This website requires JavaScript.
3ec5be3f51
all: remove AUTHORS file and references to it
2026-01-23 13:21:57 -08:00
ce12863ee5
ipn/ipnlocal: manage per-profile subdirectories in TailscaleVarRoot (#18485 )
2026-01-23 10:09:46 -08:00
df54751725
scripts/installer.sh: allow running dnf5 install script twice (#18492 )
2026-01-23 08:30:19 -08:00
63d563e734
tsnet: add support for a user-supplied tun.Device
2026-01-15 20:35:41 -08:00
c062230cce
tsnet: clarify that ListenService starts the server if necessary
2026-01-22 13:05:37 -07:00
151644f647
wgengine: send disco key via TSMP on first contact (#18215 )
2026-01-22 14:50:24 -05:00
4b7585df77
net/udprelay: add tailscaled_peer_relay_endpoints gauge (#18265 )
2026-01-21 21:55:37 -08:00
6dc0bd834c
util/limiter: don't panic when dumping a new Limiter
2026-01-12 11:43:41 -08:00
2cb86cf65e
cmd/k8s-operator,k8s-operator: Allow the use of multiple tailnets (#18344 )
2026-01-21 12:35:44 +00:00
e30626c480
version: add support for reporting the mac variant from tailscale --version (#18462 )
2026-01-20 15:05:03 -05:00
0a5639dcc0
net/udprelay: advertise addresses from cloud metadata service (#18368 )
2026-01-19 18:03:30 -08:00
7213b35d85
k8s-operator,kube: remove enableSessionRecording from Kubernetes Cap Map (#18452 )
2026-01-19 16:06:40 +00:00
7676030355
net/portmapper: Stop replacing the internal port with the upnp external port (#18349 )
2026-01-19 15:32:13 +01:00
3840183be9
tsnet: add support for Services
2026-01-13 14:36:12 -07:00
1b88e93ff5
ipn/ipnlocal: allow retrieval of serve config ETags from local API
2026-01-13 14:26:20 -07:00
643e91f2eb
net/netmon: move TailscaleInterfaceIndex out of netmon.State (#18428 )
2026-01-16 14:53:23 -05:00
1478028591
docs/windows/policy: use a separate value to track the configuration state of EnableDNSRegistration
2026-01-16 11:21:17 -06:00
1cc6f3282e
k8s-operator,kube: allowing k8s api request events to be enabled via grants (#18393 )
2026-01-16 13:29:12 +00:00
54d77898da
tool/gocross: update gocross-wrapper.ps1 to use absolute path for resolving tar
2026-01-14 14:33:33 -07:00
1a79abf5fb
VERSION.txt: this is v1.95.0 (#18414 )
2026-01-14 14:19:17 -08:00
5aeee1d8a5
.github/workflows: double the timeout for golangci-lint (#18404 )
2026-01-14 11:53:14 -08:00
c3b7f24051
ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18173 )
2026-01-14 18:20:00 +00:00
e9d82767e5
cmd/containerboot: allow for automatic ID token generation
2026-01-13 17:30:57 -07:00
02af7c963c
tsnet: allow for automatic ID token generation
2026-01-13 17:06:48 -07:00
28f163542c
.github/actions/go-cache: build cigocacher using remote path, fall back to ./tool/go (#18409 )
2026-01-14 15:15:02 +00:00
6a6aa805d6
cmd,feature: add identity token auto generation for workload identity (#18373 )
2026-01-14 15:00:59 +00:00
58042e2de3
metrics: add a NewSet and Set.NewLabelMap helpers
2026-01-13 11:43:03 -05:00
17b0c7bfb3
metrics: add a NewLabelMap helper to create and register label maps
2026-01-12 15:09:04 -05:00
76fb09c6bd
.github/workflows: fix timeouts by caching packages for golangci-lint (#18398 )
2026-01-13 09:56:53 -08:00
8c17d871b3
ipn/store/kubestore: don't load write replica certs in memory (#18395 )
2026-01-13 13:43:17 +01:00
87e108e10c
docs: add instructions on referencing pull requests in commit messages
2026-01-12 09:09:05 -07:00
78c8d14254
tsnet: use errors.Join and idiomatic field order
2026-01-09 12:54:39 -07:00
aadc4f2ef4
wgengine/magicsock: add home DERP region usermetric (#18062 )
2026-01-09 16:47:56 -05:00
5db95ec376
