Adds extra Tailscale binaries in split pkgs

Adds a set of Tailscale binaries in new tailscale-extra-* subpackages.
Existing Tailscale package is unchanged.

tailscale.yaml

@@ -1,7 +1,7 @@
 package:
   name: tailscale
-  version: 1.74.1
-  epoch: 0
+  version: 1.76.6
+  epoch: 1
   description: The easiest, most secure way to use WireGuard and 2FA.
   copyright:
     - license: BSD-3-Clause
@@ -14,24 +14,166 @@ environment:
       - ca-certificates-bundle
       - curl
       - go
+      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 0ca17be4a2d5f5c54c9a2c74e3003de8d779c4f0
+      expected-commit: 1edcf9d466ceafedd2816db1a24d5ba4b0b18a5b
       repository: https://github.com/tailscale/tailscale
       tag: v${{package.version}}
 
   - runs: |
       ./build_dist.sh tailscale.com/cmd/tailscale
       ./build_dist.sh tailscale.com/cmd/tailscaled
+      ./build_dist.sh tailscale.com/cmd/connector-gen
+      ./build_dist.sh tailscale.com/cmd/derper
+      ./build_dist.sh tailscale.com/cmd/derpprobe
+      ./build_dist.sh tailscale.com/cmd/get-authkey
+      ./build_dist.sh tailscale.com/cmd/gitops-pusher
+      ./build_dist.sh tailscale.com/cmd/k8s-nameserver
+      ./build_dist.sh tailscale.com/cmd/k8s-operator
+      ./build_dist.sh tailscale.com/cmd/speedtest
+      ./build_dist.sh tailscale.com/cmd/testcontrol
+      ./build_dist.sh tailscale.com/cmd/tsidp
 
   - runs: |
       install -Dm755 ${{package.name}} ${{targets.destdir}}/usr/bin/tailscale
       install -Dm755 ${{package.name}}d ${{targets.destdir}}/usr/sbin/tailscaled
 
   - uses: strip
 
+subpackages:
+  - name: tailscale-extra-connector-gen
+    description: "Tool to generate app connector configuration and flags from service provider address data."
+    pipeline:
+      - runs: |
+          binname=connector-gen
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify connector-gen Version
+          runs: |
+            connector-gen --version
+            connector-gen --help
+              
+  - name: tailscale-extra-derper
+    description: "The derper binary is a simple DERP server."
+    pipeline:
+      - runs: |
+          binname=derper
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify connector-gen Version
+          runs: |
+            derper --version
+            derper --help
+
+  - name: tailscale-extra-derpprobe
+    description: "The derpprobe binary probes derpers."
+    pipeline:
+      - runs: |
+          binname=derpprobe
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify derpprobe Version
+          runs: |
+            derpprobe --version
+            derpprobe --help
+              
+  - name: tailscale-extra-get-authkey
+    description: "Allocates an authkey using an OAuth API client https://tailscale.com/s/oauth-clients and prints it to stdout for scripts to capture and use."
+    pipeline:
+      - runs: |
+          binname=get-authkey
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify get-authkey Version
+          runs: |
+            get-authkey --version
+            get-authkey --help
+          
+  - name: tailscale-extra-gitops-pusher
+    description: "Command gitops-pusher allows users to use a GitOps flow for managing Tailscale ACLs."
+    pipeline:
+      - runs: |
+          binname=gitops-pusher
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify gitops-pusher Version
+          runs: |
+            gitops-pusher --version
+            gitops-pusher --help
+          
+  - name: tailscale-extra-k8s-nameserver
+    description: "Simple nameserver implementation meant to be used with k8s-operator to allow to resolve magicDNS names associated with tailnet proxies in cluster."
+    pipeline:
+      - runs: |
+          binname=k8s-nameserver
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify k8s-nameserver Version
+          runs: |
+            k8s-nameserver --version
+            k8s-nameserver --help
+          
+  - name: tailscale-extra-k8s-operator
+    description: "Provides a way to expose services running in a Kubernetes cluster to your Tailnet."
+    pipeline:
+      - runs: |
+          binname=k8s-operator
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify k8s-operator Version
+          runs: |
+            k8s-operator --version
+            k8s-operator --help           
+            
+  - name: tailscale-extra-speedtest
+    description: "Tailscale speedtest program"
+    pipeline:
+      - runs: |
+          binname=speedtest
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify speedtest Version
+          runs: |
+            speedtest --version
+            speedtest --help                   
+            
+  - name: tailscale-extra-testcontrol
+    description: "Program testcontrol runs a simple Tailscale test control server."
+    pipeline:
+      - runs: |
+          binname=testcontrol
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify testcontrol Version
+          runs: |
+            testcontrol --version
+            testcontrol --help     
+            
+  - name: tailscale-extra-tsidp
+    description: "The tsidp command is an OpenID Connect Identity Provider server."
+    pipeline:
+      - runs: |
+          binname=tsidp
+          install -Dm755 "$binname" ${{targets.destdir}}/usr/bin/"$binname"
+    test:
+      pipeline:
+        - name: Verify tsidp Version
+          runs: |
+            tsidp --version
+            tsidp --help
+            
 update:
   enabled: true
   github: