Commit Graph

  • 7aa93955d5 Require an S4U comparison and check elevation against the token elevation type ssh-windows-privilege-check Viktor Liu 2026-07-29 21:05:55 +02:00
  • bc8b9c52e0 build(deps): bump the aws-sdk group across 1 directory with 4 updates dependabot/go_modules/aws-sdk-8f849ebaed dependabot[bot] 2026-07-29 18:40:45 +00:00
  • be2ed82c68 build(deps): bump the otel group across 1 directory with 5 updates dependabot/go_modules/otel-e34c790afd dependabot[bot] 2026-07-29 18:35:08 +00:00
  • 472e0af268 build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 dependabot/go_modules/google.golang.org/grpc-1.82.1 dependabot[bot] 2026-07-29 18:35:07 +00:00
  • c4fdb679dd build(deps): bump the gorm group across 1 directory with 4 updates dependabot/go_modules/gorm-2271c8195b dependabot[bot] 2026-07-29 18:34:48 +00:00
  • 0f5d2d91fb [client] Authorize daemon IPC callers by their local identity (#6967) main v0.76.0 Viktor Liu 2026-07-30 03:32:26 +09:00
  • 42ce83a8f3 added support for account network revert/component-types Dmitri Dolguikh 2026-07-29 18:57:08 +02:00
  • c4fec48a71 Resolve test account names from well-known SIDs and RIDs instead of English literals Viktor Liu 2026-07-29 18:33:52 +02:00
  • e620c86cd4 added support for networkrouters Dmitri Dolguikh 2026-07-29 18:32:51 +02:00
  • 9dee2d60b9 added support for networkresources Dmitri Dolguikh 2026-07-29 18:19:34 +02:00
  • 6f8dd82ddc Identify the Administrators group by the name resolved from its well-known SID Viktor Liu 2026-07-29 18:14:19 +02:00
  • b09c808971 [client] wait for macOS UI launch and propagate its error fix-macos-update-inherits-root-home riccardom 2026-07-29 18:11:57 +02:00
  • 3c745a8228 Fail closed when a local group name cannot be resolved to a SID Viktor Liu 2026-07-29 18:00:04 +02:00
  • 4525014632 support for nameservergroups Dmitri Dolguikh 2026-07-29 17:59:44 +02:00
  • 4b5a8c3af3 [client] launch macOS UI via sudo -u -H for full user env (HOME/USER/LOGNAME) riccardom 2026-07-29 17:43:02 +02:00
  • 23a5c0de4b added support for routes Dmitri Dolguikh 2026-07-29 17:37:00 +02:00
  • e6a286ab67 Fix lint issues agent-network-dynamic-pricing braginini 2026-07-29 16:59:21 +02:00
  • 4bba5b5f9b Remove comments riccardom 2026-07-29 16:58:37 +02:00
  • 0b7e6a9f46 [signal] make pprof configurable (#6963) Pascal Fischer 2026-07-29 16:54:01 +02:00
  • 2316c20a2b [management, proxy] Management-owned LLM pricing: file-backed defaults + operator prices, delivered via cost_meter middleware config braginini 2026-07-29 16:49:37 +02:00
  • 53933f9612 [client] validate console user uid/home and set HOME on macOS UI launch riccardom 2026-07-29 16:15:28 +02:00
  • 4b42adcbf3 configurable cors settings fix/explicit-cors-handling pascal 2026-07-29 15:55:02 +02:00
  • f87c8e89e8 Exclude the notifier response callback from generated bindings ui-notifications-nonfatal Viktor Liu 2026-07-29 15:14:54 +02:00
  • a5e71db577 Logs on fallback ui preferences riccardom 2026-07-29 14:33:24 +02:00
  • 451fa42fbd Start the UI only on behalf of a valid logged user or avoid running it riccardom 2026-07-29 14:21:44 +02:00
