firezone

• revert(devops): Revert healthcommands @jamilbk (#3280)
• revert(ci): Revert Dockerfile to use alpine&musl @jamilbk (#3279)
• fix(ci): Revert runtime to musl @jamilbk (#3278)
• Do not refresh access token when refresh token is invalid @AndrewDryga (#3275)
• fix(ci): Be explicit about which Docker platforms to pull and push for @jamilbk (#3276)
• chore(portal): Fix resources UX @AndrewDryga (#3267)
• fix(apple): Reset cached system resolvers while tunnel is reasserting @jamilbk (#3274)
• fix(rust): Use -n for POSIX shells to handle building for different TARGETs @jamilbk (#3270)
• fix(portal): Fix auth redirect and test client auth using acceptance tests @AndrewDryga (#3269)
• feat(connection-tests): dynamically discover network interfaces @thomaseizinger (#3241)
• fix(gateway): Fix gateway systemd command for non-bash shells @jamilbk (#3264)
• fix(windows): when the token expires, change the GUI to signed-out state @ReactorScram (#3142)
• refactor(portal): Implement rest of TODOs after token refactoring @AndrewDryga (#3160)
• fix(devops): Use webpki roots instead of OS cert store @jamilbk (#3266)
• fix(devops): Fix shellcheck errors for docker-init.sh script @jamilbk (#3265)
• fix(ci): shell is dash on debian slim @jamilbk (#3261)
• fix(portal): dump smtp tls_options correctly @Intuinewin (#3214)
• feat(Windows): #2998, add 'signing in' state to system tray menu @ReactorScram (#3157)
• fix(ci): Use a new branch name to merge (GitHub merge bug?) @jamilbk (#3255)
• fix(ci): Fix target another time @jamilbk (#3254)
• fix(ci): Target specifier @jamilbk (#3253)
• fix(ci): Target specifier @jamilbk (#3252)
• fix(rust): Check /proc for health checks @jamilbk (#3250)
• Revert "build(deps): Bump tokio-tungstenite from 0.20.1 to 0.21.0 in /rust" @jamilbk (#3248)
• fix(rust): Fix continuous deployments targets to use gnu target @jamilbk (#3247)
• fix(apple): Persist Firezone ID to disk instead of using hardware tracking methods @jamilbk (#3244)
• feat(ci): Add e2e test bed @jamilbk (#3135)
• fix(connlib): Use debian:12-slim for Rust base image @jamilbk (#3243)
• fix(connection): set a Connections remote-socket from WG activity @thomaseizinger (#3245)
• fix(connlib): Fix getSystemDefaultResolvers while tunnel session is active @jamilbk (#3236)
• feat(windows): implement Clear Logs, closes #3224 @ReactorScram (#3237)
• docs(website): Document session lifetimes @jamilbk (#3197)
• feat(portal): add Kubernetes cluster strategy support @Intuinewin (#3212)
• fix(portal): Honour "as" option when fetching subject @AndrewDryga (#3234)
• chore(windows): Use version from Cargo toml to support automatic versioning @jamilbk (#3231)
• feat(windows): Add Windows iconset @jamilbk (#3225)
• chore(connlib): fix clippy warning @thomaseizinger (#3227)
• fix(windows): Remove exec perms on Windows files @jamilbk (#3223)
• fix(website): Improve text legibility @jamilbk (#3222)
• chore(deps): Bump terraform google dependencies as a group @jamilbk (#3202)
• ci(windows): add SHA256 hashes for artifacts @ReactorScram (#3201)
• chore(deps): Bump com.android libs and set dependabot group @jamilbk (#3199)
• fix(android): Don't minify release build @jamilbk (#3218)
• feat(devops): Add AWS VPC terraform @bmanifold (#3216)
• fix(android): Simplify connlib gradle build configuration to ensure libconnlib.so is packaged @jamilbk (#3207)
