mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
fc7b6e3fb07931fa53b68d4fbffc604ee5270d22
2213 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Jamil
|
aab691a67f |
ci: Release Apple clients 1.4.9 (#8793)
These contain the recent UDP thread enhancements. |
||
|
Jamil
|
743f5fdfeb |
ci: bump clients/gateway to ship write improvements (#8792)
Signed-off-by: Jamil <jamilbk@users.noreply.github.com> Co-authored-by: Thomas Eizinger <thomas@eizinger.io> |
||
|
Thomas Eizinger
|
901207b274 |
chore(rust): remove stale error context (#8787)
Minor oversight from #8783. We accidentally retained this `.context` even though there are now multiple error paths from the `Eventloop`, not just portal connection errors. |
||
|
Thomas Eizinger
|
5ca61a3e3d |
fix(connlib): disable apple-fast-datapath on quinn-udp (#8784)
There appears to be a regression on the most recent MacOS release (15.4) where we can no longer set `src_ip` on outgoing datagrams for IPv6 sockets. In order to unblock the upcoming release, disable the `fast-apple-datapath` feature until we know how to fix it. Related: https://github.com/quinn-rs/quinn/issues/2206 Resolves: #8779 |
||
|
Thomas Eizinger
|
7f5a81cc5a |
chore(rust-ffi): log non-authentication errors on error (#8785)
In the FFI layer, it is tricky to decide what we should do with errors. On the one hand, logging and returning errors is an anti-pattern because it may lead to duplicate logs. In this particular case however, it is useful to log the error on the Rust side because it allows our Sentry integration to capture and include the DEBUG logs prior to this one which may add crucial context. |
||
|
Thomas Eizinger
|
7c2163ddf4 |
fix(connlib): fail event-loops if UDP threads stop (#8783)
The UDP socket threads added in #7590 are designed to never exit. UDP sockets are stateless and therefore any error condition on them should be isolated to sending / receiving a particular datagram. It is however possible that code panics which will shut down the threads irrecoverably. In this unlikely event, `connlib`'s event-loop would keep spinning and spam the log with "UDP socket stopped". There is no good way on how we can recover from such a situation automatically, so we just quit `connlib` in that case and shut everything down. To model this new error path, we refactor the `DisconnectError` to be internally backed by `anyhow`. |
||
|
Thomas Eizinger
|
d693904063 |
chore(connlib): include total length of GSO batch in error msg (#8776)
At present, we assume that we can send datagrams with the full 65535 bytes as the payload. If that were ever to fail, we are going to receive a Sentry alert about it. For that one to be meaningful, include the total length of the batch in the error message. |
||
|
Thomas Eizinger
|
b3746b330f |
refactor(connlib): spawn dedicated threads for UDP sockets (#7590)
Correctly implementing asynchronous IO is notoriously hard. In order to not drop packets in the process, one has to ensure a given socket is ready to accept packets, buffer them if it is not case, suspend everything else until the socket is ready and then continue. Until now, we did this because it was the only option to run the UDP sockets on the same thread as the actual packet processing. That in turn was motivated by wanting to pass around references of the received packets for processing. Rust's borrow-checker does not allow to pass references between threads which forced us to have the sockets on the same thread as the packet processing. Like we already did in other places in `connlib`, this can be solved through the use of buffer pools. Using a buffer pool, we can use heap allocations to store the received packets without having to make a new allocation every time we read new packets. Instead, we can have a dedicated thread that is connected to `connlib`'s packet processing thread via two channels (one for inbound and one for outbound packets). These channels are bounded, which ensures backpressure is maintained in case one of the two threads lags behind. These bounds also mean that we have at most N buffers from the buffer pool in-flight (where N is the capacity of the channel). Within those dedicated threads, we can then use `async/await` notation to suspend the entire task when a socket isn't ready for sending. Resolves: #8000 |
||
|
Thomas Eizinger
|
be897ed6c5 |
chore(gateway): require 4 cores to spawn more TUN threads (#8775)
By default, we spawn 1 TUN send and 1 TUN receive thread on the Gateway. In addition to that, we also have the main processing thread that encrypts and decrypts packets. With #7590, we will be separating out the UDP send and receive operations into yet another thread. As a result, we will have at a minimum 4 threads running that perform IO or important work. Thus, in order to benefit from TUN multi-queue, we need more than 4 cores to be able to efficiently parallelise work. Related: #8769 |
||
|
Thomas Eizinger
|
859aa3cee0 |
feat(connlib): add context to event-loop errors (#8773)
This should make it easier to diagnose any error returned from the event-loop. |
||
|
Thomas Eizinger
|
19d954c76c |
fix(connlib): prioritise GSO batches with smaller segments (#8772)
In order to implement GSO in `connlib`, we opted for an approach where packets of the same length are being appended to a buffer. Each of these buffers is the sent to the kernel in a single syscall, which drastically decreases the per-packet overhead of syscalls and therefore improves performance. Within `connlib` itself, we prioritise control-protocol associated packets over tunnel traffic. The idea here is that even under high-load, we want to ensure that STUN probes between the peers and to the relays are sent in a timely manner. Failing to send these probes results in a false-positive detection of a lost connection because the `connlib`'s internal state uses timeouts to detect such situations. Despite processing the packets itself in a timely manner, it is still possible that they get delayed depending on which order the get flushed to the socket. This order is currently non-deterministic because `GsoQueue` uses a `HashMap` internally and when accessing the batched-together datagrams, we just access it via `iter_mut`. To fix this, we use a `BTreeMap` instead and explicitly define the `Key` to start with the `segment_size` field. As a result, entries within the `BTreeMap` will be sorted ascending by `segment_size` (i.e. the size of individual packets within the batch). Packets of smaller size are more likely to be control messages like STUN binding requests or TURN messages to the relays for managing allocations. By sorting the map explicitly, we ensure that if the UDP socket is ready to send, we flush out these messages first before moving on to bigger packets such as the ones containing (more likely) WireGuard data messages. |
||
|
Thomas Eizinger
|
d560eb00fd |
