From 1cc6faa8db9b2a9198d8425cc2fa3266cd21e269 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 20 Oct 2026 23:57:34 +0000
Subject: [PATCH] chore(main): release 0.58.1

---
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  |  7 +++
 Cargo.lock                    | 98 +++++++++++++++++------------------
 Cargo.toml                    | 86 +++++++++++++++---------------
 docs/getting-started.md       |  4 +-
 5 files changed, 102 insertions(+), 95 deletions(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 115a387..ab7b9e9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.58.0"
+  ".": "0.58.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 46de701..d421241 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,13 @@ Record breaking or significant changes here. All dates are UTC.
 
 * **exit node:** forwarded TCP flows run without Nagle, the underlay UDP sockets ask for Go's 7 MiB buffers, netstack egress goes out in batches of up to 64 packets, and the netstack tracks 32 receive holes for uploads. Kernel receive batching, splice coalescing, targeted replay and Apple connected UDP sockets are opt-in experiments, off unless their variable is `1`.
 
+## [0.58.1](https://github.com/GeiserX/tailscale-rs/compare/v0.58.0...v0.58.1) (2026-10-20)
+
+
+### Bug Fixes
+
+* **deps:** stop trusting certificates minted with the leaked eMudhra keys ([#655](https://github.com/GeiserX/tailscale-rs/issues/655)) ([6cc59a1](https://github.com/GeiserX/tailscale-rs/commit/6cc59a16a44c3db44b52c775dc506cdf828d0e37))
+
 ## [0.58.0](https://github.com/GeiserX/tailscale-rs/compare/v0.57.8...v0.58.0) (2026-10-18)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index a900580..a111384 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -654,7 +654,7 @@ dependencies = [
 
 [[package]]
 name = "checks"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "clap",
  "globwalk",
@@ -1828,7 +1828,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_tailscale"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "axum",
  "base64 0.22.1",
@@ -1871,7 +1871,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_array256"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_bitset",
  "heapless",
@@ -1883,7 +1883,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_bart"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "cfg-if",
  "divan",
@@ -1902,7 +1902,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_bart_packetfilter"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_array256",
  "geiserx_ts_bart",
@@ -1917,7 +1917,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_bitset"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "cfg-if",
  "divan",
@@ -1927,14 +1927,14 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_capabilityversion"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "serde",
 ]
 
 [[package]]
 name = "geiserx_ts_control"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -1977,7 +1977,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_control_noise"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -2002,7 +2002,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_control_serde"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -2020,7 +2020,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_dataplane"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "etherparse",
  "geiserx_ts_bart",
@@ -2040,7 +2040,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_derp"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "crypto_box",
@@ -2068,7 +2068,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_disco_protocol"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "aead 0.5.2",
  "crypto_box",
@@ -2082,11 +2082,11 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_dns_wire"
-version = "0.58.0"
+version = "0.58.1"
 
 [[package]]
 name = "geiserx_ts_dynbitset"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_bitset",
  "proptest",
@@ -2095,7 +2095,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_elixir"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_tailscale",
  "geiserx_ts_control",
@@ -2106,7 +2106,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_ffi"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "cbindgen",
  "geiserx_tailscale",
@@ -2118,7 +2118,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_forwarder"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "etherparse",
@@ -2132,14 +2132,14 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_hexdump"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "heapless",
 ]
 
 [[package]]
 name = "geiserx_ts_host_net"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "if-addrs",
  "ipnet",
@@ -2149,7 +2149,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_http_util"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "futures",
@@ -2170,7 +2170,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_keys"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "crypto_box",
  "ed25519-dalek 2.2.0",
@@ -2186,7 +2186,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_magicsock"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_capabilityversion",
  "geiserx_ts_disco_protocol",
@@ -2207,14 +2207,14 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_metrics"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "portable-atomic",
 ]
 