• fix(connlib): Differentiate between 4xx and other portal errors in log message @jamilbk (#3203)
• fix(android): Assemble release before bundling @jamilbk (#3206)
• chore(android): Remove outdated appDistribution group @jamilbk (#3204)
• fix(gateway): Use sudo tee instead of sudo cat to write files as root @jamilbk (#3177)
• connlib: only get system dns servers on session connect @conectado (#3198)
• feat(windows): use ProgramData to store device ID instead of per-user… @ReactorScram (#3172)
• chore(deps): Group netlink dependabot updates @jamilbk (#3169)
• fix(portal): Allow IdP setting errors to be shown in portal @bmanifold (#3165)
• feat(windows): When the tunnel is ready, show a notification @ReactorScram (#3166)
• docs(website): Publish January 2024 product newsletter @jamilbk (#3171)
• fix(portal): Increase receive timeout to alleviate test flakiness @jamilbk (#3168)
• refactor(connlib): Remove unused on_error callback @jamilbk (#3162)
• fix(portal): Add page_title to all portal pages @bmanifold (#3154)
• feat(windows): switch to the new auth flow per #2823 @ReactorScram (#3147)
• Redirect to deep link when user is already signed in @AndrewDryga (#3156)
• fix(portal): Remove token provider and implement separate flow for service accounts @AndrewDryga (#3146)
• fix(gateway): Fix masquerading iptables command @jamilbk (#3151)
• fix(android): handle_sign_in_callback is the host part of the URI @jamilbk (#3149)
• connlib: fix wildcard checking in gateways @conectado (#3148)
• feat(windows): log Git version used to build the client @ReactorScram (#3144)
• swift: fix typo in url scheme @conectado (#3145)
• fix(connlib): mangle packet for upstream dns as resource @conectado (#3134)
• feat(windows): new module to listen for network changes @ReactorScram (#3137)
• fix(gateway): Use sudo to write files @jamilbk (#3143)
• security(portal): Rework auth tokens @AndrewDryga (#2696)
• refactor(android): Remove AppLink in favor of nonce+state @jamilbk (#2826)
• fix(ci): overcommit_memory=1 for redis tests @jamilbk (#3139)
• refactor(apple): Use nonce+state when authenticating @roop (#2896)
• fix(ci): Use pre-releases when calculating changelog @jamilbk (#3138)
• wip(windows): make sure app panics show up in the logs @ReactorScram (#3085)
• fix(gateway): Fix systemd gateways on SELinux-enabled distros and improve systemd gateway UX @jamilbk (#3127)
• fix(portal): Update portal font to source sans 3 @bmanifold (#3106)
• fix(portal): Add help text for DNS resources @jamilbk (#3130)
• fix(portal): Add plan badge to edit Site @jamilbk (#3129)
• fix(Apple): Attempt to fix window selectedness of the authentication webview @roop (#3126)
• fix(windows): add routes faster @ReactorScram (#3118)
• fix(windows): set the tunnel's IPv6 address correctly with netsh so IPv6 tunnelling works @ReactorScram (#3120)
• fix(windows): set MTU for IPv6 too @ReactorScram (#3121)
• feat(windows): implement export logs as zip @ReactorScram (#3009)
• refactor(portal): Use ghcr.io for public pulls of prod images @jamilbk (#3105)
• fix(staging): Update demo access @jamilbk (#3116)
• feat(connlib): wildcard matching dns @conectado (#3109)
• fix(portal): Fix lost client auth state for OIDC redirects @AndrewDryga (#3273)
• fix(portal): Stop storing client tokens in sessions @AndrewDryga (#3272)

