go.mod, flake.nix: bump dependencies for v0.29.0#3274
Merged
Conversation
kradalby
requested review from
juanfont,
nblock and
ohdearaugustin
as code owners
juanfont
approved these changes
May 20, 2026
nblock
approved these changes
May 20, 2026
Refresh direct deps (tailscale v1.98.1, modernc.org/sqlite v1.50.1 + libc v1.72.3 lockstep, otel cluster v1.43.0, x/* family, pgx v5.9.2, go-jose v3.0.5, grpc v1.81.1, grpc-gateway v2.29.0) and bulk-update remaining direct deps. tailscale held at v1.98.1 since v1.98.2 demands go 1.26.3 which nixpkgs unstable does not yet ship.
nixpkgs: bump unstable revision. Pinned tools: grpc-gateway 2.28.0 -> 2.29.0 (matches the Go dep), golangci-lint 2.11.4 -> 2.12.2. Disable gomodguard in .golangci.yaml since 2.12 deprecated it.
Bump golang to 1.26.3, alpine to 3.23, rust to 1.95 across the integration, derper, tailscale-HEAD, and tailscale-rs Dockerfiles.
kradalby
force-pushed
the
deps/update-go-deps
branch
from
884b015 to
1a714d7
Compare
Regenerate capver for tailscale v1.98 — `MinSupportedCapabilityVersion` slides 109 → 113 (v1.78 → v1.80). v1.80+ clients understand `Node.HomeDERP`, which superseded `LegacyDERPString` upstream at capver 111. Drops the emit, plumbing, the trip-wire that caught this cleanup, the golden test fixtures, and the integration check on `peer.LegacyDERPString()` — the sibling `HomeDERP` check covers intent. `v1.98` was added by hand to `capver_generated.go` because tailscale skipped publishing v1.97/v1.98 to ghcr until late in the cycle; a clean regeneration produces the same content.
Reflects the capver floor move from 109 (v1.78) to 113 (v1.80) that ships with this release.
kradalby
force-pushed
the
deps/update-go-deps
branch
from
1a714d7 to
2eb74ee
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pre-release dep refresh for v0.29.0. Bumps Go modules, the Nix flake (
nixpkgsrevision plus pinnedgrpc-gatewayandgolangci-lint), and Dockerfile base images (golang1.26.3,alpine3.23,rust1.95).tailscale.comheld atv1.98.1sincev1.98.2raised the go directive to1.26.3, which nixpkgs unstable does not yet ship; bump again once it does.gomodguarddisabled in.golangci.yamlbecausegolangci-lint2.12 deprecated it.modernc.org/sqlite+modernc.org/libcandtailscale.com+gvisor.dev/gvisorbumped in lockstep per the notes ingo.mod.github.com/jackc/pgx/v5lifted to5.9.2, past the5.9.0fix for CVE-2026-33816.Updates #3273
Closes #3275
Closes #3215
Closes #3214
Closes #3209
Closes #3208
Closes #3207
Closes #2989