chore(rust): remove resolved duplicated dependency exclusion (#8766)
We no longer have multiple versions of `tauri-winrt-notification` in our dependency tree and can therefore remove this exclusion rule. To ensure that we don't forget to update these in the future, we now deny the `unnecessary-skip` lint that warns us when we have one of those entries. |
||
|
Thomas Eizinger
|
574bd75ae5 |
build(rust): depend on quinn-udp's main branch (#8763)
The latest `main` of `quinn-udp` includes important patches that will surface errors around dropped packets. |
||
|
Thomas Eizinger
|
e0f94824df |
fix(gateway): default to 1 TUN thread on single-core systems (#8765)
On single-core systems, spawning more than one TUN thread results in contention that hurts performance more than it helps. Resolves: #8760 |
||
|
Thomas Eizinger
|
439da65180 |
chore(connlib): log all tunnel errors on WARN (#8764)
Currently, errors encountered as part of operating the tunnel are non-fatal and only logged on `TRACE` in order to not flood the logs. Recent improvements around how the event loop operates made it such that we actually emit a lot less errors and ideally there should be 0. Therefore we can now employ a much more strict policy and log all errors here on `WARN` in order to get Sentry alerts. |
||
|
Thomas Eizinger
|
132487c29e |
fix(connlib): correctly compute the GSO batch size (#8754)
We are currently naively chunking our buffer into `segment_size * max_gso_segments()`. `max_gso_segments` is by default 64. Assuming we processed several IP packets, this would quickly balloon to a size that the kernel cannot handle. For example, during an `iperf3` run, we receive _a lot_ of packets at maximum MTU size (1280). With the overhead that we are adding to the packet, this results in a UDP payload size of 1320. ``` 1320 x 64 = 84480 ``` That is way too large for the kernel to handle and it will fail the `sendmsg` call with `EMSGSIZE`. Unfortunately, this error wasn't surfaced because `quinn_udp` handles it internally because it can also happen as a result of MTU probes. We've already patched `quinn_udp` in the past to move the handling of more quinn-specific errors to the infallible `send` function. The same is being done for this error in https://github.com/quinn-rs/quinn/pull/2199. Resolves: #8699 |
||
|
Thomas Eizinger
|
289bd35e4c |
feat(connlib): add packet counter metrics (#8752)
This PR adds opentelemetry-based packet counter metrics to `connlib`. By default, the collection of these metrics of disabled. Without a registered metrics-provider, gathering these metrics are effectively no-ops. They will still incur 1 or 2 function calls per packet but that should be negligible compared to other operations such as encryption / decryption. With this system in place, we can in the future add more metrics to make debugging easier. |
||
|
dependabot[bot]
|
245a4d52e9 |
build(deps): bump async-trait from 0.1.83 to 0.1.88 in /rust (#8758)
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.83 to 0.1.88. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/async-trait/releases">async-trait's releases</a>.</em></p> <blockquote> <h2>0.1.88</h2> <ul> <li>Fix lifetime bounding on generic parameters that have cfg (<a href="https://redirect.github.com/dtolnay/async-trait/issues/289">#289</a>)</li> </ul> <h2>0.1.87</h2> <ul> <li>Documentation improvements</li> </ul> <h2>0.1.86</h2> <ul> <li>Documentation improvements</li> </ul> <h2>0.1.85</h2> <ul> <li>Omit <code>Self: 'async_trait</code> bound in impl when not needed by signature (<a href="https://redirect.github.com/dtolnay/async-trait/issues/284">#284</a>)</li> </ul> <h2>0.1.84</h2> <ul> <li>Support <code>impl Trait</code> in return type (<a href="https://redirect.github.com/dtolnay/async-trait/issues/282">#282</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
77de9dcbf1 |
build(deps-dev): bump vite from 6.2.5 to 6.2.6 in /rust/gui-client in the npm_and_yarn group (#8755)
Bumps the npm_and_yarn group in /rust/gui-client with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 6.2.5 to 6.2.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v6.2.6</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->6.2.6 (2025-04-10)<!-- raw HTML omitted --></h2> <ul> <li>fix: reject requests with <code>#</code> in request-target (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>) (<a href=" |
||
|
dependabot[bot]
|
e4f9fd5f29 |
build(deps-dev): bump vite from 6.2.4 to 6.2.5 in /rust/gui-client in the npm_and_yarn group (#8662)
Bumps the npm_and_yarn group in /rust/gui-client with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 6.2.4 to 6.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v6.2.5</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->6.2.5 (2025-04-03)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href=" |
||
|
dependabot[bot]
|
681c3efeca |
build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15 in /rust in the cargo group (#8742)
Bumps the cargo group in /rust with 1 update: [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam). Updates `crossbeam-channel` from 0.5.13 to 0.5.15 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crossbeam-rs/crossbeam/releases">crossbeam-channel's releases</a>.</em></p> <blockquote> <h2>crossbeam-channel 0.5.15</h2> <ul> <li>Fix regression introduced in 0.5.12 that can lead to a double free when dropping unbounded channel. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1187">#1187</a>)</li> </ul> <h2>crossbeam-channel 0.5.14</h2> <ul> <li>Fix stack overflow when sending large value to unbounded channel. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1146">#1146</a>, <a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1147">#1147</a>)</li> <li>Add <code>Select::new_biased</code> function. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1150">#1150</a>)</li> <li>Remove inefficient spinning. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1154">#1154</a>)</li> <li>Suppress buggy <code>clippy::zero_repeat_side_effects</code> lint in macro generated code. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1123">#1123</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
Thomas Eizinger
|
25267b18c8 |
feat(connlib): flush UDP and TUN concurrently (#8737)
Upon each tick of the event loop `connlib` first attempts to flush pending UDP packets to the socket, followed by packets queued for sending out on the TUN device. In case the UDP socket is busy, we suspend the event loop until we can send more packets there. This isn't quite as efficient as we can be. Whilst waiting for the UDP socket, we can still write packets to the TUN device. With this patch, we attempt to do both. In case either of them couldn't quite finish their work, we still return `Poll::Pending` to signal the event loop to suspend, preventing us from accepting more work than we can handle. |
||
|
Thomas Eizinger
|
0a46fdf7b5 |