🧰 Maintenance

• build(deps): Bump redis from 0.23.3 to 0.24.0 in /rust @dependabot (#2864)
• build(deps): Bump phoenix_html from 3.3.3 to 4.0.0 in /elixir @dependabot (#3219)
• build(deps): Bump tokio-tungstenite from 0.20.1 to 0.21.0 in /rust @dependabot (#3191)
• chore(deps): bump base64 from 0.21.6 to 0.21.7 in /rust @dependabot (#3228)
• chore(deps): bump axum from 0.6.20 to 0.7.3 in /rust @dependabot (#3068)
• build(deps): Bump phoenix_swoosh from 1.2.0 to 1.2.1 in /elixir @dependabot (#3193)
• build(deps): Bump phoenix_live_view from 0.20.2 to 0.20.3 in /elixir @dependabot (#3194)
• build(deps-dev): Bump credo from 1.7.2 to 1.7.3 in /elixir @dependabot (#3195)
• build(deps-dev): Bump mix_audit from 2.1.1 to 2.1.2 in /elixir @dependabot (#3196)
• build(deps): Bump @types/react from 18.2.46 to 18.2.47 in /website @dependabot (#3183)
• build(deps): Bump postcss from 8.4.32 to 8.4.33 in /website @dependabot (#3187)
• build(deps): Bump @types/node from 20.10.6 to 20.11.0 in /website @dependabot (#3185)
• build(deps): Bump fast-xml-parser from 4.3.2 to 4.3.3 in /website @dependabot (#3189)
• build(deps): Bump react-icons from 4.12.0 to 5.0.1 in /website @dependabot (#3192)
• build(deps): Bump clap from 4.4.11 to 4.4.13 in /rust @dependabot (#3136)
• build(deps): Bump itertools from 0.11.0 to 0.12.0 in /rust @dependabot (#2679)

