chore(deps): bump tailscale.com from 1.98.5 to 1.100.0

[dependabot]

Bumps tailscale.com from 1.98.5 to 1.100.0.

Commits

• c811bb1 VERSION.txt: this is v1.100.0
• 98f1ac0 cmd/k8s-operator, net/netutil: revert 4via6 changes (#19990)
• cdcb1cb go.toolchain.rev: bump to Go 1.26.4
• b26dadf net/dns/resolver: skip DNS health warning when doing split DNS (#19959)
• fa54242 ipn,ipn/localapi: require local admin to serve Unix domain sockets
• 40c98cd tstest/natlab/vmtest: deflake, de-strictify TestSelfSignedDERPHashPinning
• 01c59d8 cmd/tailscale/cli: show services in serve status (#19600)
• 9107354 tstest/natlab/vnet: send unsolicited IPv6 Router Advertisements
• c91b718 ipn/localapi,tstest/natlab: fix debug derp TLS check for sha256-raw CertName
• 52400dc ipn/ipnlocal: add back a watchdog after earlier removal from engine
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​tailscale.com@​v1.98.5 ⏵ v1.100.0

View full report

[cursor]

PR Summary

Medium Risk
Tailscale/tsnet underpins authz network exposure; a minor version jump can change VPN/DERP behavior without any code review in-repo—smoke-test Tailscale-enabled authz after merge.

Overview
Bumps tailscale.com from 1.98.5 to 1.100.0 and refreshes go.sum; no application source changes in this diff.

The module go directive moves from 1.26.3 to 1.26.4 to match the Tailscale release toolchain. Transitive pins shift with the upgrade (e.g. github.com/tailscale/wireguard-go, golang.org/x/crypto, github.com/go-json-experiment/json, plus new github.com/go4org/hashtriemap in the lockfile).

tailscale.com/tsnet is used by the authz service for optional Tailscale listeners; behavior changes would come from the upstream library, not from edits in this repo.

^{Reviewed by Cursor Bugbot for commit 9ff345a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[haasonsaas]

@dependabot recreate