chore(rust): remove dev stage in Dockerfile (#8688)
We don't ever use the `dev` stage within our Rust Dockerfile that actually builds the binaries within the container. In CI, we build the binaries on the host and then copy them in. During local development, I always do the same because it is much faster to iterate that way. Long story short: We don't need this stage within our Dockerfile and it causes confusion when people try to use `docker compose build`. If somebody really wanted to do that, they need to follow the instructions in the Dockerfile and build the binary first. Related: #8687 --------- Signed-off-by: Thomas Eizinger <thomas@eizinger.io> Co-authored-by: Jamil <jamilbk@users.noreply.github.com> |
||
|
Thomas Eizinger
|
6d6db3346d |
test(connlib): increase grace period for unit test (#8738)
This test appears to be sometimes flaky in CI, likely due to noisy neighbours. |
||
|
Thomas Eizinger
|
6eab29a770 |
feat(connlib): supply multiple buffers to UDP socket (#8733)
At present, `connlib` uses `quinn-udp`'s GRO functionality to read multiple UDP packets within a single syscall. We are however only passing a single buffer and a single `RecvMeta` to the `recv` function. As a result, the function is limited to giving us only packets that originate from one particular IP. By supplying multiple buffers (and their according `RecvMeta`s), we can now read packets from up to 10 different IPs at once within a single syscall. To obtain multiple buffers, we need to split the provided buffer into equal chunks. To ensure that each buffer can still hold several packets, we increase the buffer size to 1MB. It is expected that is increases throughput especially on Gateways which receive UDP packets from many different IPs. --------- Signed-off-by: Thomas Eizinger <thomas@eizinger.io> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> |
||
|
Thomas Eizinger
|
dc92ee7251 |
build(rust): bump hostname dependency (#8729)
This removes yet another duplicate entry of `windows` from our dependency graph. |
||
|
dependabot[bot]
|
c5751d9bb2 |
build(deps): bump @tailwindcss/cli from 4.1.1 to 4.1.3 in /rust/gui-client (#8721)
Bumps [@tailwindcss/cli](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-cli) from 4.1.1 to 4.1.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/releases"><code>@tailwindcss/cli</code>'s releases</a>.</em></p> <blockquote> <h2>v4.1.3</h2> <h3>Fixed</h3> <ul> <li>Show warning when using unsupported bare value data type in <code>--value(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17464">#17464</a>)</li> <li>PostCSS: Ensure changes to the input CSS file don't generate stale output when using Turbopack (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17554">#17554</a>)</li> <li>Ensure classes are detected in Ruby's <code>%w</code> syntax in Slim templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17557">#17557</a>)</li> </ul> <h2>v4.1.2</h2> <h3>Fixed</h3> <ul> <li>Don't rely on the presence of <code>@layer base</code> to polyfill <code>@property</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17506">#17506</a>)</li> <li>Support setting multiple inset shadows as arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17523">#17523</a>)</li> <li>Fix <code>drop-shadow-*</code> utilities that are defined with multiple shadows (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17515">#17515</a>)</li> <li>PostCSS: Fix race condition when two changes are queued concurrently (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>PostCSS: Ensure files containing <code>@tailwind utilities</code> are processed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>Ensure the <code>color-mix(…)</code> polyfill creates fallbacks even when using colors that cannot be statically analyzed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17513">#17513</a>)</li> <li>Fix slow incremental builds with <code>@tailwindcss/vite</code> and <code>@tailwindcss/postscss</code> (especially on Windows) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17511">#17511</a>)</li> <li>Vite: Fix missing CSS file in Qwik setups (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17533">#17533</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md"><code>@tailwindcss/cli</code>'s changelog</a>.</em></p> <blockquote> <h2>[4.1.3] - 2025-04-04</h2> <h3>Fixed</h3> <ul> <li>Show warning when using unsupported bare value data type in <code>--value(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17464">#17464</a>)</li> <li>PostCSS: Ensure changes to the input CSS file don't generate stale output when using Turbopack (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17554">#17554</a>)</li> <li>Ensure classes are detected in Ruby's <code>%w</code> syntax in Slim templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17557">#17557</a>)</li> </ul> <h2>[4.1.2] - 2025-04-03</h2> <h3>Fixed</h3> <ul> <li>Don't rely on the presence of <code>@layer base</code> to polyfill <code>@property</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17506">#17506</a>)</li> <li>Support setting multiple inset shadows as arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17523">#17523</a>)</li> <li>Fix <code>drop-shadow-*</code> utilities that are defined with multiple shadows (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17515">#17515</a>)</li> <li>PostCSS: Fix race condition when two changes are queued concurrently (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>PostCSS: Ensure files containing <code>@tailwind utilities</code> are processed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>Ensure the <code>color-mix(…)</code> polyfill creates fallbacks even when using colors that cannot be statically analyzed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17513">#17513</a>)</li> <li>Fix slow incremental builds with <code>@tailwindcss/vite</code> and <code>@tailwindcss/postscss</code> (especially on Windows) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17511">#17511</a>)</li> <li>Vite: Fix missing CSS file in Qwik setups (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17533">#17533</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
7cfabe8b50 |
build(deps-dev): bump tailwindcss from 4.0.17 to 4.1.3 in /rust/gui-client (#8713)
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) from 4.0.17 to 4.1.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/releases">tailwindcss's releases</a>.</em></p> <blockquote> <h2>v4.1.3</h2> <h3>Fixed</h3> <ul> <li>Show warning when using unsupported bare value data type in <code>--value(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17464">#17464</a>)</li> <li>PostCSS: Ensure changes to the input CSS file don't generate stale output when using Turbopack (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17554">#17554</a>)</li> <li>Ensure classes are detected in Ruby's <code>%w</code> syntax in Slim templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17557">#17557</a>)</li> </ul> <h2>v4.1.2</h2> <h3>Fixed</h3> <ul> <li>Don't rely on the presence of <code>@layer base</code> to polyfill <code>@property</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17506">#17506</a>)</li> <li>Support setting multiple inset shadows as arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17523">#17523</a>)</li> <li>Fix <code>drop-shadow-*</code> utilities that are defined with multiple shadows (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17515">#17515</a>)</li> <li>PostCSS: Fix race condition when two changes are queued concurrently (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>PostCSS: Ensure files containing <code>@tailwind utilities</code> are processed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>Ensure the <code>color-mix(…)</code> polyfill creates fallbacks even when using colors that cannot be statically analyzed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17513">#17513</a>)</li> <li>Fix slow incremental builds with <code>@tailwindcss/vite</code> and <code>@tailwindcss/postscss</code> (especially on Windows) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17511">#17511</a>)</li> <li>Vite: Fix missing CSS file in Qwik setups (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17533">#17533</a>)</li> </ul> <h2>v4.1.1</h2> <h3>Fixed</h3> <ul> <li>Disable padding in <code>@source inline(…)</code> brace expansion (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17491">#17491</a>)</li> <li>Inject polyfills after <code>@import</code> and body-less <code>@layer</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17493">#17493</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> does not contain an import for <code>jiti</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17502">#17502</a>)</li> </ul> <h2>v4.1.0</h2> <h3>Added</h3> <ul> <li>Add <code>details-content</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/15319">#15319</a>)</li> <li>Add <code>inverted-colors</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/11693">#11693</a>)</li> <li>Add <code>noscript</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/11929">#11929</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17431">#17431</a>)</li> <li>Add <code>items-baseline-last</code> and <code>self-baseline-last</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/13888">#13888</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17476">#17476</a>)</li> <li>Add <code>pointer-none</code>, <code>pointer-coarse</code>, and <code>pointer-fine</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/16946">#16946</a>)</li> <li>Add <code>any-pointer-none</code>, <code>any-pointer-coarse</code>, and <code>any-pointer-fine</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/16941">#16941</a>)</li> <li>Add safe alignment utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/14607">#14607</a>)</li> <li>Add <code>user-valid</code> and <code>user-invalid</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/12370">#12370</a>)</li> <li>Add <code>wrap-anywhere</code>, <code>wrap-break-word</code>, and <code>wrap-normal</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/12128">#12128</a>)</li> <li>Add <code>@source inline(…)</code> and <code>@source not inline(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17147">#17147</a>)</li> <li>Add <code>@source not "…"</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17255">#17255</a>)</li> <li>Add <code>text-shadow-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17389">#17389</a>)</li> <li>Add <code>mask-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17134">#17134</a>)</li> <li>Add <code>bg-{position,size}-*</code> utilities for arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17432">#17432</a>)</li> <li>Add <code>shadow-*/<alpha></code>, <code>inset-shadow-*/<alpha></code>, <code>drop-shadow-*/<alpha></code>, and <code>text-shadow-*/<alpha></code> utilities to control shadow opacity (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17398">#17398</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17434">#17434</a>)</li> <li>Add <code>drop-shadow-<color></code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17434">#17434</a>)</li> <li>Improve compatibility with older versions of Safari and Firefox (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17435">#17435</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Follow symlinks when resolving <code>@source</code> directives (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17391">#17391</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">tailwindcss's changelog</a>.</em></p> <blockquote> <h2>[4.1.3] - 2025-04-04</h2> <h3>Fixed</h3> <ul> <li>Show warning when using unsupported bare value data type in <code>--value(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17464">#17464</a>)</li> <li>PostCSS: Ensure changes to the input CSS file don't generate stale output when using Turbopack (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17554">#17554</a>)</li> <li>Ensure classes are detected in Ruby's <code>%w</code> syntax in Slim templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17557">#17557</a>)</li> </ul> <h2>[4.1.2] - 2025-04-03</h2> <h3>Fixed</h3> <ul> <li>Don't rely on the presence of <code>@layer base</code> to polyfill <code>@property</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17506">#17506</a>)</li> <li>Support setting multiple inset shadows as arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17523">#17523</a>)</li> <li>Fix <code>drop-shadow-*</code> utilities that are defined with multiple shadows (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17515">#17515</a>)</li> <li>PostCSS: Fix race condition when two changes are queued concurrently (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>PostCSS: Ensure files containing <code>@tailwind utilities</code> are processed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17514">#17514</a>)</li> <li>Ensure the <code>color-mix(…)</code> polyfill creates fallbacks even when using colors that cannot be statically analyzed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17513">#17513</a>)</li> <li>Fix slow incremental builds with <code>@tailwindcss/vite</code> and <code>@tailwindcss/postscss</code> (especially on Windows) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17511">#17511</a>)</li> <li>Vite: Fix missing CSS file in Qwik setups (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17533">#17533</a>)</li> </ul> <h2>[4.1.1] - 2025-04-02</h2> <h3>Fixed</h3> <ul> <li>Disable padding in <code>@source inline(…)</code> brace expansion (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17491">#17491</a>)</li> <li>Inject polyfills after <code>@import</code> and body-less <code>@layer</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17493">#17493</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> does not contain an import for <code>jiti</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17502">#17502</a>)</li> </ul> <h2>[4.1.0] - 2025-04-01</h2> <h3>Added</h3> <ul> <li>Add <code>details-content</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/15319">#15319</a>)</li> <li>Add <code>inverted-colors</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/11693">#11693</a>)</li> <li>Add <code>noscript</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/11929">#11929</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17431">#17431</a>)</li> <li>Add <code>items-baseline-last</code> and <code>self-baseline-last</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/13888">#13888</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17476">#17476</a>)</li> <li>Add <code>pointer-none</code>, <code>pointer-coarse</code>, and <code>pointer-fine</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/16946">#16946</a>)</li> <li>Add <code>any-pointer-none</code>, <code>any-pointer-coarse</code>, and <code>any-pointer-fine</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/16941">#16941</a>)</li> <li>Add safe alignment utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/14607">#14607</a>)</li> <li>Add <code>user-valid</code> and <code>user-invalid</code> variants (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/12370">#12370</a>)</li> <li>Add <code>wrap-anywhere</code>, <code>wrap-break-word</code>, and <code>wrap-normal</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/12128">#12128</a>)</li> <li>Add <code>@source inline(…)</code> and <code>@source not inline(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17147">#17147</a>)</li> <li>Add <code>@source not "…"</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17255">#17255</a>)</li> <li>Add <code>text-shadow-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17389">#17389</a>)</li> <li>Add <code>mask-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17134">#17134</a>)</li> <li>Add <code>bg-{position,size}-*</code> utilities for arbitrary values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17432">#17432</a>)</li> <li>Add <code>shadow-*/<alpha></code>, <code>inset-shadow-*/<alpha></code>, <code>drop-shadow-*/<alpha></code>, and <code>text-shadow-*/<alpha></code> utilities to control shadow opacity (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17398">#17398</a>, <a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17434">#17434</a>)</li> <li>Add <code>drop-shadow-<color></code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17434">#17434</a>)</li> <li>Improve compatibility with older versions of Safari and Firefox (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17435">#17435</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
ceca664d59 |
build(deps): bump the tauri group in /rust/gui-client with 2 updates (#8708)
Bumps the tauri group in /rust/gui-client with 2 updates: [@tauri-apps/api](https://github.com/tauri-apps/tauri) and [@tauri-apps/cli](https://github.com/tauri-apps/tauri). Updates `@tauri-apps/api` from 2.4.0 to 2.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/api</code>'s releases</a>.</em></p> <blockquote> <h2><code>@tauri-apps/api</code> v2.4.1</h2> <!-- raw HTML omitted --> <pre><code>No known vulnerabilities found </code></pre> <!-- raw HTML omitted --> <h2>[2.4.1]</h2> <h3>Enhancements</h3> <ul> <li><a href=" |
||
|
dependabot[bot]
|
5b8c8eba01 |
build(deps): bump tauri-winrt-notification from 0.7.0 to 0.7.1 in /rust in the tauri group (#8719)
Bumps the tauri group in /rust with 1 update: [tauri-winrt-notification](https://github.com/tauri-apps/winrt-notification). Updates `tauri-winrt-notification` from 0.7.0 to 0.7.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/winrt-notification/releases">tauri-winrt-notification's releases</a>.</em></p> <blockquote> <h2>tauri-winrt-notification v0.7.1</h2> <p>Updating crates.io index Locking 19 packages to latest compatible versions</p> <!-- raw HTML omitted --> <pre><code>Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 734 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (20 crate dependencies) </code></pre> <!-- raw HTML omitted --> <h2>[0.7.1]</h2> <ul> <li><a href=" |
||
|
dependabot[bot]
|
bca500045b |
build(deps): bump humantime from 2.1.0 to 2.2.0 in /rust (#8722)
Bumps [humantime](https://github.com/chronotope/humantime) from 2.1.0 to 2.2.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/chronotope/humantime/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Thomas Eizinger
|
69e9d23560 |
build(rust): bump notify-rust (#8728)
This removes several duplicated versions of `windows` from our dependency tree. |
||
|
Thomas Eizinger
|
e0b834d68b |
chore(rust): remove Cross.toml (#8689)
We no longer use `cross` to build any binaries so this configuration file is now dead code. |
||
|
dependabot[bot]
|
909fa6e812 |
build(deps): bump tauri-plugin-dialog from 2.2.0 to 2.2.1 in /rust (#8683)
Bumps [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) from 2.2.0 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/plugins-workspace/releases">tauri-plugin-dialog's releases</a>.</em></p> <blockquote> <h2>opener-js v2.2.1</h2> <h2>[2.2.1]</h2> <ul> <li><a href=" |
||
|
dependabot[bot]
|
8d0843befd |
build(deps): bump the tauri group in /rust with 4 updates (#8684)
Bumps the tauri group in /rust with 4 updates: [tauri](https://github.com/tauri-apps/tauri), [tauri-build](https://github.com/tauri-apps/tauri), [tauri-runtime](https://github.com/tauri-apps/tauri) and [tauri-utils](https://github.com/tauri-apps/tauri). Updates `tauri` from 2.4.0 to 2.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/tauri/releases">tauri's releases</a>.</em></p> <blockquote> <h2>tauri-runtime-wry v2.4.1</h2> <!-- raw HTML omitted --> <pre><code>Updating git repository `https://github.com/tauri-apps/schemars.git` Updating crates.io index warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph. Check that the patched package version and available features are compatible with the dependency requirements. If the patch has a different version from what is locked in the Cargo.lock file, run `cargo update` to use the new version. This may also occur with an optional dependency that is not enabled. Locking 1015 packages to latest compatible versions Adding apple-codesign v0.27.0 (available: v0.29.0) Adding axum v0.7.9 (available: v0.8.1) Adding colored v2.2.0 (available: v3.0.0) Adding ctor v0.2.9 (available: v0.4.0) Adding getrandom v0.2.15 (available: v0.3.1) Adding html5ever v0.26.0 (available: v0.29.1) Adding itertools v0.13.0 (available: v0.14.0) Adding json-patch v3.0.1 (available: v4.0.0) Adding minisign v0.7.3 (available: v0.7.9) Adding oxc_allocator v0.36.0 (available: v0.53.0) Adding oxc_ast v0.36.0 (available: v0.53.0) Adding oxc_parser v0.36.0 (available: v0.53.0) Adding oxc_span v0.36.0 (available: v0.53.0) Adding proc-macro-crate v2.0.0 (available: v2.0.2) Adding rand v0.8.5 (available: v0.9.0) Adding serialize-to-javascript v0.1.1 (available: v0.1.2) Adding serialize-to-javascript-impl v0.1.1 (available: v0.1.2) Adding tauri-utils v1.6.0 (available: v1.6.2) Adding tiny_http v0.11.0 (available: v0.12.0) Adding x509-certificate v0.23.1 (available: v0.24.0) Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 734 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1040 crate dependencies) Crate: atk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0413 URL: https://rustsec.org/advisories/RUSTSEC-2024-0413 Dependency tree: atk 0.18.2 └── gtk 0.18.2 ├── wry 0.50.1 │ └── tauri-runtime-wry 2.4.1 │ └── tauri 2.3.1 </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