• fix(windows): set MTU on tunnel interface @ReactorScram (#2990)
• fix(ci): Fix artifact name typo @jamilbk (#3108)
• fix(ci): Merge digests for same image name and different archs only @jamilbk (#3107)
• refactor(connlib): Rename ip var name to proxy_ip @conectado (#3104)
• fix(ios/android): Pass device name and os version as overrides over connect @jamilbk (#3036)
• fix(ci): Use path subdirs for artifacts @jamilbk (#3103)
• chore(docs): Remove outdated rust/connlib/README.md info @jamilbk (#3099)
• fix(connlib): never delete allowed ips for a peer given dns @conectado (#3096)
• fix(ci): Add merge_multiple to fix artifact naming. @jamilbk (#3100)
• fix(apple): In case tunnel crashes, try to reconnect @roop (#3097)
• fix(apple): Fix potential race condition when updating login status @roop (#3098)
• fix(ci): Use pattern key @jamilbk (#3095)
• chore(website): remove PostHog in favor of Mixpanel @jamilbk (#3033)
• chore(deps): Bump website deps @jamilbk (#3092)
• fix(ci): Fix upload-artifact workflow artifact name @jamilbk (#3093)
• wip(windows): impl get_host_name @ReactorScram (#3089)
• fix(ci): Use unique name for artifacts @jamilbk (#3091)
• feat(windows): show whether files are still being counted @ReactorScram (#3007)
• Add more in-portal documentation and empty table state context @jamilbk (#2984)
• fix(portal): Improve OIDC usability and fix unexpected Mint.TransportError causing crash @jamilbk (#3049)
• fix(gateway): Fallback to get_hostname() for systemd deployments @jamilbk (#3029)
• chore(deps): Bump hilt and fix groups @jamilbk (#3081)
• chore(ci): clean up workflows @jamilbk (#3039)
• feat(ci): Architect e2e test suite @jamilbk (#3043)
• refactor(apple): guard packetTunnelProvider in one place @jamilbk (#3013)
• chore(ci): Lint Android readme @jamilbk (#3038)
• include detail about toolchain in README.md @jasonboukheir (#3020)
• Use linux-* for public binary asset names @jamilbk (#3032)
• Log a better error on flow auth function clause error @AndrewDryga (#3031)
• chore(ci): Rename client to linux-client on releases @jamilbk (#3019)
• Revert "fix(ci): Inherit secrets from calling workflow to allow contributors' PRs to run" @jamilbk (#3030)
• fix(ci): Inherit secrets from calling workflow to allow contributors' PRs to run @jamilbk (#3028)
• Update email provider settings in TF to use Mailgun @bmanifold (#2978)
• feat(website): Add FAQ @jamilbk (#3021)
• chore(website): Update team @jamilbk (#3018)
• chore(docs): bump deps, minor grammar fixes @jamilbk (#3011)
• fix(apple): Temporarily set matchDomains when tunnel is reasserting @jamilbk (#3012)
• docs(windows): Update windows client README with more developer setup instructions @jamilbk (#2993)
• feat: introduce firezone-connection with basic test suite @thomaseizinger (#2965)
• fix(windows): app title in Task Manager @ReactorScram (#3003)
• refactor(windows): remove ResourceDisplay @ReactorScram (#3002)
• fix(connlib): move .log to the end of log filenames @ReactorScram (#3008)
• refactor(windows): break apart 'run_controller' into smaller handlers… @ReactorScram (#2988)
• fix(apple): Get DNS working reliably when no upstream is configured @jamilbk (#3001)
• refactor(connlib): refresh dns addresses @conectado (#2994)
• security(connlib): Dont allow acces to non-subdomains for a given resource @conectado (#2996)
• fix(rust): Incorrect perms on rust/ files @jamilbk (#2991)
• connlib: add arch and kernel version to user agent @conectado (#2987)
• feat(windows): add DLL for aarch64 but don't run it in CI/CD @ReactorScram (#2989)
• refactor(windows): don't block connlib callbacks @ReactorScram (#2960)
• Fix/lost connection request @conectado (#2976)
• connlib: tune disconnect parameters @conectado (#2977)
• Add ability to email new user after creation @bmanifold (#2957)
• security(gateway): Don't run systemd gateways as root @jamilbk (#2943)
• Rename Authorizations -> Activity @jamilbk (#2979)
• Remove client names unique constraint @AndrewDryga (#2982)
• Add link to status on website @jamilbk (#2974)
• fix(windows): give the encrypted credential a unique name @ReactorScram (#2972)
• feat(windows): count log files @ReactorScram (#2964)
• ci(windows): fix build-push-windows-release-artifacts @ReactorScram (#2973)
• fix(windows): make sure the worker thread for wintun shuts down cleanly @ReactorScram (#2971)
• feat(windows): Handle routes and DNS @ReactorScram (#2889)
• docs(website): Clarify note on legacy support @jamilbk (#2968)
• Apple: UI asking user to grant VPN permissions @roop (#2959)
• refactor(windows): extract modules from gui module @ReactorScram (#2961)
• fix(windows): copy default debug and release settings from Android @ReactorScram (#2963)
• refactor(windows): fix up MSI installer package and try to build it in CI @ReactorScram (#2938)
• fix(windows): disconnect tunnel on sign-out @ReactorScram (#2932)
• connlib: dont fail on ipv6 add route failure @conectado (#2962)
• connlib: prevent resource leak for non-handled record types @conectado (#2955)
• refactor(connlib): log more details about failed queries @conectado (#2934)
• Fix/firezone id handling @conectado (#2958)
• Fix java method signature bug @jamilbk (#2950)
• chore(ci): Use 1.0.0 as version base @jamilbk (#2949)
• feat(windows): Elevate with UAC automatically on startup @ReactorScram (#2913)
• refactor(windows): remove unused code, redundant platform checks @ReactorScram (#2937)
• Fix user-reported errors @AndrewDryga (#2954)
• fix(windows): put the bundle version back in tauri.conf.json to fix CI @ReactorScram (#2952)
• ci(windows): remove hello-world and permissions-test projects @ReactorScram (#2926)
• fix(windows): #2927 - Use Cargo.toml version instead of tauri.conf.json @ReactorScram (#2936)