 [[package]]
 name = "geiserx_ts_netcheck"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_control",
  "geiserx_ts_control_serde",
@@ -2232,7 +2232,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_netmon"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "tokio",
  "tracing",
@@ -2240,7 +2240,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_netstack_smoltcp"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "axum",
  "bytes",
@@ -2261,7 +2261,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_netstack_smoltcp_core"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "flume",
@@ -2275,7 +2275,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_netstack_smoltcp_socket"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "futures-io",
@@ -2286,7 +2286,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_nodecapability"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "cfg-if",
  "serde",
@@ -2295,7 +2295,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_overlay_router"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_bart",
  "geiserx_ts_packet",
@@ -2306,7 +2306,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_packet"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "crypto_box",
@@ -2315,7 +2315,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_packetfilter"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "hashbrown 0.17.1",
  "ipnet",
@@ -2325,7 +2325,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_packetfilter_serde"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_nodecapability",
  "geiserx_ts_peercapability",
@@ -2338,7 +2338,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_packetfilter_state"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "divan",
  "geiserx_ts_bart_packetfilter",
@@ -2351,7 +2351,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_peercapability"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "serde",
  "url",
@@ -2359,7 +2359,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_portmapper"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "getrandom 0.4.3",
  "if-addrs",
@@ -2374,7 +2374,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_python"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_tailscale",
  "geiserx_ts_control",
@@ -2387,7 +2387,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_runtime"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -2437,14 +2437,14 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_time"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "proptest",
 ]
 
 [[package]]
 name = "geiserx_ts_tka"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "argon2",
  "blake2 0.10.6",
@@ -2456,7 +2456,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_tls_util"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "rcgen",
  "ring",
@@ -2471,14 +2471,14 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_transport"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_packet",
 ]
 
 [[package]]
 name = "geiserx_ts_transport_tun"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "geiserx_ts_hexdump",
@@ -2494,7 +2494,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_tunnel"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "aead 0.5.2",
  "base64 0.22.1",
@@ -2522,7 +2522,7 @@ dependencies = [
 
 [[package]]
 name = "geiserx_ts_underlay_router"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "geiserx_ts_packet",
  "geiserx_ts_transport",
@@ -6449,7 +6449,7 @@ checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
 
 [[package]]
 name = "ts_cli_util"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "cfg-if",
  "clap",
@@ -6468,7 +6468,7 @@ dependencies = [
 
 [[package]]
 name = "ts_devtools"
-version = "0.58.0"
+version = "0.58.1"
 dependencies = [
  "bytes",
  "clap",
@@ -6484,7 +6484,7 @@ dependencies = [
 
 [[package]]
 name = "ts_test_util"
-version = "0.58.0"
+version = "0.58.1"
 
 [[package]]
 name = "tun-rs"
diff --git a/Cargo.toml b/Cargo.toml
index c8ff6ef..419b86a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -55,7 +55,7 @@ members = [
 edition = "2024"
 license = "BSD-3-Clause"
 publish = true
-version = "0.58.0"
+version = "0.58.1"
 repository = "https://github.com/GeiserX/tailscale-rs"
 
 # This disagrees with the README's stated MSRV. That's intentional: this field causes cargo to error
@@ -152,50 +152,50 @@ zerocopy = { version = "0.8", features = ["derive"] }
 zeroize = { version = "1.8", default-features = false, features = ["derive"] }
 
