated assertion due to possibility of network changes @conectado (#4222)- feat(portal): Track protocol in activities @AndrewDryga (#4215)
• feat(gui-client): Tauri welcome screen @ReactorScram (#4013)
• feat(connlib): reduce packet drops @thomaseizinger (#4168)
• fix(connlib): exclude sentinel dns range for resources ips @conectado (#4200)
• feat(portal): Add sign up override in portal @bmanifold (#3739)- feat(portal): Filtering, Fulltext Search, Pagination, Preloads @AndrewDryga (#3751)- feat(connlib): introduce Session::reconnect @thomaseizinger (#4116)
• feat(snownet): introduce connection span to capture str0m and boringtun logs @thomaseizinger (#4144)
• fix(android): send Cidr format instead of IpNetwork format @conectado (#4134)- fix(android): spawn dedicated thread for connlib @thomaseizinger (#4145)
• fix(apple): spawn new thread for runtime to prevent it from being taken down @conectado (#4141)
• feat(gateway): add HTTP health check @thomaseizinger (#4120)
• feat(connlib): reduce stack size usage @thomaseizinger (#3958)- fix(portal): Increase group name max length @AndrewDryga (#4128)
• feat(linux): make deep link auth work @ReactorScram (#4102)
• Fix typo in _deploy_production.yml @jamilbk (#4113)- feat(docs): Example Gateway terraform module for GCP @jamilbk (#4011)- fix(relay): actually expire channels which allows re-binding them @thomaseizinger (#4094)
• feat(relay): improve logs for expiry and deletion of channel bindings @thomaseizinger (#4089)- fix(portal): Prevent invalid characters when entering account slug at sign in @AndrewDryga (#3917)
• fix(connlib): ignore certain multicast addresses @thomaseizinger (#4062)
• feat(snownet): log duration since intent after WG handshake completes @thomaseizinger (#3991)- feat(connlib): decrease connection setup latency @thomaseizinger (#4022)
• feat(snownet): timeout connections if we don't receive a candidate within 10s @thomaseizinger (#3790)
• feat(linux-client): generate firezone-id (device ID) automatically if it's not provided at launch @ReactorScram (#3920)
• fix(apple): Ignore expired login status @roop (#4052)
• feat(apple): In resources list, tapping on a list item shows a 'Copy Address' menu @roop (#4050)
• fix(apple): Align fields in Advanced Settings @roop (#4025)
• fix: let Tauri know about hiDPI icons @ReactorScram (#4039)
• fix(portal): Fix broken link to DNS docs @jamilbk (#4036)
• feat(snownet): always force a handshake when we change the socket @thomaseizinger (#3985)
• feat(apple): UI notification for reauth @roop (#3684)
• feat(windows): code sign Windows client @jamilbk (#3891)
• fix(ipad): Allow NavigationView to occupy entire screen @jamilbk (#3908)
• fix(android): Handle empty strings for allowed and disallowed VPN apps @jamilbk (#3918)
• fix(android): Fix crash on start due to Hilt 2.51 @jamilbk (#3916)
• fix: use atomicwrites to back up /etc/resolv.conf more robustly @ReactorScram (#3828)
• feat(linux-client): load token from /etc/dev.firezone.client ... @ReactorScram (#4328)
• feat(windows): listen for DNS change events @ReactorScram (#4198)