go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374 )
2026-01-09 12:16:53 -08:00
3c1be083a4
tsnet: ensure funnel listener cleans up after itself when closed
2026-01-09 10:02:12 -07:00
f9762064cf
tsnet: reset serve config only once
2026-01-08 20:49:18 -07:00
5f34f14e14
net/udprelay: apply netns Control func to server socket(s)
2026-01-07 15:17:38 -08:00
4c37141ab7
cmd,internal,feature: add workload idenity support to gitops pusher
2025-12-17 09:49:34 -07:00
3e45e5b420
feature/featuretags: make QR codes modular (#18358 )
2026-01-08 10:28:40 -08:00
6aac87a84c
net/portmapper, go.mod: unfork our goupnp dependency
2025-12-18 12:22:11 -05:00
5019dc8eb2
go.mod: bump mkctr dep (#18365 )
2026-01-08 15:39:29 +00:00
5be02ee6f8
cmd/k8s-operator/e2e,go.mod: remove client v2 dependency
2026-01-08 14:07:51 +00:00
73cb3b491e
cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415 )
2026-01-08 12:01:12 +00:00
522a6e385e
cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles (#18182 )
2026-01-07 18:12:06 -08:00
e66531041b
cmd/containerboot: add OAuth and WIF auth support (#18311 )
2026-01-07 16:22:14 -05:00
6c67deff38
cmd/distsign: add CLI for verifying package signatures (#18239 )
2026-01-07 11:04:14 -08:00
480ee9fec0
ipn,cmd/tailscale/cli: set correct SNI name for TLS-terminated TCP Services (#17752 )
2026-01-07 09:31:46 -05:00
4c3cf8bb11
wgengine/magicsock: extract IMDS utilities into a standalone package (#18334 )
2026-01-06 21:58:52 -08:00
a662c541ab
.github/workflows: bump create-pull-request to 8.0.0
2026-01-06 11:49:43 -07:00
9a6282b515
.github: Bump actions/checkout from 4.2.2 to 5.0.0
2026-01-06 15:32:48 +00:00
7de1b0b330
cmd/tailscale/cli: remove Services-specific subcommands from funnel (#18225 )
2026-01-06 09:10:19 -07:00
8ea90ba80d
cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys for stores that are not bound to a node (#18322 )
2026-01-06 12:29:46 +01:00
68617bb82e
cmd/tailscaled: disable state encryption / attestation by default (#18336 )
2026-01-05 17:05:00 -08:00
2e77b75e96
ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335 )
2026-01-05 16:58:59 -08:00
39a61888b8
ssh/tailssh: send audit messages on SSH login (Linux)
2026-01-05 15:18:23 -08:00
b7081522e7
scripts/installer.sh: add ultramarine to supported OS list
2026-01-05 21:10:18 +01:00
d451cd54a7
cmd/derper: add --acme-email flag for GCP cert mode (#18278 )
2025-12-25 01:57:11 -05:00
2917ea8d0e
ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipnserver needs it
2025-12-19 12:22:19 -06:00
9c3a420e15
cmd/tailscale/cli: document why there's no --force-reauth on login
2025-12-22 13:38:13 +00:00
ee59470270
net/udprelay: remove tailscaled_peer_relay_endpoints_total (#18254 )
2025-12-19 16:15:41 -08:00
90b4358113
cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252 )
2025-12-19 15:59:26 +00:00
c40f352103
net/udprelay: expose peer relay metrics (#18218 )
2025-12-18 16:12:50 -08:00
bb3529fcd4
cmd/containerboot: support egress to Tailscale Service FQDNs (#17493 )
2025-12-18 17:06:42 +00:00
eed5e95e27
docs: use -x for cherry-picks
2025-12-17 20:19:41 +00:00
b73fb467e4
ipn/ipnlocal: log cert renewal failures (#18246 )
2025-12-18 09:58:13 +00:00
e4847fa77b
go.toolchain.rev: update to Go 1.25.5 (#18123 )
2025-12-17 18:17:25 -08:00
ce7e1dea45
types/persist: omit Persist.AttestationKey based on IsZero (#18241 )
2025-12-17 17:27:35 -08:00
b21cba0921
cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230 )
2025-12-17 20:58:47 +01:00
323604b76c
net/dns/resolver: log source IP of forwarded queries
2025-12-16 17:19:16 -05:00
