wireguard-windows/tunnel, branch master

tunnel: mtumonitor: serialize change callbacks

2026-05-19T15:37:20Z

The route-change and interface-change callbacks run on separate threads from the IP Helper notification pool and both touch the same lastLUID/lastIndex/lastMTU state. Signed-off-by: Jason A. Donenfeld

tunnel: create DNS registry key if it doesn't exist

2026-05-07T12:35:01Z

This fixes a bit of a race with interface attachment on old Windows builds. Signed-off-by: Jason A. Donenfeld

global: regenerate syscall code from latest x/sys/windows wrapper

2026-04-20T10:57:17Z

Signed-off-by: Jason A. Donenfeld

global: format code

2026-04-16T14:21:33Z

Signed-off-by: Jason A. Donenfeld

tunnel: use system cmd.exe for scripts

2026-04-16T13:26:26Z

Always resolve cmd.exe via GetSystemDirectory instead of trusting the COMSPEC environment variable. Signed-off-by: Jason A. Donenfeld

tunnel: disable firewall after flushing routes on teardown

2026-04-16T13:26:26Z

Signed-off-by: Jason A. Donenfeld

tunnel: avoid calling netsh on <1809 for DNS changes

2026-04-16T13:26:26Z

And it turns out we can use SearchList on old Windows 10 too. This gets total feature parity with the new DNS function. Signed-off-by: Jason A. Donenfeld

tunnel: prevent metric integer overflow

2026-04-16T13:26:26Z

You can set really big metrics using powershell. Signed-off-by: Jason A. Donenfeld

tunnel: move label to right place to avoid zeroing err

2026-04-16T13:26:26Z

Signed-off-by: Jason A. Donenfeld

tunnel: firewall: prevent unsafe variables from being GC'd

2026-04-16T13:26:26Z

Signed-off-by: Jason A. Donenfeld