This website requires JavaScript.
5aeee1d8a5
.github/workflows: double the timeout for golangci-lint (#18404 )
Simon Law
2026-01-14 11:53:14 -08:00
c3b7f24051
ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18173 )
Tom Meadows and James Tucker
2026-01-14 18:20:00 +00:00
e9d82767e5
cmd/containerboot: allow for automatic ID token generation
Mario Minardi
2026-01-13 17:30:57 -07:00
02af7c963c
tsnet: allow for automatic ID token generation
Mario Minardi
2026-01-13 17:06:48 -07:00
28f163542c
.github/actions/go-cache: build cigocacher using remote path, fall back to ./tool/go (#18409 )
Irbe Krumina
2026-01-14 15:15:02 +00:00
6a6aa805d6
cmd,feature: add identity token auto generation for workload identity (#18373 )
Danni Popova
2026-01-14 15:00:59 +00:00
58042e2de3
metrics: add a NewSet and Set.NewLabelMap helpers
Anton Tolchanov
2026-01-13 11:43:03 -05:00
17b0c7bfb3
metrics: add a NewLabelMap helper to create and register label maps
Anton Tolchanov
2026-01-12 15:09:04 -05:00
76fb09c6bd
.github/workflows: fix timeouts by caching packages for golangci-lint (#18398 )
Simon Law
2026-01-13 09:56:53 -08:00
8c17d871b3
ipn/store/kubestore: don't load write replica certs in memory (#18395 )
Irbe Krumina
2026-01-13 13:43:17 +01:00
87e108e10c
docs: add instructions on referencing pull requests in commit messages
Harry Harpham
2026-01-12 09:09:05 -07:00
78c8d14254
tsnet: use errors.Join and idiomatic field order
Harry Harpham
2026-01-09 12:54:39 -07:00
aadc4f2ef4
wgengine/magicsock: add home DERP region usermetric (#18062 )
Raj Singh
2026-01-09 16:47:56 -05:00
5db95ec376
go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374 )
Patrick O'Doherty
2026-01-09 12:16:53 -08:00
3c1be083a4
tsnet: ensure funnel listener cleans up after itself when closed
Harry Harpham
2026-01-09 10:02:12 -07:00
f9762064cf
tsnet: reset serve config only once
Harry Harpham
2026-01-08 20:49:18 -07:00
5f34f14e14
net/udprelay: apply netns Control func to server socket(s)
Jordan Whited
2026-01-07 15:17:38 -08:00
4c37141ab7
cmd,internal,feature: add workload idenity support to gitops pusher
Mario Minardi
2025-12-17 09:49:34 -07:00
3e45e5b420
feature/featuretags: make QR codes modular (#18358 )
Simon Law
2026-01-08 10:28:40 -08:00
6aac87a84c
net/portmapper, go.mod: unfork our goupnp dependency
Andrew Dunham
2025-12-18 12:22:11 -05:00
5019dc8eb2
go.mod: bump mkctr dep (#18365 )
Tom Proctor
2026-01-08 15:39:29 +00:00
5be02ee6f8
cmd/k8s-operator/e2e,go.mod: remove client v2 dependency
Tom Proctor
2026-01-08 14:07:51 +00:00
73cb3b491e
cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415 )
Tom Proctor and chaosinthecrd
2026-01-08 12:01:12 +00:00
522a6e385e
cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles (#18182 )
Simon Law
2026-01-07 18:12:06 -08:00
e66531041b
cmd/containerboot: add OAuth and WIF auth support (#18311 )
Raj Singh
2026-01-07 16:22:14 -05:00
6c67deff38
cmd/distsign: add CLI for verifying package signatures (#18239 )
Andrew Lytvynov
2026-01-07 11:04:14 -08:00
480ee9fec0
ipn,cmd/tailscale/cli: set correct SNI name for TLS-terminated TCP Services (#17752 )
Naman Sood
2026-01-07 09:31:46 -05:00
4c3cf8bb11
wgengine/magicsock: extract IMDS utilities into a standalone package (#18334 )
Alex Valiushko
2026-01-06 21:58:52 -08:00
a662c541ab
.github/workflows: bump create-pull-request to 8.0.0
Mario Minardi
2026-01-06 11:49:43 -07:00
9a6282b515
.github: Bump actions/checkout from 4.2.2 to 5.0.0
dependabot[bot]
2026-01-06 15:32:48 +00:00
7de1b0b330
cmd/tailscale/cli: remove Services-specific subcommands from funnel (#18225 )
Harry Harpham
2026-01-06 09:10:19 -07:00
8ea90ba80d
cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys for stores that are not bound to a node (#18322 )
Irbe Krumina
