From a77796902793798779ae2e64f918348690ecbacd Mon Sep 17 00:00:00 2001 From: Serhii Matsyshyn Date: Thu, 15 Oct 2026 20:20:51 +0300 Subject: [PATCH] CHANGELOG: one peer map build per policy write --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index c4d9868b5..18de37aab 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -129,6 +129,7 @@ clients, and how to run the same setup without Nix. - A node re-registering with a spent, expired or revoked pre-auth key is now rejected if it expired or changed node key while the re-registration was in flight [#3525](https://github.com/juanfont/headscale/pull/3525) - DERP client verification (the embedded DERP server and the `/verify` endpoint) looks up the node key directly instead of scanning every node on each connection [#3520](https://github.com/juanfont/headscale/pull/3520) - Fix the unix socket being created `0700` instead of the documented `0770` when `unix_socket_permission` is unset. The socket grants full admin access without authentication, so members of its group gain that access; check who is in it before upgrading [#3540](https://github.com/juanfont/headscale/pull/3540) +- A policy write builds the peer map once instead of twice [#3557](https://github.com/juanfont/headscale/pull/3557) ## 0.29.5 (2026-10-13)