Changelog
- 8c70f9e [management] fix peer ip allocation test (#8173)
- e4ddd9a [management] Add a release-wired UBI image variant (#8167)
- 763da1b [relay] Add a release-wired UBI image variant (#7457)
- f0182dd [signal] Add a release-wired UBI image variant (#7458)
- a6e154a [misc] Extend the copyright year to 2026 (#8169)
- ef2292d [client] Fix Windows UI exiting on first launch (#8138)
- f6cfa77 [management] setting to return error on name collision during AddPeer (#8154)
- 66a28fd [client] Add nblink, an unprivileged forwarder into the network (#7955)
- fe78417 [management] Create HttpConfig before applying TLS flag overrides (#8168)
- 57722d3 [proxy] Exercise target access through container E2E (#8117)
- 88f1a30 [signal] Stop with an error when a server fails (#8105)
- 7006113 [management] update reserved IP exclusion when generating peer IP (#8144)
- cd22a9d [management] Configure per-target HTTP access actions (#8116)
- 1161616 [proxy] Enforce per-target HTTP access actions (#8115)
- a7a2575 [proxy] Add middleware snapshot revisions (#8114)
- 5c9c64e [client] Reuse one wgctrl client in the kernel configurer (#7912)
- 01185ba [client] Configure the userspace device through its typed API (#7937)
- 67c2041 [management] update proxy mappings on peer IP change (#8139)
- 008cf47 [client, management] Recover from stuck proof collections and keep re-tracked accounts on the challenge refresher (#7890)
- f0a40e4 [client, management] Harden the certificate posture client and keep challenge nonces fresh (#8052)
- 53a1455 [client, management] implement certificate posture check (#7535)
- a5834fd [management,signal] Make the Let's Encrypt challenge listener address configurable (#7706)
- fe0e904 [client] Drop the pending login flow when a login switches the profile (#7882)
- 3934e7c [client] Evaluate the session deadline against the wall clock (#7959)
- 3e85e40 [client] Cache the WireGuard interface check shared by ICE agents (#8001)
- 01d828d [management] Fall back to the IdP for the proxy session email (#8112)
- 06c4c20 [management] Tear down only the peer session that owns the stream (#8057)
- 515a01d [client] Force interactive login when extending the auth session (#7216)
- 834b0f6 [misc] Exclude tools/mysql-migrate from docker tests (#8128)
- cc51a3e [misc] Skip mysql-migrate container tests on Windows (#8121)
- a8a67f5 [client] Keep the updater silent until management decides the mode (#7455)
- e392c58 [relay] Fix race in Relay server shutdown (#7607)
- 24cb7b7 [management] switch to libopenapi for managing of openapi-based api (#8056)
- 192d3d0 [infrastructure] Find per-arch preflight results in the Red Hat certify check (#8111)
- 6a38217 [management] Add a MySQL to Postgres migration tool (#8095)