Bump github.com/netbirdio/netbird from 0.72.4 to 0.74.3

[dependabot]

Bumps github.com/netbirdio/netbird from 0.72.4 to 0.74.3.

Release notes

Sourced from github.com/netbirdio/netbird's releases.

v0.74.3

What's Changed

• [client] fix MDM managementURL conflict on default-port URL echo by @​riccardomanfrin in netbirdio/netbird#6672
• [client] Update gopsutil to v4 by @​mlsmaycon in netbirdio/netbird#6688
• [client] Fix hanging status command during relay dial by @​theodorsm in netbirdio/netbird#6694

Full Changelog: netbirdio/netbird@v0.74.2...v0.74.3

v0.74.2

What's Changed

• [management] Add vLLM e2e test by @​braginini in netbirdio/netbird#6649
• [misc] Fix GHCR image push after dockers_v2 migration by @​mlsmaycon in netbirdio/netbird#6653
• [client] Increase management client gRPC receive limit default to 16MB by @​riccardomanfrin in netbirdio/netbird#6641
• [client] Fix slow wg operations by @​pappz in netbirdio/netbird#6633
• [client] backport enforce a single selected exit node by @​pappz in netbirdio/netbird#6640
• [client] Fix backoff.Ticker goroutine leak in reconnect guard by @​theodorsm in netbirdio/netbird#6663

Full Changelog: netbirdio/netbird@v0.74.1...v0.74.2

v0.74.1

What's Changed

• [client] Make lazy connections opt-out via NB_LAZY_CONN by @​lixmal in netbirdio/netbird#6617
• [client] Run privileged client tests natively with sudo on Linux by @​pappz in netbirdio/netbird#6635
• [self-hosted] Remove image override logic in getting started by @​mlsmaycon in netbirdio/netbird#6636
• [management] Add vLLM support for Agent Network by @​braginini in netbirdio/netbird#6643
• [management] return nil when config is not set by @​mlsmaycon in netbirdio/netbird#6642

Full Changelog: netbirdio/netbird@v0.74.0...v0.74.1

v0.74.0

Release Notes for v0.74.0

New Feature: Agent Network

This release introduces Agent Network, a per-account LLM gateway that gives people and agents keyless, identity-based access to LLM APIs and internal resources over the tunnel. It is built on top of the existing reverse proxy and private services, so the transport is still NetBird's WireGuard overlay and the identity model is still your IdP. Have a tunnel, get access; no tunnel, no access.

Agents point at a tunnel-only endpoint instead of the provider's URL. NetBird holds the upstream provider key server-side, injects it per request, and ties every call to a real identity from your IdP. Client-supplied auth headers are stripped before the request is forwarded, so a hardcoded key never reaches the provider. The whole thing is default deny: nothing reaches a provider until a policy explicitly allows it.

Core capabilities:

• Keyless access to LLM APIs. No keys stored or shared on the client. The tunnel is the credential.
• Provider catalog. First-party APIs (OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Google Vertex AI, Mistral), AI gateways (LiteLLM Proxy, Portkey, Bifrost, Cloudflare AI Gateway, Vercel AI Gateway, OpenRouter), and any custom/self-hosted OpenAI-compatible endpoint (Ollama, vLLM, local GPU hosts).
• Policies. A policy connects a Source Group (users or agent devices from your IdP) to one or more providers.
• Limits. Token caps and budget (USD) caps per user and per group, plus account-wide Global Limits that can only tighten a policy, never loosen it.
• Guardrails. Model allowlist, optional prompt capture, and PII redaction on captured logs.
• Usage and access logs. Per-request accounting (identity, provider, model, tokens, cost) plus a full access log (method, path, status, duration, and prompt/completion when capture is on), with denied-request reasons, 7-90 day or indefinite retention, and filtering by user or group.
• Agentic access to internal resources. Databases, internal APIs, and self-hosted models reachable over peer-to-peer WireGuard, no proxy in the path, governed by the same identities and policies.

... (truncated)

Commits

• 7cd5c17 [client] Fix hanging status command during relay dial (#6694)
• 816d806 [client] Update gopsutil to v4 (#6688)
• c9d387b [client] fix MDM managementURL conflict on default-port URL echo (#6672)
• 3aa6c02 [client] Fix backoff.Ticker goroutine leak in reconnect guard
• f6900fb [client] backport enforce a single selected exit node (#6640)
• 4b3dd91 [client] Fix slow wg operations (#6633)
• 8e3b284 [client] Increase mgmt grpc buff size to 16MB (#6641)
• 21aa933 [misc] Fix GHCR image push after dockers_v2 migration (#6653)
• 1dfa85a [management] Add vLLM e2e test (#6649)
• 859fe19 [management] return nil when config is not set (#6642)
• Additional commits viewable in compare view

[phillebaba]

@dependabot rebase

[dependabot]

Superseded by #28.