Canary release

Only testable code based on ongoing development.

What's Changed

• [misc] Skip the protobuf breaking check on branch-creation pushes by @bison in #7411
• [management, proxy] Enforce reverse proxy group access for OIDC sessions by @lixmal in #7240
• [management] Serve networks with peer-based routers from the SQLite network map by @mlsmaycon in #7418
• [management] disallow weird ip addresses for direct upstream hosts by @dmitri-netbird in #7400
• [management] Add SetNX and GetDel cache store operations by @bcmmbaga in #7084
• [management] Keep embedded IdP deployments on a single account by @bcmmbaga in #7380
• [management] blocking sync requests for user peers sharing the same wireguard key by @pascal-fischer in #7427
• [client] Gather fresh system info on every management sync stream connect by @pappz in #7409
• [client] Assign the Android TUN address as a host prefix by @pappz in #7414
• [management] update network_router_test to verify empty and nil peer_groups by @dmitri-netbird in #7425
• [management] Add Agent Network managed proxy to the API spec by @bison in #7433
• [client] Return the context error when the SSH handshake fails with it by @pappz in #7426
• [client] mobile MDM bridge — iOS + Android setMDMPolicyFetcher entrypoint by @riccardomanfrin in #6435
• [management] fix delete of owner user by @pascal-fischer in #7456
• [client] Read MDM boolean keys delivered as JSON numbers by @riccardomanfrin in #7471
• [client] Compare MDM-managed URLs as endpoints, not as strings by @riccardomanfrin in #7472
• [client] Redirect DNS port 53 with UDP and TCP DNAT instead of the eBPF forwarder by @lixmal in #7439
• [management] expire and disconnect peers while including offline peers by @pascal-fischer in #7467
• [management] Let embedding binaries extend the command tree by @bison in #7483
• [management] Refuse services on unvalidated custom domains by @mlsmaycon in #7341
• [client] Support arbitrary UIDs in rootless image by @jnfrati in #7440
• [client] Report the remote jobs key in the MDM UI snapshot by @pappz in #7485
• [management] cleanup resources when ws-grpc proxy connection goes away by @dmitri-netbird in #7484
• [management] do not hard-code tmp dir path in ws_conn_adapter_test by @dmitri-netbird in #7503
• [client] Add a release-wired rootless UBI image variant by @jnfrati in #7469
• [client, proxy] Make the buffer-pool retune reachable while a device is stalled by @riccardomanfrin in #7452
• [management] validate peer existence when adding to group by @pascal-fischer in #7486
• [management] pass tls config for combined server by @pascal-fischer in #7499
• [management] validate the domain for the flock in proxy by @pascal-fischer in #7501
• [infrastructure] Preserve snapshot image variant tags by @jnfrati in #7511
• [management] Only trust forwarded-IP headers from configured trusted peers by @bcmmbaga in #7454
• [client] Fix relay instance address race by @pappz in #7498
• [management] extract peer update logic and wrap it in tests by @dmitri-netbird in #7338
• [client] Add light mode with system, light, and dark theme options by @TechHutTV in #7344
• [management] Expire unvalidated custom domain registrations by @mlsmaycon in #7497
• [management] Harden OIDC issuer validation and discovery by @bcmmbaga in #7435
• [misc] Pull the MinIO test image from quay.io by @Silex in #7516
• [management] Prevent deleting groups referenced by agent network budget rules by @Tyagiquamar in #7450
• [client] Bump wireguard-go to 8bf8fa968f1a by @pappz in #7532
• [client] Fix the Windows tray deadlock on re-entrant window creation by @pappz in #7449

New Contributors

• @Tyagiquamar made their first contribution in #7450

Full Changelog: v0.78.0...v0.80.0-canary.pr-7535.1