chore(deps): bump tailscale.com from 1.68.0 to 1.96.3

[dependabot]

Bumps tailscale.com from 1.68.0 to 1.96.3.

Release notes

Sourced from tailscale.com's releases.

v1.96.3

Please refer to the changelog available at https://tailscale.com/changelog

v1.96.2

Please refer to the changelog available at https://tailscale.com/changelog

v1.94.2

Please refer to the changelog available at https://tailscale.com/changelog

v1.94.1

Please refer to the changelog available at https://tailscale.com/changelog

v1.92.5

Please refer to the changelog available at https://tailscale.com/changelog

v1.92.3

Please refer to the changelog available at https://tailscale.com/changelog

v1.92.2

Please refer to the changelog available at https://tailscale.com/changelog

v1.92.1

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.9

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.8

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.6

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.4

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.3

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.2

Please refer to the changelog available at https://tailscale.com/changelog

v1.90.1

Please refer to the changelog available at https://tailscale.com/changelog

v1.88.3

Please refer to the changelog available at https://tailscale.com/changelog

v1.88.1

Please refer to the changelog available at https://tailscale.com/changelog

... (truncated)

Commits

• bf309e4 VERSION.txt: this is v1.96.3
• 41061fa feature/featuretags: skip TestAllOmitBuildTagsDeclared when not in a git repo
• a330ce9 net/dns: use the correct separator for multiple servers in the same NRPT rule...
• 044221b kube/certs: discover TLS domains from TCP TerminateTLS handlers (#19020) (#19...
• 17a4f58 VERISON.txt this is v1.96.2
• c25843e cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies (#1645...
• 43ad51d util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) (...
• f2c3a67 cmd/k8s-operator: use correct tailnet client for L7 & L3 ingresses (#18749) (...
• 6af139f VERSION.txt: this is v1.96.1 (#18942)
• cf3f31f go.mod: bump for internal/poll: move rsan to heap on windows
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cursor]

PR Summary

Medium Risk
Upgrades tailscale.com/tsnet and a large set of transitive networking/crypto deps, which could subtly change behavior of the authz server’s Tailscale connectivity. Also bumps the module go version to 1.26.1, which can affect build/toolchain compatibility in CI and downstream consumers.

Overview
Updates the Go module/tooling baseline and refreshes dependencies. The module go version is bumped from 1.24 to 1.26.1 (and the explicit toolchain pin is removed).

Primary dependency update: upgrades tailscale.com from v1.68.0 to v1.96.3 (used via tailscale.com/tsnet), pulling in many related transitive updates (e.g., wireguard-go, gvisor, golang.org/x/*) and minor bumps like otelhttp v0.63.0→v0.64.0.

^{Written by Cursor Bugbot for commit c132c55. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​tailscale.com@​v1.68.0 ⏵ v1.96.3	-28
	golang/​go.opentelemetry.io/​contrib/​instrumentation/​net/​http/​otelhttp@​v0.63.0 ⏵ v0.64.0

View full report