  • c4bc479df6 Detect Windows privilege from the token and group membership instead of name matching Viktor Liu 2026-07-29 09:47:21 +02:00
  • f2c1070f95 [client] Fix UI crash on Windows builds without dark-mode support (#6958) Viktor Liu 2026-07-29 20:52:18 +09:00
  • d4e76387ee Keep the UI running when the notification service fails to start Viktor Liu 2026-07-29 13:47:28 +02:00
  • 0dda165230 update alias fix/remove-math-rand pascal 2026-07-29 12:31:21 +02:00
  • a1ab7520b9 build(deps): bump the actions group across 1 directory with 14 updates dependabot/github_actions/actions-a940c7c866 dependabot[bot] 2026-07-29 10:26:30 +00:00
  • 09f0700bb6 fix import pascal 2026-07-29 12:23:25 +02:00
  • f7f29fe1c3 build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.1 dependabot[bot] 2026-07-29 10:23:08 +00:00
  • df39c2b254 [infrastructure] Deprecate legacy Dex and Zitadel getting-started scripts (#6952) Brandon Hopkins 2026-07-29 03:20:43 -07:00
  • eb43bc8b35 Merge branch 'main' into fix/remove-math-rand pascal 2026-07-29 12:06:01 +02:00
  • 0785f379a2 input validation for peer ip allocation pascal 2026-07-29 12:05:30 +02:00
  • c81eab8472 Merge branch 'fix/ui-status-dispatch' into test/gui-memory-leak-fix test/gui-memory-leak-fix Zoltán Papp 2026-07-29 11:01:36 +02:00
  • c49333e48a [client] Serialize status replay with live push dispatch fix/ui-status-dispatch Zoltán Papp 2026-07-29 11:00:22 +02:00
  • 8b4061cfaf Merge branch 'fix/ui-status-dispatch' into test/gui-memory-leak-fix Zoltán Papp 2026-07-29 10:36:20 +02:00
  • 175ca4f0e0 Merge branch 'fix/subscribe-status-coalesce' into test/gui-memory-leak-fix Zoltán Papp 2026-07-29 10:36:08 +02:00
  • 859ac60c90 Merge branch 'fix/tray-menu-item-leak' into test/gui-memory-leak-fix Zoltán Papp 2026-07-29 10:35:52 +02:00
  • 8ead0e539f build(deps): bump golang.zx2c4.com/wireguard/windows dependabot/go_modules/wireguard-dbd6b95108 dependabot[bot] 2026-07-29 02:43:59 +00:00
  • c9e282099b build(deps): bump the pion group across 1 directory with 2 updates dependabot/go_modules/pion-5f703e1eca dependabot[bot] 2026-07-29 02:43:55 +00:00
  • 7d51568804 build(deps): bump the testcontainers group across 1 directory with 3 updates dependabot/go_modules/testcontainers-de325c0dd6 dependabot[bot] 2026-07-29 02:43:52 +00:00
  • 576ed4c343 [client] harden inactivity-threshold parsing (CodeRabbit) fix/lazy-conn-inactivity-duration riccardom 2026-07-28 22:06:34 +02:00
  • 3b32ca3924 Prepare SysV tooling in install-script test containers install-script-ui-dependencies mlsmaycon 2026-07-28 18:52:48 +02:00
  • dd2bdc0de3 [management] explicit accountID check when deleting a user (#6944) Pascal Fischer 2026-07-28 18:34:55 +02:00
  • 44fef45c2f [client] Export peer details for Android (#6925) Zoltan Papp 2026-07-28 18:13:22 +02:00
  • 3d1f209ea3 [client] parse NB_LAZY_CONN_INACTIVITY_THRESHOLD as a Go duration (#6947) Riccardo Manfrin 2026-07-28 18:12:49 +02:00
  • 25e882004f added retrieval of policies Dmitri Dolguikh 2026-07-28 18:06:28 +02:00
