What's Changed
- [relay] Handle QUIC connections concurrently to prevent handshake head-of-line blocking by @lixmal in #6784
- [client] Reject leading hyphen in getent input to prevent flag injection by @lixmal in #6787
- [client] Sanitize peer FQDN/hostname in generated SSH config by @riccardomanfrin in #6805
- [client] Disable gVisor TCP RACK loss detection on Windows by @lixmal in #6808
- [client] Rename isValidAccessToken to reflect audience-only check by @riccardomanfrin in #6806
- [client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default by @riccardomanfrin in #6812
- [client] Evaluate IP fragments against firewall ACLs by @lixmal in #6781
Full Changelog: v0.74.6...v0.74.7