What's Changed
- [client] Stop dumping the whole device to clear one peer endpoint by @riccardomanfrin in #7632
- [infrastructure] Fix flow auth secret for external Relay migrations by @bcmmbaga in #7731
- [management] extract shared db conn + data repository by @pascal-fischer in #7649
- [management] Add a revocation guard hook to the proxy token API by @bison in #7732
- [management, proxy] Enforce strict base64url decoding for JWT validation by @bcmmbaga in #7554
- [management] Refactor PKCE verifier store into a reusable single-use store by @bcmmbaga in #7634
- [management] fix login filter by @pascal-fischer in #7739
- [management] Add a disabled state to the managed Agent Network proxy API by @bison in #7744
- [client] Keep the delete-profile dialog open until the delete finishes by @heisbrot in #7752
- [management,proxy] Use single-use codes for OIDC session handoff by @bcmmbaga in #7635
- [client] Replace the eBPF WireGuard proxy with loopback endpoint addressing by @lixmal in #7316
- [proxy] Apply the upstream HTTP version before cloning transports by @bison in #7806
- [client] Classify Windows local accounts by NetBIOS name by @thomashacker in #7628
- [management] handle db conn close on error by @pascal-fischer in #7740
- [client] Keep the advertised ICE session ID when following a remote restart by @mlsmaycon in #7814
- [client] Cache the box shared key per remote peer in the Signal client by @lixmal in #7807
- [client] Add debug cpu start and stop commands by @lixmal in #7749
- [management] Add account deletion hooks and delete agent network configuration with the account by @bison in #7812
- [management] Let usage_viewer read Agent Network access logs by @jnfrati in #7750
- [client] Only treat LocalSystem as a privileged identity by SID on Windows by @lixmal in #7889
- [client] Add Homebrew cask e2e test by @pappz in #7618
- [client] Report both peers' state when the connect test times out by @pappz in #7944
- [proxy] Optionally refuse private addresses on direct-upstream dials by @bison in #7913
- [management,proxy] Rename the OIDC session code query parameter by @bcmmbaga in #7981
- [management] expose peer MAC addresses and make peers searchable by MAC by @a-elkaim in #6553
- [misc] Move the FreeBSD port test to release 15.1 by @pappz in #7999
- [client] Discover interfaces lazily in stdnet instead of at construction by @riccardomanfrin in #7346
- [management] Require a private proxy cluster for cluster and direct upstream targets by @mlsmaycon in #7984
- [infrastructure] Create the preflight artifacts directory before submitting by @jnfrati in #7947
- [self-hosted] Replace "which" dependency by "command" from configure.sh script by @PizzaLovingNerd in #8007
- [management] Improve Base62 encoding/decoding performance and robustness by @redouan-rhazouani in #3391
- [management] Refresh only affected peers on DNS zone and record changes by @mlsmaycon in #8050
- [client,android] Generate debug bundle to file by @pappz in #7528
- [client] Resolve the Android network route peer by HA unique ID instead of scanning the full status by @pappz in #7705
- [client] Fix browser login popup show from go by @pappz in #7408
- [management] Refresh only affected peers on IPv6 settings changes by @mlsmaycon in #8051
- [client] stop offering to every peer when the relay transport drops by @riccardomanfrin in #7092
- [client] Skip late session warnings on desktop and schedule them in the app on Android by @pappz in #7548
- [management] add tenant delete endpoint to openapi by @pascal-fischer in #8054
- [self-hosted] Add a UBI image variant for the combined server by @jnfrati in #7953
- [misc] Share one license collection script across the UBI images by @jnfrati in #8055
- [misc] Use ASCII hyphens in the LICENSE header by @janekhaertter in #8065
- [client] Gate settings updates on value, not on field presence by @riccardomanfrin in #7398
- [client] Add RTL layout support to the desktop UI by @heisbrot in #8076
- [management] fix the concurrency handling within the update message tests by @pascal-fischer in #8000
- [client] feat(i18n): Add Galician (gl) localization for desktop client by @B1NAR10 in #7041
- [client, android, ios] Coalesce peer list change notifications to the mobile listener by @pappz in #7546
- [management] remove ingress ports by @pascal-fischer in #8062
- [client] Warn on missing translations and check placeholders by @thomashacker in #8090
- [client] Only offer locales listed in _index.json by @thomashacker in #8091
- [client] Close the UI before InstallValidate in the MSI by @pappz in #7395
New Contributors
- @a-elkaim made their first contribution in #6553
- @redouan-rhazouani made their first contribution in #3391
- @janekhaertter made their first contribution in #8065
- @B1NAR10 made their first contribution in #7041
Full Changelog: v0.80.0-rc.1...v0.81.0-canary.pr-7395.1