All pull requests

Pull requests

• build(deps): bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

  dependenciesgo
  #2045·dependabot[bot] opened Nov 2, 2026Bot·

  ·

• build(deps): bump golang.org/x/net from 0.61.0 to 0.62.0 in the golang-x-dependencies group

  dependenciesgo
  #2044·dependabot[bot] opened Nov 2, 2026Bot·

  ·

• Preserve cached packets when retrying a wrong responder

  cla:signed
  #2043·randomizedcoder opened Nov 2, 2026Contributor·

  ·

• Fix handshake packet-cache race

  cla:signed
  #2042·randomizedcoder opened Nov 2, 2026Contributor·

  ·

• Fix disabled-TUN shutdown race

  cla:signed
  #2041·randomizedcoder opened Nov 2, 2026Contributor·

  ·

• Count replayed and out of window packets that Check rejects

  #2040·wadey opened Oct 30, 2026Member·

  ·

  · v1.13.0

• Add illumos support

  cla:signed
  #2037·extrowerk opened Oct 28, 2026·

  ·
  7

• Ignore IPv4 underlay addresses when our UDP socket is IPv6 only

  cla:signed
  #2033·JackDoan opened Oct 28, 2026Collaborator·

  ·

• Default listen.host to a dual stack bind

  cla:signedsmoke-test-extra
  #2032·JackDoan opened Oct 28, 2026Collaborator·

  ·

  · v1.13.0
  1

• ci: run Build and test when golangci-lint config changes

  cla:signed
  #2026·jasikpark opened Oct 27, 2026Collaborator·

  ·

• Vet every supported GOOS and the e2e_testing build

  cla:signed
  #2020·jasikpark opened Oct 26, 2026Collaborator·

  ·

• Fix two data races surfaced by the e2e suite under -race

  cla:signed
  #2011·jasikpark opened Oct 26, 2026Collaborator·

  ·

• Post-quantum handshakes on a pure ML-KEM-1024/ML-DSA-87 curve (pqIX), for CNSA 2.0

  cla:signed
  #2002·JackDoan opened Oct 23, 2026Collaborator·

  ·

• Post-quantum handshakes on a hybrid curve, P384-MLKEM1024-MLDSA87, for CNSA 2.0

  cla:signed
  #2001·JackDoan opened Oct 23, 2026Collaborator·

  ·
  3

• Send handshake messages too big for one packet as FEC coded fragments

  cla:signed
  #2000·JackDoan opened Oct 23, 2026Collaborator·

  ·

  · v1.13.0
  7

• Move a tunnel to another remote when its current one becomes unreachable

  cla:signed
  #1981·JackDoan opened Oct 20, 2026Collaborator·

  ·

  · v1.13.0

• Post-quantum hybrid handshakes on version 3 certificates

  cla:signed
  #1974·JackDoan opened Oct 19, 2026Collaborator·

  ·
  14

• tun: Separate inside-packet filtering from sending

  cla:signed
  #1968·rawdigits opened Oct 16, 2026Collaborator·

  ·

• Bind sshd, dns and stats listeners in the reload so a bind failure fails it

  cla:signed
  #1950·nbrownus opened Oct 15, 2026Collaborator·

  ·

  · v1.13.0

• Check the tun mtu against the kernel on reload, not the last config

  cla:signed
  #1949·nbrownus opened Oct 15, 2026Collaborator·

  ·

  · v1.13.0
  1

• cpupick: Make tun.avoid_cpus a pin selection rule

  cla:signed
  #1947·JackDoan opened Oct 15, 2026Collaborator·

  ·
  1

• Opt-in staged packet processing for tun transmit and UDP receive (Linux)

  cla:signed
  #1946·rawdigits opened Oct 15, 2026Collaborator·

  ·
  24

• tun: Allow excluding CPUs from process threads at startup

  cla:signed
  #1945·rawdigits opened Oct 15, 2026Collaborator·

  ·
  1

• linux: Don't replace another interface's route with the same destination and metric

  cla:signed
  #1943·JackDoan opened Oct 15, 2026Collaborator·

  ·

• e2e/darwin: Add vpnemu, a configd harness for exit node route hijacks

  cla:signed
  #1932·JackDoan opened Oct 12, 2026Collaborator·

  ·
  5