2026-01-06 12:29:46 +01:00
68617bb82e
cmd/tailscaled: disable state encryption / attestation by default (#18336 )
Andrew Lytvynov
2026-01-05 17:05:00 -08:00
2e77b75e96
ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335 )
Andrew Lytvynov
2026-01-05 16:58:59 -08:00
39a61888b8
ssh/tailssh: send audit messages on SSH login (Linux)
James Tucker
2026-01-05 15:18:23 -08:00
b7081522e7
scripts/installer.sh: add ultramarine to supported OS list
Vince Liem
2026-01-05 21:10:18 +01:00
d451cd54a7
cmd/derper: add --acme-email flag for GCP cert mode (#18278 )
Raj Singh
2025-12-25 01:57:11 -05:00
2917ea8d0e
ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipnserver needs it
Nick Khyl
2025-12-19 12:22:19 -06:00
9c3a420e15
cmd/tailscale/cli: document why there's no --force-reauth on login
Alex Chan
2025-12-22 13:38:13 +00:00
ee59470270
net/udprelay: remove tailscaled_peer_relay_endpoints_total (#18254 )
Alex Valiushko
2025-12-19 16:15:41 -08:00
90b4358113
cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252 )
Irbe Krumina
2025-12-19 15:59:26 +00:00
c40f352103
net/udprelay: expose peer relay metrics (#18218 )
Alex Valiushko
2025-12-18 16:12:50 -08:00
bb3529fcd4
cmd/containerboot: support egress to Tailscale Service FQDNs (#17493 )
Tom Proctor
2025-12-18 17:06:42 +00:00
eed5e95e27
docs: use -x for cherry-picks
Tom Proctor
2025-12-17 20:19:41 +00:00
b73fb467e4
ipn/ipnlocal: log cert renewal failures (#18246 )
Irbe Krumina
2025-12-18 09:58:13 +00:00
e4847fa77b
go.toolchain.rev: update to Go 1.25.5 (#18123 )
Brendan Creane
2025-12-17 18:17:25 -08:00
ce7e1dea45
types/persist: omit Persist.AttestationKey based on IsZero (#18241 )
Andrew Lytvynov
2025-12-17 17:27:35 -08:00
b21cba0921
cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230 )
Tom Meadows
2025-12-17 20:58:47 +01:00
323604b76c
net/dns/resolver: log source IP of forwarded queries
Andrew Dunham
2025-12-16 17:19:16 -05:00
3e89068792
net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823 )
Jonathan Nobels
2025-12-17 12:32:40 -05:00
0fd1670a59
client/local: add method to set gauge metric to a value
Will Norris
2025-12-15 14:01:00 -08:00
f174ecb6fd
words: 33 tails and 26 scales (#18213 )
stratself
2025-12-16 19:20:33 +07:00
a663639bea
net/udprelay: replace map+sync.Mutex with sync.Map for VNI lookup
Jordan Whited
2025-12-15 12:14:34 -08:00
951d711054
client/systray: add missing deferred unlock for httpCache mutex
Will Norris
2025-12-15 08:20:45 -08:00
d0d993f5d6
.github,cmd/cigocacher: add flags --version --stats --cigocached-host
Tom Proctor
2025-12-12 13:58:16 +00:00
d7a5624841
cmd/k8s-operator: fix statefulset template yaml indentation (#18194 )
Tom Meadows
2025-12-15 10:27:59 +00:00
cb5fa35f57
.github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180 )
Irbe Krumina
2025-12-12 18:10:00 +00:00
3ef9787379
tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195 )
James 'zofrex' Sanderson
2025-12-12 12:05:05 +00:00
65182f2119
ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175 )
Raj Singh
2025-12-12 02:53:21 +05:30
9613b4eecc
logtail: add metrics (#18184 )
Joe Tsai
2025-12-11 10:49:48 -08:00
0df4631308
ipn/ipnlocal: avoid ResetAndStop panic
Brad Fitzpatrick
2025-12-11 08:46:53 -08:00
6ace3995f0
portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185 )
Simon Law
2025-12-10 18:37:03 -08:00
6428ba01ef
logtail/filch: rewrite the package (#18143 )
Joe Tsai
2025-12-10 15:32:30 -08:00
c870d3811d
net/{packet,tstun},wgengine: update disco key when receiving via TSMP (#18158 )
Claus Lensbøl and James Tucker
2025-12-10 14:27:20 -05:00
723b9af21a
Dockerfile,Dockerfile.base: link iptables to legacy binary (#18177 )
Irbe Krumina
2025-12-10 18:57:51 +00:00
8eda947530
cmd/derper: add GCP Certificate Manager support (#18161 )
