| Age | Commit message (Expand) | Author | Files | Lines |
| 2024-10-04 | logtail: remove LowMemory mode13685-low-memory-mode-in-logtail-may-no-longer-be-needed | Andrea Gottardo | 1 | -21/+1 |
| 2024-10-04 | hostinfo: update SetPackage doc with new Android values (#13537) | kari-ts | 1 | -2/+7 |
| 2024-10-04 | cmd/tailscale/cli: don't print disablement secrets if init fails (#13673) | Erisa A | 1 | -3/+6 |
| 2024-10-04 | cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Se... | Irbe Krumina | 20 | -37/+1651 |
| 2024-10-03 | cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle... | Irbe Krumina | 9 | -73/+272 |
| 2024-10-03 | safeweb: add StrictTransportSecurityOptions config (#13679) | Patrick O'Doherty | 2 | -0/+61 |
| 2024-10-03 | ssh/tailssh: pass window size pixels in IoctlSetWinsize events | Brad Fitzpatrick | 1 | -2/+4 |
| 2024-10-03 | logpolicy: force TLS 1.3 handshake | Andrea Gottardo | 1 | -0/+2 |
| 2024-10-03 | wgengine/netstack: check userspace ping success on Windows | Brad Fitzpatrick | 3 | -1/+118 |
| 2024-10-03 | control/controlclient: include HTTP status string in error message too | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-10-02 | wgengine/magicsock: avoid log spam from ReceiveFunc on shutdown | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-10-02 | tailcfg: add func to check for known valid ServiceProtos (#13668) | Naman Sood | 1 | -0/+10 |
| 2024-10-02 | ipn/ipnlocal: don't run portlist code unless service collection is on | Brad Fitzpatrick | 1 | -29/+8 |
| 2024-10-02 | wf/firewall: allow link-local multicast for permitted local routes when the k... | Nick Khyl | 2 | -2/+60 |
| 2024-10-02 | tstest: add the start of a testing wishlist | Brad Fitzpatrick | 1 | -0/+17 |
| 2024-10-02 | net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564) | Andrea Gottardo | 1 | -5/+23 |
| 2024-10-02 | control/control{client,http}: don't noise dial localhost:443 in http-only tests | Brad Fitzpatrick | 4 | -13/+41 |
| 2024-10-02 | control/controlhttp: rename a param from addr to optAddr for clarity | Brad Fitzpatrick | 1 | -14/+20 |
| 2024-10-02 | net/dnscache: don't fall back to an IPv6 dial if we don't have IPv6 | Brad Fitzpatrick | 1 | -2/+2 |
| 2024-10-02 | control/controlclient: bound ReportHealthChange context lifetime to Direct cl... | Brad Fitzpatrick | 1 | -1/+7 |
| 2024-10-02 | net/captivedetection: set Timeout on net.Dialer (#13613) | Andrea Gottardo | 1 | -1/+5 |
| 2024-10-02 | docs/windows/policy: add ADMX policy setting to configure the AuthKey | Nick Khyl | 2 | -0/+31 |
| 2024-10-01 | .github: Bump github/codeql-action from 3.26.8 to 3.26.9 (#13625) | dependabot[bot] | 1 | -3/+3 |
| 2024-10-01 | net/portmapper: don't treat 0.0.0.0 as a valid IP | Brad Fitzpatrick | 1 | -0/+4 |
| 2024-10-01 | net/portmapper: don't return unspecified/local external IPs | Andrew Dunham | 2 | -21/+92 |
| 2024-10-01 | control/controlhttp: fix connectivity on Alaska Air wifi | Brad Fitzpatrick | 2 | -0/+31 |
| 2024-10-01 | control/controlhttp: factor out some code in prep for future change | Brad Fitzpatrick | 2 | -12/+24 |
| 2024-10-01 | cmd/tailscale/cli: make 'tailscale debug ts2021' try twice | Brad Fitzpatrick | 1 | -5/+20 |
| 2024-09-30 | ssh: Add logic to set accepted environment variables in SSH session (#13559) | Mario Minardi | 6 | -55/+294 |
| 2024-09-30 | .github: Bump peter-evans/create-pull-request from 7.0.1 to 7.0.5 (#13626) | dependabot[bot] | 2 | -2/+2 |
| 2024-09-30 | logpolicy: don't create a filch buffer if logging is disabled | Anton Tolchanov | 1 | -31/+43 |
| 2024-09-29 | cmd/tsidp: add --dir flag | Maisem Ali | 1 | -0/+2 |
| 2024-09-29 | cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t... | Irbe Krumina | 14 | -25/+1667 |
| 2024-09-27 | cmd/k8s-operator: remove auth key once proxy has logged in (#13612) | Irbe Krumina | 3 | -26/+114 |
| 2024-09-27 | ipn/ipnlocal: add advertised and primary route metrics | Kristoffer Dalby | 3 | -1/+91 |
| 2024-09-27 | cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) | Tom Proctor | 11 | -15/+776 |
| 2024-09-26 | go.mod: upgrade golangci-lint | Andrew Dunham | 2 | -247/+212 |
| 2024-09-26 | net/captivedetection: exclude ipsec interfaces from captive portal detection ... | Andrea Gottardo | 1 | -1/+1 |
| 2024-09-26 | wgengine: make opts.Metrics mandatory | Kristoffer Dalby | 1 | -1/+6 |
| 2024-09-26 | {ipn,net,tsnet}: use tsaddr helpers | Kristoffer Dalby | 2 | -28/+11 |
| 2024-09-26 | client/web: use tsaddr helpers | Kristoffer Dalby | 1 | -15/+5 |
| 2024-09-26 | cmd/tailscale: use tsaddr helpers | Kristoffer Dalby | 1 | -32/+4 |
| 2024-09-26 | net/tsaddr: add WithoutExitRoutes and IsExitRoute | Kristoffer Dalby | 2 | -0/+181 |
| 2024-09-25 | ssh/tailssh: add logic for matching against AcceptEnv patterns (#13466) | Mario Minardi | 2 | -0/+250 |
| 2024-09-25 | wgengine/magicsock: fix check for EPERM on macOS | James Tucker | 2 | -7/+12 |
| 2024-09-25 | metrics: revert changes to MultiLabelMap's String method | Andrew Dunham | 2 | -6/+21 |
| 2024-09-25 | cmd/k8s-operator, k8s-operator: fix outdated kb links (#13585) | Cameron Stokes | 7 | -20/+20 |
| 2024-09-25 | wgengine/magicsock: only used cached results for GetLastNetcheckReport | Adrian Dewhurst | 1 | -11/+2 |
| 2024-09-25 | health: clean up updateBuiltinWarnablesLocked a bit, fix DERP warnings | Brad Fitzpatrick | 2 | -52/+76 |
| 2024-09-25 | util/usermetrics: make usermetrics non-global | Kristoffer Dalby | 27 | -126/+369 |