| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-10 | tailcfg,types/netmap: visible services in netmapadrianosela/visible-services | Adriano Sela Aviles | 6 | -0/+148 |
| 2026-04-10 | gokrazy: add arm64 natlab appliance image support | Brad Fitzpatrick | 7 | -3/+27 |
| 2026-04-10 | .github, tool/listpkgs: automatically find tests which use tstest.RequireRoot | Brad Fitzpatrick | 5 | -11/+82 |
| 2026-04-10 | cmd/derper,derp: add --rate-config file with SIGHUP reload (#19314) | Mike O'Driscoll | 3 | -52/+412 |
| 2026-04-10 | wgengine/router/osrouter: fix privileged tests missing fake netfilter runner | Amal Bansode | 1 | -0/+4 |
| 2026-04-10 | tstest: add RequireRoot helper | Brad Fitzpatrick | 4 | -18/+15 |
| 2026-04-10 | tka: Revert "improve logging for Compact and Commit operations" | Alex Chan | 2 | -13/+0 |
| 2026-04-10 | tka: keep the CompactionDefaults alongside the other limits | Alex Chan | 3 | -7/+19 |
| 2026-04-09 | ipn/ipnlocal: add netmap mutations to the ipn bus (#19120) | Jonathan Nobels | 4 | -13/+242 |
| 2026-04-09 | cmd/k8s-operator: set PreferDualStack on ProxyGroup egress services (#19194) | Fernando Serboncini | 2 | -3/+5 |
| 2026-04-09 | ssh/tailssh: fix default PATH for Debian | Andrew Dunham | 1 | -1/+1 |
| 2026-04-09 | tstest/natlab: add TestSubnetRouterFreeBSD with FreeBSD cloud image support | Brad Fitzpatrick | 6 | -39/+163 |
| 2026-04-09 | cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) | David Bond | 33 | -933/+909 |
| 2026-04-09 | tka: improve logging for Compact and Commit operations | Alex Chan | 2 | -0/+13 |
| 2026-04-08 | vmtest: add VM-based integration test framework | Brad Fitzpatrick | 12 | -11/+1382 |
| 2026-04-08 | tsweb: add TS_DEBUG_TRUSTED_CIDRS envknob to debug (#19283) | Jason O'Donnell | 2 | -0/+129 |
| 2026-04-08 | misc: add install-git-hooks.go and git hook for Change-Id tracking | Brad Fitzpatrick | 5 | -3/+408 |
| 2026-04-08 | tool/goexe: refactor to use windows_sys | Nathan Perry | 5 | -249/+79 |
| 2026-04-08 | tool: replace go.cmd with a 19KB Rust go.exe wrapper | Brad Fitzpatrick | 11 | -107/+757 |
| 2026-04-08 | tstest/natlab/vnet: add multi-NIC node support, DHCP fixes, and VIPs | Brad Fitzpatrick | 4 | -27/+314 |
| 2026-04-08 | tstest/integration/testcontrol: notify peers when subnet routes change | Brad Fitzpatrick | 1 | -0/+7 |
| 2026-04-08 | control/controlclient: avoid calls to ms.netmap() (#19281) | Claus Lensbøl | 2 | -18/+13 |
| 2026-04-08 | wgengine/netstack: allow UDP listeners to receive traffic on Service VIP addr... | Tom Meadows | 2 | -0/+216 |
| 2026-04-07 | tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths | Brad Fitzpatrick | 13 | -4/+108 |
| 2026-04-07 | go.toolchain.rev: update to Go 1.26.2 | Brad Fitzpatrick | 5 | -5/+5 |
| 2026-04-07 | derp: align FrameType docs casing | Jordan Whited | 3 | -20/+20 |
| 2026-04-07 | cmd/containerboot: rate-limit IPN bus netmap notifications | Doug Bryant | 1 | -3/+3 |
| 2026-04-07 | derp/derpserver: add per-connection receive rate limiting (#19222) | Mike O'Driscoll | 3 | -6/+190 |
| 2026-04-07 | licenses: update license notices | License Updater | 2 | -16/+16 |
| 2026-04-07 | k8s-operator/sessionrecording/ws: unify Read/Write frame parsing (#19227)alt | Fernando Serboncini | 3 | -166/+215 |
| 2026-04-07 | ipn/desktop: move behind feature/condregister | Brad Fitzpatrick | 4 | -12/+18 |
| 2026-04-07 | feature/conn25: add IPv6 support | Fran Bull | 3 | -115/+379 |
| 2026-04-07 | ipn/desktop: use runtime.Pinner to force heap-allocation of msg | Nick Khyl | 1 | -4/+7 |
| 2026-04-07 | ipn/localapi, cli, clientmetric: add ipnbus feature tag; fix omit.go stub | Brad Fitzpatrick | 6 | -4/+37 |
| 2026-04-07 | wgengine/userspace: add extra check for tsmp learned keys in engine (#19223) | Claus Lensbøl | 2 | -4/+115 |
| 2026-04-07 | control/controlclient: add rwlock to peers in mapsession (#19261) | Claus Lensbøl | 3 | -10/+97 |
| 2026-04-07 | ssh/tailssh: fix race in session termination message delivery | Brad Fitzpatrick | 2 | -9/+14 |
| 2026-04-07 | .golangci.yml: enforce gliderssh import alias via importas linter | Kristoffer Dalby | 1 | -0/+6 |
| 2026-04-07 | ssh: replace tempfork with tailscale/gliderssh | Kristoffer Dalby | 14 | -172/+460 |
| 2026-04-07 | tempfork/gliderlabs/ssh: remove tempfork | Kristoffer Dalby | 21 | -2815/+51 |
| 2026-04-06 | ipn/ipnlocal,net/netmon: make frequent darkwake more efficient | James Tucker | 5 | -35/+410 |
| 2026-04-06 | go.toolchain.rev: bump our Go toolchain for caching fix | Brad Fitzpatrick | 3 | -3/+3 |
| 2026-04-06 | safeweb: add CSRF token helpers and set cookie path to root (#19265) | Fernando Serboncini | 1 | -1/+11 |
| 2026-04-06 | ssh/tailssh: fix integration test hang due to missing host keys | Brad Fitzpatrick | 1 | -1/+15 |
| 2026-04-06 | tailcfg: fix ClientVersion.UrgentSecurityUpdate doc comment (#19214) | Dylan Bargatze | 1 | -1/+1 |
| 2026-04-05 | cmd/cloner, cmd/viewer: handle named map/slice types with Clone/View methods | Brad Fitzpatrick | 10 | -6/+440 |
| 2026-04-05 | ipn/ipnlocal: add health.Tracker to tests where it was warning in CI | Brad Fitzpatrick | 4 | -3/+20 |
| 2026-04-05 | ci: fix Windows benchmarks running all tests instead of just benchmarks | Brad Fitzpatrick | 1 | -1/+4 |
| 2026-04-05 | client/web: fix nil metricCapture crash in mockLocalAPI | Brad Fitzpatrick | 1 | -1/+3 |
| 2026-04-05 | cmd/vet: add subtestnames analyzer; fix all existing violations | Brad Fitzpatrick | 87 | -982/+1405 |