 # local workspace deps
-tailscale = { path = ".", package = "geiserx_tailscale", version = "0.58.0" } # x-release-please-version
-ts_array256 = { path = "ts_array256", package = "geiserx_ts_array256", version = "0.58.0" } # x-release-please-version
-ts_bart = { path = "ts_bart", package = "geiserx_ts_bart", version = "0.58.0" } # x-release-please-version
-ts_bart_packetfilter = { path = "ts_bart_packetfilter", package = "geiserx_ts_bart_packetfilter", version = "0.58.0" } # x-release-please-version
-ts_bitset = { path = "ts_bitset", package = "geiserx_ts_bitset", default-features = false, version = "0.58.0" } # x-release-please-version
-ts_capabilityversion = { path = "ts_capabilityversion", package = "geiserx_ts_capabilityversion", version = "0.58.0" } # x-release-please-version
+tailscale = { path = ".", package = "geiserx_tailscale", version = "0.58.1" } # x-release-please-version
+ts_array256 = { path = "ts_array256", package = "geiserx_ts_array256", version = "0.58.1" } # x-release-please-version
+ts_bart = { path = "ts_bart", package = "geiserx_ts_bart", version = "0.58.1" } # x-release-please-version
+ts_bart_packetfilter = { path = "ts_bart_packetfilter", package = "geiserx_ts_bart_packetfilter", version = "0.58.1" } # x-release-please-version
+ts_bitset = { path = "ts_bitset", package = "geiserx_ts_bitset", default-features = false, version = "0.58.1" } # x-release-please-version
+ts_capabilityversion = { path = "ts_capabilityversion", package = "geiserx_ts_capabilityversion", version = "0.58.1" } # x-release-please-version
 ts_cli_util = { path = "ts_cli_util" }
-ts_control = { path = "ts_control", package = "geiserx_ts_control", version = "0.58.0" } # x-release-please-version
-ts_control_noise = { path = "ts_control_noise", package = "geiserx_ts_control_noise", version = "0.58.0" } # x-release-please-version
-ts_control_serde = { path = "ts_control_serde", package = "geiserx_ts_control_serde", version = "0.58.0" } # x-release-please-version
-ts_dataplane = { path = "ts_dataplane", package = "geiserx_ts_dataplane", version = "0.58.0" } # x-release-please-version
-ts_derp = { path = "ts_derp", package = "geiserx_ts_derp", version = "0.58.0" } # x-release-please-version
-ts_disco_protocol = { path = "ts_disco_protocol", package = "geiserx_ts_disco_protocol", version = "0.58.0" } # x-release-please-version
-ts_dns_wire = { path = "ts_dns_wire", package = "geiserx_ts_dns_wire", version = "0.58.0" } # x-release-please-version
-ts_dynbitset = { path = "ts_dynbitset", package = "geiserx_ts_dynbitset", version = "0.58.0" } # x-release-please-version
-ts_forwarder = { path = "ts_forwarder", package = "geiserx_ts_forwarder", version = "0.58.0" } # x-release-please-version
-ts_hexdump = { path = "ts_hexdump", package = "geiserx_ts_hexdump", version = "0.58.0" } # x-release-please-version
-ts_host_net = { path = "ts_host_net", package = "geiserx_ts_host_net", version = "0.58.0" } # x-release-please-version
-ts_keys = { path = "ts_keys", package = "geiserx_ts_keys", version = "0.58.0" } # x-release-please-version
-ts_magicsock = { path = "ts_magicsock", package = "geiserx_ts_magicsock", version = "0.58.0" } # x-release-please-version
-ts_metrics = { path = "ts_metrics", package = "geiserx_ts_metrics", version = "0.58.0" } # x-release-please-version
-ts_netcheck = { path = "ts_netcheck", package = "geiserx_ts_netcheck", version = "0.58.0" } # x-release-please-version
-ts_netmon = { path = "ts_netmon", package = "geiserx_ts_netmon", version = "0.58.0" } # x-release-please-version
-ts_netstack_smoltcp = { path = "ts_netstack_smoltcp", package = "geiserx_ts_netstack_smoltcp", version = "0.58.0" } # x-release-please-version
-ts_netstack_smoltcp_core = { path = "ts_netstack_smoltcp_core", package = "geiserx_ts_netstack_smoltcp_core", version = "0.58.0" } # x-release-please-version