Raj Singh and Brad Fitzpatrick
2025-12-10 04:51:53 +05:30
1dfdee8521
net/dns: retrample resolve.conf when another process has trampled it (#18069 )
Claus Lensbøl
2025-12-09 14:55:26 -05:00
a9b37c510c
net/udprelay: re-use mono.Time in control packet handling
Jordan Whited
2025-12-09 11:25:34 -08:00
363d882306
net/udprelay: use mono.Time instead of time.Time
Simar
2025-11-24 19:12:02 -07:00
076d5c7214
appc,feature: add the start of new conn25 app connector
Fran Bull
2025-12-08 10:47:32 -08:00
dd1bb8ee42
.github: add cigocacher release workflow
Tom Proctor
2025-12-08 15:45:09 +00:00
378ee20b9a
cmd/tailscale/cli: stabilise the output of tailscale lock status --json
Alex Chan
2025-11-20 11:28:18 +00:00
da0ea8ef3e
Revert "ipn/ipnlocal: shut down old control client synchronously on reset"
Nick Khyl
2025-12-07 18:26:45 -06:00
c7b10cb39f
scripts/installer.sh: add SteamOS handling (#18159 )
Erisa A
2025-12-08 20:19:40 +00:00
7d3097d3b5
tka: add some more tests for Bootstrap()
Alex Chan
2025-12-08 12:11:04 +00:00
2a0ddb7897
cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140 )
Irbe Krumina
2025-12-08 15:19:28 +00:00
d5c893195b
cmd/k8s-operator: don't log errors on not found objects. (#18142 )
Irbe Krumina
2025-12-08 11:19:01 +00:00
d349370e55
client/systray: change systray to start after graphical.target (#18138 )
Claus Lensbøl
2025-12-05 11:05:49 -05:00
cf40cf5ccb
ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (#17851 )
James 'zofrex' Sanderson
2025-12-05 13:33:47 +00:00
f4d34f38be
cmd/tailscale,ipn: add Unix socket support for serve
Peter A. and Lachlan Donald
2025-11-28 23:39:41 +01:00
557457f3c2
ipn/ipnlocal: fix LocalBackend deadlock when packet arrives during profile switch (#18126 )
Nick Khyl
2025-12-04 09:13:13 -06:00
d199ecac80
ipn/ipnlocal: shut down old control client synchronously on reset
Nick Khyl
2025-12-03 19:54:52 -06:00
7bc25f77f4
go.toolchain.rev: update to Go 1.25.5 (#18123 )
Andrew Lytvynov
2025-12-03 11:20:46 -08:00
6a44990b09
net/udprelay: bind multiple sockets per af on Linux
Jordan Whited
2025-12-02 11:38:47 -08:00
e33f6aa3ba
go.mod: bump the version of setec
Alex Chan
2025-12-03 13:52:33 +00:00
f8cd07fb8a
.github: make cigocacher script more robust
Tom Proctor
2025-12-02 17:35:15 +00:00
b8c58ca7c1
wgengine: fix TSMP/ICMP callback leak
Brad Fitzpatrick
2025-12-02 10:16:35 -08:00
536188c1b5
tsnet: enable node registration via federated identity
Gesa Stupperich
2025-11-25 08:45:11 +00:00
957a443b23
cmd/netlogfmt: allow empty --resolve-addrs flag (#18103 )
Joe Tsai
2025-12-02 09:08:48 -08:00
bd5c50909f
scripts/installer: add TAILSCALE_VERSION environment variable (#18014 )
Raj Singh
2025-12-02 09:57:21 -06:00
22a815b6d2
tool: bump binaryen wasm optimiser version 111 -> 125
Tom Proctor
2025-12-02 11:32:06 +00:00
8976b34cb8
licenses: update license notices
License Updater
2025-12-01 15:02:53 +00:00
77dcdc223e
cleanup: fix typos across multiple files
Naasir
2025-12-02 13:19:47 +05:30
ece6e27f39
.github,cmd/cigocacher: use cigocacher for windows
Tom Proctor
2025-11-25 23:01:32 +00:00
97f1fd6d48
.github: only save cache on main
Tom Proctor
2025-12-01 21:42:57 +00:00
37b4dd047f
k8s-operator: Fix typos in egress-pod-readiness.go
Shaikh Naasir
2025-12-01 21:10:24 +05:30
bd12d8f12f
cmd/tailscale/cli: soften the warning on --force-reauth for seamless
Alex Chan
2025-10-09 11:58:29 +01:00
34dff57137
feature/posture: log method and full URL for posture identity requests
Anton Tolchanov
2025-11-27 20:03:09 +00:00
f36eb81e61
cmd/k8s-operator fix populateTLSSecret on tests (#18088 )
Fernando Serboncini
2025-11-28 10:22:43 -05:00
7c5c02b77a
cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596 )
Fernando Serboncini
2025-11-28 09:16:18 -05:00