🧰 Maintenance

• chore(deps): bump @types/react-dom from 18.2.14 to 18.2.18 in /website @dependabot (#3087)
• chore(deps): bump postcss from 8.4.31 to 8.4.32 in /website @dependabot (#3086)
• chore(deps): bump phoenix_live_view from 0.20.1 to 0.20.2 in /elixir @dependabot (#3088)
• chore(deps): bump hashicorp/google from 5.9.0 to 5.10.0 in /terraform/environments/production @dependabot (#3051)
• chore(deps): bump hashicorp/google-beta from 5.9.0 to 5.10.0 in /terraform/environments/production @dependabot (#3052)
• chore(deps): bump @types/react from 18.2.30 to 18.2.46 in /website @dependabot (#3066)
• chore(deps): bump hashicorp/google from 5.9.0 to 5.10.0 in /terraform/environments/staging @dependabot (#3057)
• chore(deps): bump hashicorp/google-beta from 5.9.0 to 5.10.0 in /terraform/environments/staging @dependabot (#3058)
• chore(deps): bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.21 to 1.9.22 in /rust/connlib/clients/android/connlib @dependabot (#3056)
• chore(deps): bump github/codeql-action from 2 to 3 @dependabot (#3059)
• chore(deps): bump actions/upload-artifact from 3 to 4 @dependabot (#3060)
• chore(deps): bump actions/download-artifact from 3 to 4 @dependabot (#3061)
• chore(deps): bump actions/setup-python from 4 to 5 @dependabot (#3062)
• chore(deps-dev): bump typescript from 5.2.2 to 5.3.3 in /website @dependabot (#3063)
• chore(deps): bump tailwindcss from 3.3.5 to 3.4.0 in /website @dependabot (#3064)
• chore(deps): bump @mdx-js/react from 2.3.0 to 3.0.0 in /website @dependabot (#3065)
• chore(deps): bump @types/node from 20.10.1 to 20.10.6 in /website @dependabot (#3067)
• chore(deps): bump com.diffplug.spotless from 6.23.2 to 6.23.3 in /kotlin/android @dependabot (#3071)
• chore(deps): bump androidx.navigation:navigation-safe-args-gradle-plugin from 2.7.5 to 2.7.6 in /kotlin/android @dependabot (#3073)
• chore(deps): bump gettext from 0.23.1 to 0.24.0 in /elixir @dependabot (#3076)
• chore(deps): bump ecto_sql from 3.11.0 to 3.11.1 in /elixir @dependabot (#3078)
• chore(deps): bump pre-commit from 3.5.0 to 3.6.0 @dependabot (#3077)
• chore(deps-dev): bump credo from 1.7.1 to 1.7.2 in /elixir @dependabot (#3075)
• chore(deps): bump flowbite from 2.2.0 to 2.2.1 in /elixir/apps/web/assets @dependabot (#3074)
• chore(deps-dev): bump dialyxir from 1.4.2 to 1.4.3 in /elixir @dependabot (#3079)
• chore(deps): bump nimble_options from 1.0.2 to 1.1.0 in /elixir @dependabot (#3080)

• security(connlib): Dont allow acces to non-subdomains for a given resource @conectado (#2996)
• fix(rust): Incorrect perms on rust/ files @jamilbk (#2991)
• connlib: add arch and kernel version to user agent @conectado (#2987)
• feat(windows): add DLL for aarch64 but don't run it in CI/CD @ReactorScram (#2989)
• refactor(windows): don't block connlib callbacks @ReactorScram (#2960)
• Fix/lost connection request @conectado (#2976)
• connlib: tune disconnect parameters @conectado (#2977)
• Add ability to email new user after creation @bmanifold (#2957)
• security(gateway): Don't run systemd gateways as root @jamilbk (#2943)
• Rename Authorizations -> Activity @jamilbk (#2979)
• Remove client names unique constraint @AndrewDryga (#2982)
• Add link to status on website @jamilbk (#2974)
• fix(windows): give the encrypted credential a unique name @ReactorScram (#2972)
• feat(windows): count log files @ReactorScram (#2964)
• ci(windows): fix build-push-windows-release-artifacts @ReactorScram (#2973)
• fix(windows): make sure the worker thread for wintun shuts down cleanly @ReactorScram (#2971)
• feat(windows): Handle routes and DNS @ReactorScram (#2889)
• docs(website): Clarify note on legacy support @jamilbk (#2968)
• Apple: UI asking user to grant VPN permissions @roop (#2959)
• refactor(windows): extract modules from gui module @ReactorScram (#2961)
• fix(windows): copy default debug and release settings from Android @ReactorScram (#2963)
• refactor(windows): fix up MSI installer package and try to build it in CI @ReactorScram (#2938)
• fix(windows): disconnect tunnel on sign-out @ReactorScram (#2932)
• connlib: dont fail on ipv6 add route failure @conectado (#2962)
• connlib: prevent resource leak for non-handled record types @conectado (#2955)
• refactor(connlib): log more details about failed queries @conectado (#2934)
• Fix/firezone id handling @conectado (#2958)
• Fix java method signature bug @jamilbk (#2950)
• chore(ci): Use 1.0.0 as version base @jamilbk (#2949)
• feat(windows): Elevate with UAC automatically on startup @ReactorScram (#2913)
• refactor(windows): remove unused code, redundant platform checks @ReactorScram (#2937)
• Fix user-reported errors @AndrewDryga (#2954)
• fix(windows): put the bundle version back in tauri.conf.json to fix CI @ReactorScram (#2952)
• ci(windows): remove hello-world and permissions-test projects @ReactorScram (#2926)
• fix(windows): #2927 - Use Cargo.toml version instead of tauri.conf.json @ReactorScram (#2936)