3e89068792
net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823 )
2025-12-17 12:32:40 -05:00
0fd1670a59
client/local: add method to set gauge metric to a value
2025-12-15 14:01:00 -08:00
f174ecb6fd
words: 33 tails and 26 scales (#18213 )
2025-12-16 19:20:33 +07:00
a663639bea
net/udprelay: replace map+sync.Mutex with sync.Map for VNI lookup
2025-12-15 12:14:34 -08:00
951d711054
client/systray: add missing deferred unlock for httpCache mutex
2025-12-15 08:20:45 -08:00
d0d993f5d6
.github,cmd/cigocacher: add flags --version --stats --cigocached-host
2025-12-12 13:58:16 +00:00
d7a5624841
cmd/k8s-operator: fix statefulset template yaml indentation (#18194 )
2025-12-15 10:27:59 +00:00
cb5fa35f57
.github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180 )
2025-12-12 18:10:00 +00:00
3ef9787379
tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195 )
2025-12-12 12:05:05 +00:00
65182f2119
ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175 )
2025-12-12 02:53:21 +05:30
9613b4eecc
logtail: add metrics (#18184 )
2025-12-11 10:49:48 -08:00
0df4631308
ipn/ipnlocal: avoid ResetAndStop panic
2025-12-11 08:46:53 -08:00
6ace3995f0
portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185 )
2025-12-10 18:37:03 -08:00
6428ba01ef
logtail/filch: rewrite the package (#18143 )
2025-12-10 15:32:30 -08:00
c870d3811d
net/{packet,tstun},wgengine: update disco key when receiving via TSMP (#18158 )
2025-12-10 14:27:20 -05:00
723b9af21a
Dockerfile,Dockerfile.base: link iptables to legacy binary (#18177 )
2025-12-10 18:57:51 +00:00
8eda947530
cmd/derper: add GCP Certificate Manager support (#18161 )
2025-12-10 04:51:53 +05:30
1dfdee8521
net/dns: retrample resolve.conf when another process has trampled it (#18069 )
2025-12-09 14:55:26 -05:00
a9b37c510c
net/udprelay: re-use mono.Time in control packet handling
2025-12-09 11:25:34 -08:00
363d882306
net/udprelay: use mono.Time instead of time.Time
2025-11-24 19:12:02 -07:00
076d5c7214
appc,feature: add the start of new conn25 app connector
2025-12-08 10:47:32 -08:00
dd1bb8ee42
.github: add cigocacher release workflow
2025-12-08 15:45:09 +00:00
378ee20b9a
cmd/tailscale/cli: stabilise the output of tailscale lock status --json
2025-11-20 11:28:18 +00:00
da0ea8ef3e
Revert "ipn/ipnlocal: shut down old control client synchronously on reset"
2025-12-07 18:26:45 -06:00
c7b10cb39f
scripts/installer.sh: add SteamOS handling (#18159 )
2025-12-08 20:19:40 +00:00
7d3097d3b5
tka: add some more tests for Bootstrap()
2025-12-08 12:11:04 +00:00
2a0ddb7897
cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140 )
2025-12-08 15:19:28 +00:00
d5c893195b
cmd/k8s-operator: don't log errors on not found objects. (#18142 )
2025-12-08 11:19:01 +00:00
d349370e55
client/systray: change systray to start after graphical.target (#18138 )
2025-12-05 11:05:49 -05:00
cf40cf5ccb
ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (#17851 )
2025-12-05 13:33:47 +00:00
f4d34f38be
cmd/tailscale,ipn: add Unix socket support for serve
2025-11-28 23:39:41 +01:00
Will Norris
M. J. Fromberger
Francois Marier
James Tucker
Harry Harpham
Claus Lensbøl
Alex Valiushko
Josh Bleecher Snyder
David Bond
Jonathan Nobels
Tom Meadows
Eduardo Sorribas
Nick Khyl
Aaron Klotz
Nick O'Neill
Simon Law
Mario Minardi
Irbe Krumina
Danni Popova
Anton Tolchanov
Raj Singh
Patrick O'Doherty
Jordan Whited
Andrew Dunham
Tom Proctor
Andrew Lytvynov
Naman Sood
dependabot[bot]
Vince Liem
Alex Chan
Brendan Creane
stratself
James 'zofrex' Sanderson
Joe Tsai
Brad Fitzpatrick
Simar
Fran Bull
Nick Khyl
Erisa A
Peter A.