Repository navigation
Releases: vibecook-dev/truffle
Release list
truffle: v0.7.16
truffle: v0.7.15
TailscaleKit: Tailscale 1.104.1, Go 1.27.2
TailscaleKit for Tailscale 1.104.1, built with Go 1.27.2 and golang.org/x/net 0.60.0 (HTTP/2 security fixes).
Source commit: b1541c5dff71d870640d69f773ec5a2549ca3cd5.
Upstream libtailscale revision: 59d4bb82744915815178e0f0776d60026a397ee7.
Apple toolchain: Xcode 26.6 (17F113), Apple Swift 6.3.3, Apple silicon macOS.
The framework retains the reviewed remote-address/descriptor, peer-notification, and IPN-stream-recovery patches, and adds compatibility with Tailscale's typed DERP region IDs in the upstream test utilities. Exact module locks, patch hashes, and binary hashes are recorded in the attached provenance.
Assets:
TailscaleKit.xcframework.zip: iOS arm64 and iOS simulator arm64/x86_64, including privacy manifests.libtailscale-source.tar.gz: exact patched wrapper source and Go dependency locks used for the build.provenance.json: source revision, toolchain, input hashes, archive hashes, and validation record.
SwiftPM checksum: f8a61a742e42cbf04983213ea28f8a2370802b17fe420ea9cac7f59249c3238f.
Patched source SHA-256: 463de5953d3f94790922b8cc495958aafd3713f856eb7986ec99461d84db47ca.
Validation before publication: all patched Go packages with the race detector; six exact-source Swift IPN tests; 70 Swift package tests; iOS device and simulator builds; no reachable vulnerabilities reported by govulncheck. Public-download consumer validation on October 12, 2026 also passed: a fresh clone of this tag with fresh SwiftPM/Xcode caches and no local framework downloaded the public archive, passed all 70 Swift tests, and built the production runtime for iOS devices and simulators. The freshly downloaded archive and both framework binaries match the validated hashes above. These are local validation results. This release was published before GitHub Actions CI ran.
Post-publication CI checked the immutable source commit: Apple source and public-consumer CI, live-network tests, and CodeQL passed. Both Go vulnerability scans passed. Repository-wide CI was not fully green: the historical Rust graph contains RUSTSEC-2026-0285 and its test code fails a new compiler deprecation lint. Those Rust-only issues are corrected in PR #197; the published Apple artifact and source tag are unchanged.
This immutable dependency release publishes TailscaleKit for Swift consumers. Truffle CLI and sidecar packages use their separate versioned release workflow.
truffle: v0.7.14
0.7.14 (2026-09-16)
Features
- apple: the login gate — the tailnet login as the mesh boundary (3c561cf)
- apple: the tailnet login on every public identity surface (668e4f8)
- cli: the peer list and status show the tailnet login (37bb71b)
- core,napi,tauri: the gate gets a door and the login gets a public surface (9b3ffaf)
- core: Layer 3 filters by login, and a gated node refuses a sidecar that cannot report one (d45984a)
- core: RFC 025 — the login becomes a peer fact, and a node can declare which logins may join (e729922)
- core: RFC 025 — the login gate at the hello, and a store slice bound to its sender (feb685d)
- sidecar: the login rides every peer row and the node's own status — protocol 5 (eec5799)
Bug Fixes
- apple: a login the gate refuses is a departure, not an update (8e41d2e)
- apple: a peer we cannot attribute reports no login, and is not dialed (27ac01f)
- apple: preserve peer identity and recover Tailscale watches (9d77cf9)
- core: a gated node will not dial a peer whose owner it cannot state (M2) (5894d62)
- core: a hello-only peer's store slices bind to their sender again (M1) (e8b65a8)
- core: a peer whose login turns foreign is EVICTED, not silently kept (404f4b1)
- core: one login_allow builder method after the Layer 3 merge (b81a662)
- deps: rustls 0.23.45 — RUSTSEC-2026-0285 (TLS 1.3 handshake messages across encryption levels) (ff1bbd6)
This PR was generated with Release Please. See documentation.
TailscaleKit 1.102.3 r2: identity and stream recovery fixes
Fix accepted-connection identity attribution and IPN stream recovery in the Apple TailscaleKit dependency. This revision keeps Tailscale 1.102.3, Go 1.26.8, and libtailscale revision 59d4bb82744915815178e0f0776d60026a397ee7.
Queued connections use unique transfer IDs and retain an owned socket reference until acceptance. Connection cleanup keeps descriptor shutdown safe during reuse. Unexpected successful IPN stream completion now reaches the consumer's recovery callback; cancellation stops the URLSession and stale completions are ignored.
Built with Xcode 26.6 (17F113) and Apple Swift 6.3.3. Includes iOS arm64 and simulator arm64/x86_64 slices, with the reviewed privacy manifests.
Validation passed: C-binding race tests including queued IPv4/IPv6 connections and payload attribution, Go vet, six Swift stream regressions compiled from the exact patched sources, 70 Truffle Swift tests, and production iOS device/simulator builds.
SwiftPM checksum: 4d97655a8776c0f76c21fa91ef51c2e00a2e7339100f56987391dcb0c67541d2.
The attached source archive contains the pinned wrapper with all three patches applied and the locked Go module graph. build-info.json records source inputs, toolchains, validation, and artifact hashes. Truffle's corresponding source changes normalize IPv6 WhoIs inputs and guard reconnect cancellation.
Truffle source commit: 3657a52d462039c6035644d1a58995fb66401e4c.
truffle: v0.7.13
0.7.13 (2026-09-06)
Bug Fixes
- deps: upgrade embedded Tailscale to 1.102.3 (1f87fd4)
This PR was generated with Release Please. See documentation.
TailscaleKit: Tailscale 1.102.3 / Go 1.26.8
Embed Tailscale 1.102.3 using Go 1.26.8, with libtailscale revision 59d4bb82744915815178e0f0776d60026a397ee7.
The framework preserves accepted peer addresses across file-descriptor passing and exposes incremental peer-notification options for Truffle's iOS runtime. The embedded Go module graph is pinned separately because upstream libtailscale still uses Tailscale 1.94.1.
Built using Xcode 26.6 (17F113) and Apple Swift 6.3.3. Includes iOS arm64 and iOS Simulator arm64/x86_64 slices, each with the reviewed privacy manifest.
Validation: C-binding tests with the race detector, 68 Swift tests, and production iOS device/simulator builds passed. Embedded Go/Tailscale versions and archive integrity were checked.
SwiftPM checksum: 14d224f67360e2ac5b12fb31531401313dc63a0caae4838b1d74879e2ff16964.
The attached source archive includes the exact wrapper source, patches as applied, and Go module locks. build-info.json records source inputs, toolchains, and artifact hashes. This is a new immutable dependency artifact; the prior TailscaleKit release is unchanged.
truffle: v0.7.12
0.7.12 (2026-08-03)
Bug Fixes
- sidecar: confine static routes to rooted filesystem (13a283b)
This PR was generated with Release Please. See documentation.