• Run publish workflow on release publish @jamilbk (#2912)
• Apple: Handle comma in resource names @roop (#2918)
• Prevent DNS sentinel from being used as a fallback resolver @jamilbk (#2922)
• Remove SMBios @jamilbk (#2921)
• Set hasUnappliedChanges = true when setting Resources @jamilbk (#2935)
• windows: fix deep links @ReactorScram (#2903)
• connlib: decouple data and control plane and fix backoff reset @conectado (#2906)
• Add Mailgun DNS records for domain verification @bmanifold (#2908)
• Update styling for Sign In/Up emails @bmanifold (#2907)
• Fix upgrade script link @jamilbk (#2923)

• Gateway upgrade docs @jamilbk (#2914)
• Reduce webrtc log level to error @jamilbk (#2911)
• Use more informative log filepath @jamilbk (#2910)
• Don't automatically delete log files after successful upload @jamilbk (#2904)
• Use correct type for ioctl codes @jamilbk (#2905)
• windows: use settings log_filter instead of env var @ReactorScram (#2888)
• windows: Integrate wintun, run the VPN @ReactorScram (#2883)
• Connlib: reduce failover timeout @conectado (#2897)
• Remove Apple SplitDNS in favor of unified split DNS approach @jamilbk (#2894)
• Set the MTU to 1280 on Apple to avoid connectivity issues @jamilbk (#2901)
• Fix service account tokens and unifile deployment scripts @AndrewDryga (#2900)
• connlib: try to reuse old ips even with new peers @conectado (#2891)
• Add a log tab in settings @roop (#2895)
• connlib: disconnect on token expiration @conectado (#2890)
• Add a detailed Google Workspace setup guide and other docs @jamilbk (#2876)
• connlib: set DNS response type for answers @conectado (#2892)
• refactor(connlib): remove async from the Device API @thomaseizinger (#2815)
• windows: tell Windows that our release builds should always run as admin @ReactorScram (#2838)
• feat(windows): generate device ID and persist it on disk @ReactorScram (#2840)
• fix(connlib): attempt to join topic upon unmatched topic error @conectado (#2874)
• Fix Sendgrid records for sending emails for firezone.dev @jamilbk (#2877)
• windows: add module to install the wintun.dll by embedding it in the client's exe and then copying it out at runtime @ReactorScram (#2843)

Welcome to the first release of Firezone 1.x!

This is a prerelease for beta customers and should not be used by the general public at this time.

If you'd like to register for early access to try Firezone 1.x yourself, fill out the form here.

What's Changed

• [legacy] Print wireguard config field when value is 0 by @jamilbk in https://github.com/firezone/firezone/pull/2337
• [legacy] Add EOL and note in README for 0.7 by @jamilbk in https://github.com/firezone/firezone/pull/2539

Full Changelog: https://github.com/firezone/firezone/compare/0.7.35...0.7.36

🐛 Bug Fixes

• Handle more edge edges @jamilbk (#1948)

🐛 Bug Fixes

• Fix rules rendering to handle case where rule is a tuple @jamilbk (#1947)

🐛 Bug Fixes

• Fix port range to_string @jamilbk (#1915)
• Disable on_demand cert provisioning for Caddy @jamilbk (#1720)

🐛 Bug Fixes

• Add fallback when email claim's not in ID token from OIDC provider @jamilbk (#1686)
• Fix incorrect DocSearch API key @jamilbk (#1680)