73419e614c |
build(deps): bump ring from 0.17.13 to 0.17.14 in /rust (#8685)
Bumps [ring](https://github.com/briansmith/ring) from 0.17.13 to 0.17.14. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/briansmith/ring/blob/main/RELEASES.md">ring's changelog</a>.</em></p> <blockquote> <h1>Version 0.17.14 (2025-03-11)</h1> <p>Fixed a performance bug in the AVX2-based AES-GCM implementation added in <em>ring</em> 0.17.13. This will be another notable performance improvement for most newish x86-64 systems. The performance issue impacted not just AES-GCM.</p> <p>Compatibility with GNU binutils 2.29 (used on Amazon Linux 2), and probably even earlier versions, was restored. It is expected that <em>ring</em> 0.17.14 will build on all the systems that 0.17.12 would build on.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/briansmith/ring/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
fece33ed38 |
build(deps): bump tokio from 1.43.0 to 1.44.2 in /rust in the cargo group (#8692)
Bumps the cargo group in /rust with 1 update: [tokio](https://github.com/tokio-rs/tokio). Updates `tokio` from 1.43.0 to 1.44.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.44.2</h2> <p>This release fixes a soundness issue in the broadcast channel. The channel accepts values that are <code>Send</code> but <code>!Sync</code>. Previously, the channel called <code>clone()</code> on these values without synchronizing. This release fixes the channel by synchronizing calls to <code>.clone()</code> (Thanks Austin Bonander for finding and reporting the issue).</p> <h3>Fixed</h3> <ul> <li>sync: synchronize <code>clone()</code> call in broadcast channel (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7232">#7232</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7232">#7232</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7232">tokio-rs/tokio#7232</a></p> <h2>Tokio v1.44.1</h2> <h1>1.44.1 (March 13th, 2025)</h1> <h3>Fixed</h3> <ul> <li>rt: skip defer queue in <code>block_in_place</code> context (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7216">#7216</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7216">#7216</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7216">tokio-rs/tokio#7216</a></p> <h2>Tokio v1.44.0</h2> <h1>1.44.0 (March 7th, 2025)</h1> <p>This release changes the <code>from_std</code> method on sockets to panic if a blocking socket is provided. We determined this change is not a breaking change as Tokio is not intended to operate using blocking sockets. Doing so results in runtime hangs and should be considered a bug. Accidentally passing a blocking socket to Tokio is one of the most common user mistakes. If this change causes an issue for you, please comment on <a href="https://redirect.github.com/tokio-rs/tokio/issues/7172">#7172</a>.</p> <h3>Added</h3> <ul> <li>coop: add <code>task::coop</code> module (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7116">#7116</a>)</li> <li>process: add <code>Command::get_kill_on_drop()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7086">#7086</a>)</li> <li>sync: add <code>broadcast::Sender::closed</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/6685">#6685</a>, <a href="https://redirect.github.com/tokio-rs/tokio/issues/7090">#7090</a>)</li> <li>sync: add <code>broadcast::WeakSender</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7100">#7100</a>)</li> <li>sync: add <code>oneshot::Receiver::is_empty()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7153">#7153</a>)</li> <li>sync: add <code>oneshot::Receiver::is_terminated()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7152">#7152</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>fs: empty reads on <code>File</code> should not start a background read (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7139">#7139</a>)</li> <li>process: calling <code>start_kill</code> on exited child should not fail (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7160">#7160</a>)</li> <li>signal: fix <code>CTRL_CLOSE</code>, <code>CTRL_LOGOFF</code>, <code>CTRL_SHUTDOWN</code> on windows (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7122">#7122</a>)</li> <li>sync: properly handle panic during mpsc drop (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7094">#7094</a>)</li> </ul> <h3>Changes</h3> <ul> <li>runtime: clean up magic number in registration set (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7112">#7112</a>)</li> <li>coop: make coop yield using waker defer strategy (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7185">#7185</a>)</li> <li>macros: make <code>select!</code> budget-aware (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7164">#7164</a>)</li> <li>net: panic when passing a blocking socket to <code>from_std</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7166">#7166</a>)</li> <li>io: clean up buffer casts (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7142">#7142</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
Thomas Eizinger
|
07a82d2254 |
chore(relay): remove feature flag for eBPF TURN router (#8681)
The original idea of this feature flag was that we can easily disable the eBPF router in case it causes issues in production. However, something seems to be not working in reliably turning this on / off. Without an explicit toggle of the feature-flag, the eBPF program doesn't seem to be loaded correctly. The uncertainty in this makes me not the trust the metrics that we are seeing because we don't know, whether really all relays are using the eBPF router to relay TURN traffic. In order to draw truthful conclusions as too how much traffic we are relaying via eBPF, this patch removes the feature flag again. As of #8656, we can disable the eBPF program by not setting the `EBPF_OFFLOADING` env variable. This requires a re-deploy / restart of relays to take effect which isn't quite as fast as toggling a feature flag but much reliable and easier to maintain. |
||
|
Thomas Eizinger
|
391e94ebed |
fix(relay): set a Firezone ID to enable feature-flags (#8657)
