⬆️ Update dependency tailscale/tailscale to v1.62.0 (#37)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change | OpenSSF |
|---|---|---|---|
| [tailscale/tailscale](https://togithub.com/tailscale/tailscale) |
minor | `v1.60.0` -> `v1.62.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/tailscale/tailscale/badge)](https://securityscorecards.dev/viewer/?uri=github.com/tailscale/tailscale)
|

---

### Release Notes

<details>
<summary>tailscale/tailscale (tailscale/tailscale)</summary>

###
[`v1.62.0`](https://togithub.com/tailscale/tailscale/releases/tag/v1.62.0):
1.62.0

[Compare
Source](https://togithub.com/tailscale/tailscale/compare/v1.60.1...v1.62.0)

#### All platforms

- New: [Web interface][web-interface] now uses ACL grants to manage
access on tagged devices
- Changed: [Tailscale SSH][tailscale-ssh] connections now disable
unnecessary hostname [canonicalization][canonicalization]
- Changed: [`tailscale bugreport`][tailscale-bugreport] command for
generating diagnostic logs now contain ethtool information
- Changed: Mullvad's [family-friendly server][mullvad-family-friendly]
is added to the list of well known DNS over HTTPS (DoH) servers
-   Changed: DNS over HTTP requests now contain a timeout
- Changed: TCP forwarding attempts in [userspace mode][userspace-mode]
now have a per-client limit
- Changed: Endpoints with link-local IPv6 addresses is preferred over
private addresses
-   Changed: WireGuard logs are less verbose
-   Changed: Go is updated to version 1.22.1
- Fixed: [DERP server][derp-servers] region no longer changes if
connectivity to the new DERP region is degraded

#### Linux

- Changed: [Auto-update][auto-updates] version detection on Alpine Linux
is improved
- Changed: IPv6 support detection in a container environment is improved
- Fixed: DNS configuration on Amazon Linux 2023 no longer causes an
infinite loop

#### Windows

- Changed: [`ManagedByOrganizationName`][mdm-keys-org],
[`ManagedByCaption`][mdm-keys-caption], and
[`ManagedByURL`][mdm-keys-URL] system policy keys are now supported
-   Fixed: Tailscale Tunnel WinTun adapter handling is improved
- Fixed: [MSI][windows-msi] upgrades no longer ignore policy properties
set during initial install

#### macOS

- New: A `.pkg` installer package is now available for the
[standalone][macos-variants] release of the Tailscale client
- Changed: [Taildrop][taildrop] notifications now include actions to
reveal the received file in the Finder, or delete it
- Changed: [Tailnet lock][tailnet-lock] settings UI displays more
information about the status, including key and public key trust status
- Changed: The onboarding flow now guides the user in enabling the
Tailscale system extension
- Changed: **Launch Tailscale at login** settings item can now be
toggled when the Tailscale client is disconnected
- Changed: DNS behavior is improved when handling transitions between
network interfaces

#### iOS

-   Changed: Battery usage is improved
- Changed: [Taildrop][taildrop] notifications now include actions to
reveal the received file in the Files app, or delete it
- Changed: [Tailnet lock][tailnet-lock] settings UI displays more
information about the status, including key and public key trust status
- Changed: Unnecessary log messages are removed when triggered by
changes to device power state and routing
- Changed: DNS behavior is improved when handling interface transitions
between Wi-Fi and Cellular

#### Android

-   Changed: Settings persist from previous sign-ins
-   Changed: Always-on VPN handling is improved
-   Changed: Custom control server is applied on first start

#### Kubernetes operator

- Changed: [Ingress][kubernetes-ingress] resource handling is improved
when deployed before its backing `Service` resource
- Fixed: Destination NAT (DNAT) rule management by egress proxies in
[`nftables`][firewall-mode] mode when IP address of
`tailscale.com/tailnet-fqdn` changes

[auto-updates]: https://tailscale.com/kb/1067/update#auto-updates

[canonicalization]: https://en.wikipedia.org/wiki/Canonicalization

[derp-servers]: https://tailscale.com/kb/1232/derp-servers

[firewall-mode]: https://tailscale.com/kb/1294/firewall-mode

[kubernetes-ingress]:
https://tailscale.com/kb/1236/kubernetes-operator#cluster-ingress

[macos-variants]: https://tailscale.com/kb/1065/macos-variants

[mdm-keys-caption]:
https://tailscale.com/kb/1315/mdm-keys#set-an-info-message

[mdm-keys-org]:
https://tailscale.com/kb/1315/mdm-keys#set-your-organization-name

[mdm-keys-url]: https://tailscale.com/kb/1315/mdm-keys#set-a-support-url

[mullvad-family-friendly]:
https://mullvad.net/en/blog/family-friendly-dns-content-blocking-now-added-to-our-encrypted-dns-service

[taildrop]: https://tailscale.com/kb/1106/taildrop

[tailnet-lock]: https://tailscale.com/kb/1226/tailnet-lock

[tailscale-bugreport]: https://tailscale.com/kb/1227/bug-report

[tailscale-ssh]: https://tailscale.com/kb/1193/tailscale-ssh

[userspace-mode]:
https://tailscale.com/kb/1177/kernel-vs-userspace-routers#userspace-netstack-mode

[web-interface]: https://tailscale.com/kb/1325/device-web-interface

[windows-msi]: https://tailscale.com/kb/1189/install-windows-msi

###
[`v1.60.1`](https://togithub.com/tailscale/tailscale/releases/tag/v1.60.1):
1.60.1

[Compare
Source](https://togithub.com/tailscale/tailscale/compare/v1.60.0...v1.60.1)

#### All Platforms

Fixed: Exposing port `8080` to other devices on your tailnet works as
expected

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/chezmoi-sh/nex.rpi).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI2MS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

apps/nex.rpi/images/alpine/tailscale/Dockerfile

@@ -19,7 +19,7 @@
 FROM docker.io/library/golang:1.22.0-alpine3.19 as builder
 
 # renovate: datasource=github-tags depName=tailscale/tailscale versioning=semver
-ARG TAILSCALE_VERSION="v1.60.0"
+ARG TAILSCALE_VERSION="v1.62.0"
 
 # trunk-ignore(hadolint/DL3018): don't care to pin dependencies on build
 RUN set -eux; \
@@ -61,7 +61,7 @@ RUN set -eux; \
 FROM --platform=arm64 oci.chezmoi.sh/localhost/alpine:stable
 
 # renovate: datasource=github-tags depName=tailscale/tailscale versioning=semver
-ARG TAILSCALE_VERSION="v1.60.0"
+ARG TAILSCALE_VERSION="v1.62.0"
 
 # renovate: datasource=repology depName=alpine_3_19/iproute2 versioning=loose
 ARG IPROUTE2_VERSION="6.6.0-r0"