🐛 Bug Fixes

• stringify FzHttp.Types.IPPort @jamilbk (#1670)
• Fix fixer artifact in authentication docs @jamilbk (#1646)

🧰 Maintenance

• Bump rubocop from 1.50.2 to 1.52.1 @dependabot (#1653)
• Bump JamesIves/github-pages-deploy-action from 4.4.1 to 4.4.2 @dependabot (#1640)

Other

• New website @jamilbk (#1629)

🐛 Bug Fixes

• Be louder about Omnibus->Docker migration @jamilbk (#1633)

🧰 Maintenance

• Fix sales link @jamilbk (#1601)

🐛 Bug Fixes

• Use POST for connectivity check @jamilbk (#1600)

🧰 Maintenance

• Mention potentially missing asdf plugins @thomaseizinger (#1597)
• Bump rack from 2.2.4 to 2.2.7 in /omnibus @dependabot (#1590)
• Bump http-cache-semantics from 4.1.0 to 4.1.1 in /apps/fz_http/assets @dependabot (#1589)

🐛 Bug Fixes

• Fix VPN session expiration query @AndrewDryga (#1586)
• Document MAX_DEVICES_PER_USER @AndrewDryga (#1587)
• Move self-hosted to draft status @jamilbk (#1583)
• Fix website refs @jamilbk (#1582)

🧰 Maintenance

• Bump python action @jamilbk (#1591)
• Fix new Rubocop linter issue @jamilbk (#1592)
• Bump rubocop from 1.49.0 to 1.50.2 @dependabot (#1565)
• Bump pre-commit from 3.2.2 to 3.3.1 @dependabot (#1588)

🐛 Bug Fixes

• Update 0.7.0 link @jamilbk (#1580)
• Use openid_connect master @jamilbk (#1573)

🧰 Maintenance

• Draft 1.0 signup @jamilbk (#1581)
• Added footer links and form for beta signup. @lilibobear (#1579)
• Update website footer @lilibobear (#1569)
• updated title tagline @lilibobear (#1567)
• add website prefix @jamilbk (#1566)

🐛 Bug Fixes

• Fix WG port in device details @AndrewDryga (#1564)
• Fix docs typos @jamilbk (#1532)
• Increase Hackney connection pool size for coveralls report upload @jamilbk (#1563)
• Update website to include newsletter signup form @jamilbk (#1553)
• Set connectivity checks URL for prod to ping.firez.one @jamilbk (#1533)

🧰 Maintenance

• Add auth layer to API Tokens UI-facing functions @AndrewDryga (#1479)
• Disable version updates for the mix ecosystem @jamilbk (#1562)
• Bump nimble_totp from 0.2.0 to 1.0.0 @dependabot (#1539)
• Bump rubocop from 1.48.1 to 1.49.0 @dependabot (#1537)
• Add newsletter link in navbar @jamilbk (#1554)
• Bump pre-commit from 3.2.1 to 3.2.2 @dependabot (#1547)
• Bump excoveralls from 0.16.0 to 0.16.1 @dependabot (#1541)
• Hide offsite post @jamilbk (#1544)
• Bump codespell from 2.2.2 to 2.2.4 @dependabot (#1507)
• Bump rubocop from 1.46.0 to 1.48.1 @dependabot (#1519)
• Bump pre-commit from 3.1.0 to 3.2.1 @dependabot (#1528)

🐛 Bug Fixes

• Fix double slash issue in default OIDC redirect URL location @AndrewDryga (#1515)

🧰 Maintenance

• Bump pre-commit from 3.0.4 to 3.1.0 @dependabot (#1470)
• Bump rubocop from 1.45.1 to 1.46.0 @dependabot (#1472)

🧰 Maintenance

• Use DEFAULT_ADMIN_EMAIL everywhere to prevent legacy key usage warnings on fresh installs @AndrewDryga (#1509)

🐛 Bug Fixes

• Use ip link commands to check if interface should be changed or route added @AndrewDryga (#1510)

🧰 Maintenance

• Remove DATABASE_URL from local dev container and use documented ENV variables instead @AndrewDryga (#1500)