wireguard-windows, branch master

locales: update translations from crowdin

2026-06-13T11:06:48Z

Signed-off-by: Jason A. Donenfeld

l18n: promote out.gotext.json to messages.gotext.json

2026-05-29T21:29:58Z

Signed-off-by: Jason A. Donenfeld

l18n: configuration separator fallbacks

2026-05-19T16:27:47Z

For languages that don't translate these, don't emit the place holder in this ugly way. Instead fallback to ", " and " ". Signed-off-by: Jason A. Donenfeld

manager: tear down the event reader on partial decode failure

2026-05-19T15:37:20Z

gob is positional; continue on a half-read value leaves the decoder mid-payload, and the next iteration reads what follows as if it were a new NotificationType. Return on any Decode error and let the pipe close take down the reader. The empty-tunnel-name check has to move below all four field decodes for the same reason, or it desyncs the stream just like the failure path used to. Signed-off-by: Jason A. Donenfeld

manager: tidy up leak and dead lock-thread defer in session loop

2026-05-19T15:37:20Z

Signed-off-by: Jason A. Donenfeld

conf: flush file buffers before atomically renaming into place

2026-05-19T15:37:20Z

NTFS journals the rename's metadata change but does not journal user data. Without an explicit flush a power loss between the cache manager publishing the rename and writing back the file's pages can leave the destination at its final name with zero or partial contents, while the prior file is gone. Signed-off-by: Jason A. Donenfeld

manager: skip the handle list attribute when no handles are supplied

2026-05-19T15:37:20Z

Signed-off-by: Jason A. Donenfeld

version: skip certs whose CertificatePolicies fail to decode

2026-05-19T15:37:20Z

A per-cert decode failure shouldn't abort the whole enumeration: just continue to the next cert. As a side effect, the next CertEnumCertificatesInStore call frees this cert via its predecessor-free contract, so no explicit free is needed either. Signed-off-by: Jason A. Donenfeld

main: pass fatal arguments to log.Fatal individually

2026-05-19T15:37:20Z

Without the splat the appended slice is passed as a single argument to log.Fatal, which renders it as "[Error: ]" with the brackets and the leading slice formatting visible in the console output. Signed-off-by: Jason A. Donenfeld

ringlogger: read shared counters atomically

2026-05-19T15:37:20Z

The writer publishes nextIndex and timeNs via atomic ops, but WriteTo and FollowFromCursor used to memcpy the entire mapping and then read those fields plain, which is a race. Drop the megabyte snapshot and use matching atomic loads. Signed-off-by: Jason A. Donenfeld