-ts_netstack_smoltcp_socket = { path = "ts_netstack_smoltcp_socket", package = "geiserx_ts_netstack_smoltcp_socket", version = "0.58.0" } # x-release-please-version
-ts_nodecapability = { path = "ts_nodecapability", package = "geiserx_ts_nodecapability", version = "0.58.0" } # x-release-please-version
-ts_overlay_router = { path = "ts_overlay_router", package = "geiserx_ts_overlay_router", version = "0.58.0" } # x-release-please-version
-ts_packet = { path = "ts_packet", package = "geiserx_ts_packet", version = "0.58.0" } # x-release-please-version
-ts_packetfilter = { path = "ts_packetfilter", package = "geiserx_ts_packetfilter", version = "0.58.0" } # x-release-please-version
-ts_packetfilter_serde = { path = "ts_packetfilter_serde", package = "geiserx_ts_packetfilter_serde", version = "0.58.0" } # x-release-please-version
-ts_packetfilter_state = { path = "ts_packetfilter_state", package = "geiserx_ts_packetfilter_state", version = "0.58.0" } # x-release-please-version
-ts_peercapability = { path = "ts_peercapability", package = "geiserx_ts_peercapability", version = "0.58.0" } # x-release-please-version
-ts_http_util = { path = "ts_http_util", package = "geiserx_ts_http_util", version = "0.58.0" } # x-release-please-version
-ts_portmapper = { path = "ts_portmapper", package = "geiserx_ts_portmapper", version = "0.58.0" } # x-release-please-version
-ts_tka = { path = "ts_tka", package = "geiserx_ts_tka", version = "0.58.0" } # x-release-please-version
-ts_tls_util = { path = "ts_tls_util", package = "geiserx_ts_tls_util", version = "0.58.0" } # x-release-please-version
-ts_runtime = { path = "ts_runtime", package = "geiserx_ts_runtime", version = "0.58.0", default-features = false } # x-release-please-version
+ts_control = { path = "ts_control", package = "geiserx_ts_control", version = "0.58.1" } # x-release-please-version
+ts_control_noise = { path = "ts_control_noise", package = "geiserx_ts_control_noise", version = "0.58.1" } # x-release-please-version
+ts_control_serde = { path = "ts_control_serde", package = "geiserx_ts_control_serde", version = "0.58.1" } # x-release-please-version
+ts_dataplane = { path = "ts_dataplane", package = "geiserx_ts_dataplane", version = "0.58.1" } # x-release-please-version
+ts_derp = { path = "ts_derp", package = "geiserx_ts_derp", version = "0.58.1" } # x-release-please-version
+ts_disco_protocol = { path = "ts_disco_protocol", package = "geiserx_ts_disco_protocol", version = "0.58.1" } # x-release-please-version
+ts_dns_wire = { path = "ts_dns_wire", package = "geiserx_ts_dns_wire", version = "0.58.1" } # x-release-please-version
+ts_dynbitset = { path = "ts_dynbitset", package = "geiserx_ts_dynbitset", version = "0.58.1" } # x-release-please-version
+ts_forwarder = { path = "ts_forwarder", package = "geiserx_ts_forwarder", version = "0.58.1" } # x-release-please-version
+ts_hexdump = { path = "ts_hexdump", package = "geiserx_ts_hexdump", version = "0.58.1" } # x-release-please-version
+ts_host_net = { path = "ts_host_net", package = "geiserx_ts_host_net", version = "0.58.1" } # x-release-please-version
+ts_keys = { path = "ts_keys", package = "geiserx_ts_keys", version = "0.58.1" } # x-release-please-version
+ts_magicsock = { path = "ts_magicsock", package = "geiserx_ts_magicsock", version = "0.58.1" } # x-release-please-version
+ts_metrics = { path = "ts_metrics", package = "geiserx_ts_metrics", version = "0.58.1" } # x-release-please-version
+ts_netcheck = { path = "ts_netcheck", package = "geiserx_ts_netcheck", version = "0.58.1" } # x-release-please-version
+ts_netmon = { path = "ts_netmon", package = "geiserx_ts_netmon", version = "0.58.1" } # x-release-please-version
+ts_netstack_smoltcp = { path = "ts_netstack_smoltcp", package = "geiserx_ts_netstack_smoltcp", version = "0.58.1" } # x-release-please-version
+ts_netstack_smoltcp_core = { path = "ts_netstack_smoltcp_core", package = "geiserx_ts_netstack_smoltcp_core", version = "0.58.1" } # x-release-please-version