  • ed58cfc63a handle envelop on grpc GetNetworkMap fix/grpc-get-network-map pascal 2026-07-28 17:48:41 +02:00
  • 71df67a2b8 [client] Clear the login-required latch after installing the new client feature/android-session-expiry Zoltán Papp 2026-07-28 17:41:49 +02:00
  • 94c0201493 [client] Clear the login-required latch after installing the new client android/gui-integration Zoltán Papp 2026-07-28 17:41:49 +02:00
  • 2ef457be95 [client] Unify route selection in the route manager (#6928) Zoltan Papp 2026-07-28 17:39:37 +02:00
  • 408301714e [client] Fix two concurrency bugs in the Android session binding Zoltán Papp 2026-07-28 17:17:16 +02:00
  • 4dd16139ed [client] Fix two concurrency bugs in the Android session binding Zoltán Papp 2026-07-28 17:17:16 +02:00
  • 28ff2b7b3b [client] Dispatch status snapshots only to visible windows Zoltán Papp 2026-07-28 17:00:43 +02:00
  • 22e0b66412 [client] Replay latest status snapshot into windows on show Zoltán Papp 2026-07-28 17:00:08 +02:00
  • 63c320b6a9 [client] Serialize iOS tunnel reconfiguration callbacks (#6870) Zoltan Papp 2026-07-28 16:51:01 +02:00
  • 88728dd128 [client] Expose the SSO auth session to the Android binding Zoltán Papp 2026-07-28 16:42:21 +02:00
  • d00068bd89 [client] Expose the SSO auth session to the Android binding Zoltán Papp 2026-07-28 16:42:21 +02:00
  • 15003258d2 networkmap read-only interface for pgsql Dmitri Dolguikh 2026-07-28 16:46:45 +02:00
  • b6deed39fb [client] Feed tray status via direct callback instead of the event bus Zoltán Papp 2026-07-28 16:43:48 +02:00
  • 4c95b20251 [client] Drain buffered tick when coalesce window expires fix/subscribe-status-coalesce Zoltán Papp 2026-07-28 16:30:15 +02:00
  • 8a6df997b8 Merge branch 'main' into fix/tray-menu-item-leak fix/tray-menu-item-leak Zoltan Papp 2026-07-28 16:26:47 +02:00
  • 4b915e4a5a [client] Hold menuMu across tray item setters Zoltán Papp 2026-07-28 16:25:52 +02:00
  • 4acbe2670a [client] Escape dots in interface names for sysctl configuration (#6930) Stefan Fast 2026-07-28 16:24:30 +02:00
  • 0fb4c8c423 [client] Build UI release binaries with the production tag (#6898) Zoltan Papp 2026-07-28 16:23:09 +02:00
  • 42e45ff9f9 [client] Expose RenameProfile in the Android profile manager binding (#6926) Zoltan Papp 2026-07-28 16:22:48 +02:00
  • e1d82fc326 [client] Coalesce SubscribeStatus snapshot bursts Zoltán Papp 2026-07-28 16:11:05 +02:00
  • 6480b90a3b Merge branch 'main' into fix/windows-tray-race fix/windows-tray-race Eduard Gert 2026-07-28 15:02:28 +02:00
  • c3732ca846 Prevent tray status updates racing native icon registration Eduard Gert 2026-07-28 14:58:29 +02:00
  • 29b97340d6 [client] Fix tray menu item leak on relayout Zoltán Papp 2026-07-28 14:53:15 +02:00
  • 9269b56386 [management] Read reverse-proxy service and target columns in Postgres path (#6886) Viktor Liu 2026-07-28 21:46:19 +09:00
  • b3f9b82442 [management] Force routing-peer DNS resolution for reverse-proxy domain targets (#6872) Viktor Liu 2026-07-28 21:45:57 +09:00
  • 0c2a6a8628 merge main feature/changeset pascal 2026-07-28 14:14:07 +02:00
