Skip to content

netbird

v0.73.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 1mo VPN & Tunnels
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

go mesh mesh-networks nat-traversal netbird vpn
+3 more
wireguard-vpn wiretrustee zero-trust-network-access

Summary

AI summary

Updates Client Improvements, Management Improvements, and Proxy Enhancements across a mixed release.

Full changelog

Release Notes for v0.73.0

What's New

Client Improvements

  • Added MDM configuration profile support for Windows Registry and macOS plist deployments.
    https://github.com/netbirdio/netbird/pull/6374
  • Improved DNS handling by answering NODATA instead of SERVFAIL when a host has no addresses of the requested family.
    https://github.com/netbirdio/netbird/pull/6418
  • Added WASM WebSocket dialing support.
    https://github.com/netbirdio/netbird/pull/5980
  • Added iOS debug bundle support in Go.
    https://github.com/netbirdio/netbird/pull/6270
  • Added IsLoginRequiredCached support for iOS clients.
    https://github.com/netbirdio/netbird/pull/6447
  • Improved exit-node handling by propagating deselect actions to synthesized IPv6 routes.
    https://github.com/netbirdio/netbird/pull/6296
  • Migrated profile identity from display name to ID and added support for profile renaming.
    https://github.com/netbirdio/netbird/pull/6367
  • Improved reliability by recovering from TUN device read/write panics and automatically restarting the client.
    https://github.com/netbirdio/netbird/pull/6419
  • Added detection and recovery for stalled signal receive streams.
    https://github.com/netbirdio/netbird/pull/6459
  • Fixed iOS route notification ordering.
    https://github.com/netbirdio/netbird/pull/6454
  • Dropped the signaling-side ICE filter and improved overlay STUN handling.
    https://github.com/netbirdio/netbird/pull/6142
  • Exposed relay transport and connection errors in client status output and metrics.
    https://github.com/netbirdio/netbird/pull/6342

Management Improvements

  • Skipped JWT group evaluation for embedded-IdP local users.
    https://github.com/netbirdio/netbird/pull/6422
  • Treated ci- builds as development builds for remote jobs.
    https://github.com/netbirdio/netbird/pull/6436
  • Optimized network map generation for affected peers.
    https://github.com/netbirdio/netbird/pull/6105
  • Deleted targets automatically when deleting exposed services.
    https://github.com/netbirdio/netbird/pull/6442
  • Removed network map calculation from login flow.
    https://github.com/netbirdio/netbird/pull/6449
  • Passed meta updates for browser clients.
    https://github.com/netbirdio/netbird/pull/6465
  • Fixed flaky SaveAccount tests caused by random IP collisions.
    https://github.com/netbirdio/netbird/pull/6452
  • Synced OpenAPI specifications and added workflow validation.
    https://github.com/netbirdio/netbird/pull/6437

Proxy Enhancements

  • Kept custom TCP listeners alive after mapping batches.
    https://github.com/netbirdio/netbird/pull/6415
  • Fixed UDP relay context handling.
    https://github.com/netbirdio/netbird/pull/6444

Signal Improvements

  • Serialized concurrent sends to peer streams to improve stability.
    https://github.com/netbirdio/netbird/pull/6463

Infrastructure & Tooling

  • Improved GoReleaser release candidate handling and updated Docker build workflows.
    https://github.com/netbirdio/netbird/pull/6438

New Contributors

  • @leemeo3 made their first contribution in https://github.com/netbirdio/netbird/pull/6415

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.72.4...v0.73.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track netbird

Get notified when new releases ship.

Sign up free

About netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

All releases →

Related context

Earlier breaking changes

  • v0.74.7 Rename isValidAccessToken to reflect audience-only check
  • v0.74.5 Removes proxy peer stale deduplication logic.

Beta — feedback welcome: [email protected]