Our feature-flags are currently coupled to our Firezone ID. Without a Firezone ID, we cannot evaluate feature flags. In order to be able to use the feature flags to enable / disable the eBPF TURN router, we see a random UUID as the Firezone ID upon startup of the relay. Not setting this causes the eBPF router to currently be instantly disabled as soon as we start up because the default of the feature flag is false and we don't reevaluate it later due to the missing ID. |
||
|
Thomas Eizinger
|
6fe7e77f76 |
refactor(relay): fail if eBPF offloading is requested but fails (#8656)
It happens a bunch of times to me during testing that I'd forget to set the right interface onto which the eBPF kernel should be loaded and was wondering why it didn't work. Defaulting to `eth0` wasn't a very smart decision because it means users cannot disable the eBPF kernel at all (other than via the feature-flag). It makes more sense to default to not loading the program at all AND hard-fail if we are requested to load it but cannot. This allows us to catch configuration errors early. |
||
|
Thomas Eizinger
|
cd94dd8a2c | fix(relay): update cached eBPF config when it changes (#8655) | ||
|
Thomas Eizinger
|
941ef6c668 |
feat(relay): introduce feature-flag for toggling eBPF program (#8650)
This PR implements a feature-flag in PostHog that we can use to toggle the use of the eBPF data plane at runtime. At every tick of the event-loop, the relay will compare the (cached) configuration of the eBPF program with the (cached) value of the feature-flag. If they differ, the flag will be updated and upon the next packet, the eBPF program will act accordingly. Feature-flags are re-evaluated every 5 minutes, meaning there is some delay until this gets applied. The default value of our all our feature-flags is `false`, meaning if there is some problem with evaluating them, we'd turn the eBPF data plane off. Performing routing in userspace is slower but it is a safer default. Resolves: #8548 |
||
|
Thomas Eizinger
|
f0a6367c7f |
refactor(eBPF): rename slice_mut_at module (#8634)
The name `slice_mut_at` came from a time where this function actually returned a slice of bytes. It has since been refactored to return a mutable reference to a type T that gets set by the caller. Thus, `ref_mut_at` is a much more fitting name. |
||
|
Thomas Eizinger
|
3ce3c03291 |
fix(telemetry): introduce staging and prod PostHog projects (#8647)
As per PostHog's recommendation [0], we now use different projects to manage the feature-flags. This allows us to turn feature flags in staging or production on / off without affecting the other. [0]: https://posthog.com/tutorials/multiple-environments |
||
|
Thomas Eizinger
|
ebb71e0f54 |
fix(relay): increase page size for metrics to 4096 (#8646)
The default here is 2 which is nowhere near enough of a batch-size for us to read all perf events generated by the kernel when it is actually relaying data via eBPF (we generate 1 perf event per relayed packet). If we don't read them fast enough, the kernel has to drop some, meaning we skew our metrics as to how much data we've relayed via eBPF. This has been tested in my local setup and I've seen north of 500 events being read in a single batch now. --------- Signed-off-by: Thomas Eizinger <thomas@eizinger.io> |
||
|
dependabot[bot]
|
818b97a3a6 |
build(deps): bump flowbite from 3.1.1 to 3.1.2 in /rust/gui-client (#8579)
Bumps [flowbite](https://github.com/themesberg/flowbite) from 3.1.1 to 3.1.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/themesberg/flowbite/releases">flowbite's releases</a>.</em></p> <blockquote> <h2>v3.1.2</h2> <ul> <li>create new theme file to move CSS variables</li> <li>update quickstart guide to reflect this change</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
a532d6033c |
build(deps): bump @tailwindcss/cli from 4.0.9 to 4.0.17 in /rust/gui-client (#8575)
Bumps [@tailwindcss/cli](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-cli) from 4.0.9 to 4.0.17. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/releases"><code>@tailwindcss/cli</code>'s releases</a>.</em></p> <blockquote> <h2>v4.0.17</h2> <h3>Fixed</h3> <ul> <li>Fix an issue causing the CLI to hang when processing Ruby files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17383">#17383</a>)</li> </ul> <h2>v4.0.16</h2> <h3>Added</h3> <ul> <li>Add support for literal values in <code>--value('…')</code> and <code>--modifier('…')</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17304">#17304</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix class extraction followed by <code>(</code> in Pug (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17320">#17320</a>)</li> <li>Ensure <code>@keyframes</code> for theme animations are emitted if they are referenced following a comma (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17352">#17352</a>)</li> <li>Vite: Ensure that updates to an imported CSS file are properly propagated after updating source files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17347">#17347</a>)</li> <li>Pre process <code>Slim</code> templates embedded in Ruby files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17336">#17336</a>)</li> <li>Error when input and output files resolve to the same file when using the CLI (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17311">#17311</a>)</li> <li>Add missing suggestions when <code>--spacing(--value(integer, number))</code> is used (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17308">#17308</a>)</li> <li>Add <code>::-webkit-details-marker</code> pseudo to <code>marker</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17362">#17362</a>)</li> </ul> <h2>v4.0.15</h2> <h3>Fixed</h3> <ul> <li>Fix incorrect angle in <code>-bg-conic-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17174">#17174</a>)</li> <li>Fix <code>border-[12px_4px]</code> being interpreted as a <code>border-color</code> instead of a <code>border-width</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17248">#17248</a>)</li> <li>Work around a crash in Safari 16.4 and 16.5 when using the default Preflight styles (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17306">#17306</a>)</li> <li>Pre-process <code>\<template lang="…"></code> in Vue files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17252">#17252</a>)</li> <li>Ensure that all CSS variables used by Preflight are prefixed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17036">#17036</a>)</li> <li>Prevent segfault when loaded in a worker thread on Linux (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17276">#17276</a>)</li> <li>Ensure multiple <code>--value(…)</code> or <code>--modifier(…)</code> calls don't delete subsequent declarations (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17273">#17273</a>)</li> <li>Fix class extraction followed by <code>(</code> in Slim (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17278">#17278</a>)</li> <li>Export <code>PluginUtils</code> from <code>tailwindcss/plugin</code> for compatibility with v3 (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17299">#17299</a>)</li> <li>Remove redundant <code>line-height: initial</code> from Preflight (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/15212">#15212</a>)</li> <li>Increase Standalone hardware compatibility on macOS x64 builds (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17267">#17267</a>)</li> <li>Ensure that the CSS file rebuilds if a new CSS variable is used from templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17301">#17301</a>)</li> </ul> <h3>Changed</h3> <ul> <li>The <code>--theme(…)</code> function now returns CSS variables from your theme variables unless used inside positions where CSS variables are invalid (e.g. inside <code>@media</code> queries) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17036">#17036</a>)</li> </ul> <h2>v4.0.14</h2> <h3>Fixed</h3> <ul> <li>Do not extract candidates with JS string interpolation <code>${</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17142">#17142</a>)</li> <li>Fix extraction of variants containing <code>.</code> character (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17153">#17153</a>)</li> <li>Fix extracting candidates in Clojure/ClojureScript (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17087">#17087</a>)</li> </ul> <h2>v4.0.13</h2> <h3>Fixed</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md"><code>@tailwindcss/cli</code>'s changelog</a>.</em></p> <blockquote> <h2>[4.0.17] - 2025-03-26</h2> <h3>Fixed</h3> <ul> <li>Fix an issue causing the CLI to hang when processing Ruby files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17383">#17383</a>)</li> </ul> <h2>[4.0.16] - 2025-03-25</h2> <h3>Added</h3> <ul> <li>Add support for literal values in <code>--value('…')</code> and <code>--modifier('…')</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17304">#17304</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix class extraction followed by <code>(</code> in Pug (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17320">#17320</a>)</li> <li>Ensure <code>@keyframes</code> for theme animations are emitted if they are referenced following a comma (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17352">#17352</a>)</li> <li>Vite: Ensure that updates to an imported CSS file are properly propagated after updating source files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17347">#17347</a>)</li> <li>Pre process <code>Slim</code> templates embedded in Ruby files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17336">#17336</a>)</li> <li>Error when input and output files resolve to the same file when using the CLI (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17311">#17311</a>)</li> <li>Add missing suggestions when <code>--spacing(--value(integer, number))</code> is used (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17308">#17308</a>)</li> <li>Add <code>::-webkit-details-marker</code> pseudo to <code>marker</code> variant (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17362">#17362</a>)</li> </ul> <h2>[4.0.15] - 2025-03-20</h2> <h3>Fixed</h3> <ul> <li>Fix incorrect angle in <code>-bg-conic-*</code> utilities (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17174">#17174</a>)</li> <li>Fix <code>border-[12px_4px]</code> being interpreted as a <code>border-color</code> instead of a <code>border-width</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17248">#17248</a>)</li> <li>Work around a crash in Safari 16.4 and 16.5 when using the default Preflight styles (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17306">#17306</a>)</li> <li>Pre-process <code>\<template lang="…"></code> in Vue files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17252">#17252</a>)</li> <li>Ensure that all CSS variables used by Preflight are prefixed (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17036">#17036</a>)</li> <li>Prevent segfault when loaded in a worker thread on Linux (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17276">#17276</a>)</li> <li>Ensure multiple <code>--value(…)</code> or <code>--modifier(…)</code> calls don't delete subsequent declarations (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17273">#17273</a>)</li> <li>Fix class extraction followed by <code>(</code> in Slim (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17278">#17278</a>)</li> <li>Export <code>PluginUtils</code> from <code>tailwindcss/plugin</code> for compatibility with v3 (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17299">#17299</a>)</li> <li>Remove redundant <code>line-height: initial</code> from Preflight (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/15212">#15212</a>)</li> <li>Increase Standalone hardware compatibility on macOS x64 builds (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17267">#17267</a>)</li> <li>Ensure that the CSS file rebuilds if a new CSS variable is used from templates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17301">#17301</a>)</li> </ul> <h3>Changed</h3> <ul> <li>The <code>--theme(…)</code> function now returns CSS variables from your theme variables unless used inside positions where CSS variables are invalid (e.g. inside <code>@media</code> queries) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17036">#17036</a>)</li> </ul> <h2>[4.0.14] - 2025-03-13</h2> <h3>Fixed</h3> <ul> <li>Do not extract candidates with JS string interpolation <code>${</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17142">#17142</a>)</li> <li>Fix extraction of variants containing <code>.</code> character (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17153">#17153</a>)</li> <li>Fix extracting candidates in Clojure/ClojureScript (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/17087">#17087</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
Thomas Eizinger
|
dce5ab9178 | build(deps): bump Rust to 1.86 (#8636) | ||
|
dependabot[bot]
|
b318dd060f |
build(deps): bump tauri-plugin-shell from 2.2.0 to 2.2.1 in /rust in the cargo group (#8625)
Bumps the cargo group in /rust with 1 update: [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace). Updates `tauri-plugin-shell` from 2.2.0 to 2.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/plugins-workspace/releases">tauri-plugin-shell's releases</a>.</em></p> <blockquote> <h2>opener-js v2.2.1</h2> <h2>[2.2.1]</h2> <ul> <li><a href=" |
||
|
Jamil
|
27a1d59451 |
chore(relay): Add xdp-tools debug Docker image build script (#8591)
This contains useful utilities like `xdpdump` which can be used on the Relays to debug eBPF codepaths. Build this on the Relays themselves can take prohibitively long, so this image has been pushed to `us-east1-docker.pkg.dev/firezone-staging/firezone/xdp-tools:latest`. |