  • 473d61afc4 Note that a nil upstream reply was already logged and answered worktree-dns-route-qtype-fallthrough Viktor Liu 2026-07-28 14:07:07 +02:00
  • e65812339d [client] Require netbird >= 0.75.0 in the Linux UI packages fix/ui-dependencies Zoltán Papp 2026-07-28 14:04:28 +02:00
  • f91f9fc05c Convey MDM overlay config to Debug Bundle output mdm_integration riccardom 2026-07-28 11:44:15 +02:00
  • 6175888bce [misc] add dependencies to install.sh - update workflow to test different containers mlsmaycon 2026-07-28 11:37:21 +02:00
  • e92aa7dfb0 Resolve merge conflicts from main riccardom 2026-07-28 11:04:04 +02:00
  • 663468e199 Add CrowdSec AppSec request inspection to the reverse proxy reverse-proxy-crowdsec-appsec Viktor Liu 2026-07-27 12:28:02 +02:00
  • e1ffb165a4 Merge branch 'main' into mdm_integration (with unresolved conflict markers) riccardom 2026-07-28 10:48:04 +02:00
  • 9d6f892ac1 Merge branch 'feature/android-peer-detail' into android/gui-integration Zoltán Papp 2026-07-28 09:47:51 +02:00
  • d6bc1cf531 Merge branch 'feature/android-rename-profile' into android/gui-integration Zoltán Papp 2026-07-28 09:47:40 +02:00
  • 8a43f4f943 [client] fix build: add ReapplyMatching to dedicated AllowedIPsRefCounter (#6935) v0.75.1 Riccardo Manfrin 2026-07-28 09:42:57 +02:00
  • 2f268c8141 [client] fix stale routing peer on overlapping-prefix network removal (#6799) Riccardo Manfrin 2026-07-28 07:10:58 +02:00
  • e3c4128164 [client] Exit GUI immediately on Windows session end (#6878) Zoltan Papp 2026-07-28 07:09:16 +02:00
  • 24287577c8 [client] Cover both invalid-ID orderings in the partial-error test Zoltán Papp 2026-07-27 22:35:45 +02:00
  • 7e1b35037a [client] Keep exit-node exclusivity on select-all and partial errors Zoltán Papp 2026-07-27 22:03:20 +02:00
  • cc0ab3247d [client] Unify route selection in the route manager Zoltán Papp 2026-07-27 21:18:50 +02:00
  • bab5572a74 [management, proxy] scope agent-network model allowlist per policy/group and provider (#6905) Maycon Santos 2026-07-28 03:43:59 +09:00
  • 9b4a5df925 [client] Use platform installer URL for manual update downloads (#6922) Zoltan Papp 2026-07-27 20:08:35 +02:00
  • a83bc8a95f [client] Expose peer detail fields on the Android binding Zoltán Papp 2026-07-27 19:15:56 +02:00
  • 2af3a5fba5 do not send resource policies map over the wire Dmitri Dolguikh 2026-07-24 17:40:56 +02:00
  • 001fda5393 Add Linux ARM64 UI build mlsmaycon-patch-2 Maycon Santos 2026-07-27 18:13:44 +02:00
  • 4e3805f535 Renames SetRemotePort to SetRemoteAddr feat-post_quantum_ml_kem riccardom 2026-07-27 16:36:01 +02:00
  • 80c7bb195e pqkem: clock data-path PSK rotation from WireGuard handshakes riccardom 2026-07-27 16:32:33 +02:00
  • cac03bd80c pqkem: register data-path endpoint from signalling riccardom 2026-07-27 16:18:35 +02:00
  • 2681f5f8e6 pqkem: apply derived PSK at WG peer-config time (pull) + keep push for rekey riccardom 2026-07-26 14:04:51 +02:00
  • 905b7f7914 pqkem: carry KEM offer/answer over the signalling exchange riccardom 2026-07-26 13:15:51 +02:00