+ts_netstack_smoltcp_socket = { path = "ts_netstack_smoltcp_socket", package = "geiserx_ts_netstack_smoltcp_socket", version = "0.58.1" } # x-release-please-version
+ts_nodecapability = { path = "ts_nodecapability", package = "geiserx_ts_nodecapability", version = "0.58.1" } # x-release-please-version
+ts_overlay_router = { path = "ts_overlay_router", package = "geiserx_ts_overlay_router", version = "0.58.1" } # x-release-please-version
+ts_packet = { path = "ts_packet", package = "geiserx_ts_packet", version = "0.58.1" } # x-release-please-version
+ts_packetfilter = { path = "ts_packetfilter", package = "geiserx_ts_packetfilter", version = "0.58.1" } # x-release-please-version
+ts_packetfilter_serde = { path = "ts_packetfilter_serde", package = "geiserx_ts_packetfilter_serde", version = "0.58.1" } # x-release-please-version
+ts_packetfilter_state = { path = "ts_packetfilter_state", package = "geiserx_ts_packetfilter_state", version = "0.58.1" } # x-release-please-version
+ts_peercapability = { path = "ts_peercapability", package = "geiserx_ts_peercapability", version = "0.58.1" } # x-release-please-version
+ts_http_util = { path = "ts_http_util", package = "geiserx_ts_http_util", version = "0.58.1" } # x-release-please-version
+ts_portmapper = { path = "ts_portmapper", package = "geiserx_ts_portmapper", version = "0.58.1" } # x-release-please-version
+ts_tka = { path = "ts_tka", package = "geiserx_ts_tka", version = "0.58.1" } # x-release-please-version
+ts_tls_util = { path = "ts_tls_util", package = "geiserx_ts_tls_util", version = "0.58.1" } # x-release-please-version
+ts_runtime = { path = "ts_runtime", package = "geiserx_ts_runtime", version = "0.58.1", default-features = false } # x-release-please-version
 ts_test_util = { path = "ts_test_util" }
-ts_time = { path = "ts_time", package = "geiserx_ts_time", version = "0.58.0" } # x-release-please-version
-ts_transport = { path = "ts_transport", package = "geiserx_ts_transport", version = "0.58.0" } # x-release-please-version
-ts_transport_tun = { path = "ts_transport_tun", package = "geiserx_ts_transport_tun", version = "0.58.0" } # x-release-please-version
-ts_underlay_router = { path = "ts_underlay_router", package = "geiserx_ts_underlay_router", version = "0.58.0" } # x-release-please-version
-ts_tunnel = { path = "ts_tunnel", package = "geiserx_ts_tunnel", version = "0.58.0" } # x-release-please-version
+ts_time = { path = "ts_time", package = "geiserx_ts_time", version = "0.58.1" } # x-release-please-version
+ts_transport = { path = "ts_transport", package = "geiserx_ts_transport", version = "0.58.1" } # x-release-please-version
+ts_transport_tun = { path = "ts_transport_tun", package = "geiserx_ts_transport_tun", version = "0.58.1" } # x-release-please-version
+ts_underlay_router = { path = "ts_underlay_router", package = "geiserx_ts_underlay_router", version = "0.58.1" } # x-release-please-version
+ts_tunnel = { path = "ts_tunnel", package = "geiserx_ts_tunnel", version = "0.58.1" } # x-release-please-version
 
 [workspace.lints.rust]
 closure_returning_async_block = "warn"
diff --git a/docs/getting-started.md b/docs/getting-started.md
index f445e1c..4c844a5 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -14,7 +14,7 @@ version into your `Cargo.toml`. The line it adds looks like this:
 ```toml
 [dependencies]
 # Published as `geiserx_tailscale`; imported as `tailscale`.
-tailscale = { package = "geiserx_tailscale", version = "0.58.0" }
+tailscale = { package = "geiserx_tailscale", version = "0.58.1" }
 ```
 
 <!-- x-release-please-end -->
@@ -77,7 +77,7 @@ typed returns — so you get Go's lifecycle *shape* without giving up Rust's typ
 
 ```toml
 [dependencies]
-tailscale = { package = "geiserx_tailscale", version = "0.58.0", features = ["tsnet"] }
+tailscale = { package = "geiserx_tailscale", version = "0.58.1", features = ["tsnet"] }
 tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
 ```