search

boinkor-net / hoopsnake

A not-very-featureful SSH server for initrd that listens on your tailscale network
https://github.com/boinkor-net/hoopsnake
Apache License 2.0
2 stars 1 forks source link

Bump the gomod group across 1 directory with 4 updates #31

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the gomod group with 4 updates in the / directory: github.com/prometheus/client_golang, golang.org/x/crypto, golang.org/x/oauth2 and tailscale.com.

Updates github.com/prometheus/client_golang from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

  • Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

Commits


Updates golang.org/x/crypto from 0.21.0 to 0.23.0

Commits
  • 905d78a go.mod: update golang.org/x dependencies
  • ebb717d ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
  • 0da2a6a openpgp: fix function name in comment
  • 5defcc1 sha3: fix Sum results for SHAKE functions on s390x
  • d042a39 go.mod: update golang.org/x dependencies
  • b92bf94 ssh: respect MaxAuthTries also for "none" auth attempts
  • 6f79b5a ssh: add server side multi-step authentication
  • 8d0d405 x/crypto/chacha20: cleanup chacha_ppc64le.s
  • b91329d all: remove redundant words in comments and fix some typos
  • See full diff in compare view


Updates golang.org/x/oauth2 from 0.18.0 to 0.20.0

Commits
  • 84cb9f7 oauth2: fix typo in comment
  • 4b7f0bd go.mod: update cloud.google.com/go/compute/metadata dependency
  • e11eea8 microsoft: added DeviceAuthURL to AzureADEndpoint
  • d0e617c google: add Credentials.UniverseDomainProvider
  • 3c9c1f6 oauth2/google: fix the logic of sts 0 value of expires_in
  • 5a05c65 oauth2/google: fix remove content-type header from idms get requests
  • 3a6776a appengine: drop obsolete code for AppEngine envs <=Go 1.11
  • See full diff in compare view


Updates tailscale.com from 1.62.1 to 1.66.1

Release notes

Sourced from tailscale.com's releases.

v1.66.1

This release is exclusively for Linux platforms and the standalone variant of the macOS client. It is not available for other platforms.

Linux

  • tailscale set command flags --netfilter-mode, --snat-subnet-routes, and --stateful-filtering are added.
  • Resolved issues with nftables rules for stateful filtering, introduced in v1.66.0.

macOS

  • A version mismatch warning no longer displays when upgrading, if no mismatch is detected.

v1.66.0

We recommend updating all Tailscale clients to v1.66.0 or later to benefit from additional security improvements.

All platforms

  • Implemented client-side quarantining for shared-in exit nodes, as a mitigation for a security vulnerability described in TS-2024-005.

Linux

  • Use the --stateful-filtering flag for the tailscale up to enable stateful filtering for subnet routers and exit nodes, as a mitigation for a security vulnerability described in TS-2024-005.
    • Note: This change can break existing setups that depend on forwarding connections from external hosts (internet, LAN, Docker containers, etc.) into the tailnet through a Tailscale node. If your setup depends on such forwarding, you can disable stateful filtering with the tailscale up --stateful-filtering=false command.
  • Use tab completion to type the first few letters of a Tailscale CLI command, flag, or arguments, followed by the tab key to complete the item being typed. Set up tab completion by using the tailscale completion command.
  • Use the tailscale exit-node suggest command to automatically pick an available exit node that is likely to perform best.
  • Site-to-site networking now also requires --stateful-filtering=false in addition to --snat-subnet-routes=false on new subnet routers. Existing subnet routers with --snat-subnet-routes=false will default to --stateful-filtering=false.

macOS

  • View a suggested exit node in the Exit Node picker when available.
  • Generate a macOS Configuration Report .txt file from the Bug Report view to help the Tailscale support team diagnose issues.
  • Improved error detection logic warns the user when a version mismatch is detected between the Tailscale client GUI and the network extension.

iOS

  • See direct vs. relayed connections in the Ping view.
  • View a suggested exit node in the Exit Node picker when available.
  • Use auth keys to log in without using the browser.
  • Search tagged devices by tag in the Devices list.
  • Remove accounts in the Fast User Switching view by using a long press, without having to log out.
  • Improved UI experience to log into a custom coordination server like Headscale.
  • The Fast User Switching view can now be used when Tailscale is disconnected.
  • Improved error detection logic warns the user when a version mismatch is detected between the Tailscale client GUI and the network extension.
  • Reduced app launch time.

tvOS

  • Manage DNS configuration in the DNS Settings view.
  • Generate a bug report identifier by navigating to About Tailscale > Report an issue.
  • Improved error detection logic warns the user when a version mismatch is detected between the Tailscale client GUI and the network extension.

... (truncated)

Commits
  • 88e23b6 VERSION.txt: this is v1.66.1
  • d77499e wgengine/router: print Docker warning when stateful filtering is enabled
  • d904990 util/linuxfw: fix table name in DelStatefulRule
  • b10ee74 cmd/tailscale: add missing set flags for linux
  • 60d8965 util/linuxfw: fix stateful packet filtering in nftables mode
  • e2a0fc0 VERSION.txt: this is v1.66.0
  • 8130656 api.md: remove extraneous commas in json examples
  • 6f4a1dc ipn/ipnlocal: fix another read of keyExpired outside mutex
  • e968b0e cmd/tailscale,controlclient,ipnlocal: fix 'up', deflake tests more
  • e5ef358 ipn/ipnlocal: fix read of keyExpired outside mutex
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 4 months ago

Superseded by #32.