| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-04 | ipn: add watch opt to include actions in health messages | James Sanderson | 3 | -17/+161 |
| 2025-06-03 | ssh/tailssh: display more useful error messages when authentication fails | Percy Wegmann | 2 | -30/+73 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 5 | -73/+712 |
| 2025-06-03 | posture: propagate serial number from MDM on Android | Anton Tolchanov | 3 | -6/+7 |
| 2025-06-03 | ipn/ipnlocal: fix deadlock when filtering DisplayMessage URLs | James Sanderson | 2 | -2/+13 |
| 2025-06-02 | go.mod,wgengine/magicsock: update wireguard-go (#16148) | Jordan Whited | 10 | -35/+43 |
| 2025-05-30 | tsconsensus: enable writing state to disk | Fran Bull | 5 | -7/+80 |
| 2025-05-30 | syncs: fix AtomicValue.CompareAndSwap (#16137) | Joe Tsai | 2 | -2/+25 |
| 2025-05-30 | controlclient,health,ipnlocal,tailcfg: add DisplayMessage support | James Sanderson | 7 | -22/+417 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | util/set: add SmallSet.SoleElement, fix bug, add more tests | Brad Fitzpatrick | 2 | -5/+54 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 5 | -36/+39 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 2 | -9/+21 |
| 2025-05-29 | ipn/ipnlocal: fix data race when accessing b.appConnector | Nick Khyl | 2 | -7/+15 |
| 2025-05-29 | util/set: add SmallSet | Brad Fitzpatrick | 2 | -0/+225 |
| 2025-05-28 | go.toolchain.rev: bump to 1.24.3 (#16060) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-05-28 | tsnet: remove an expired configuration-path migration step (#16120) | M. J. Fromberger | 1 | -47/+1 |
| 2025-05-28 | net/dns: cache dns.Config for reuse when compileConfig fails (#16059) | Jonathan Nobels | 4 | -61/+76 |
| 2025-05-28 | wgengine/magicsock: implement relayManager endpoint probing (#16029) | Jordan Whited | 4 | -126/+215 |
| 2025-05-28 | ipn: set RouteAll=true by default for new accounts on iOS and Android (#16110) | Jonathan Nobels | 1 | -1/+2 |
| 2025-05-27 | .github/workflows: use Ubuntu 24.04 images (#16097) | Irbe Krumina | 1 | -18/+18 |
| 2025-05-26 | feature/capture: fix wireshark decoding and add new disco frame types (#16089) | Mike O'Driscoll | 1 | -1/+5 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | ipn/ipnlocal: improve dohQuery error to suggest `?dns=` and `?q=` (#16056) | Zach Buchheit | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | ssh/tailssh: exclude Android from Linux build tags | Brad Fitzpatrick | 5 | -6/+6 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 8 | -168/+183 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 9 | -71/+338 |
| 2025-05-22 | control/controlclient,health,tailcfg: refactor control health messages (#15839) | James 'zofrex' Sanderson | 12 | -122/+495 |
| 2025-05-21 | VERSION.txt: this is v1.85.0 (#16042)v1.85.0-pre | Jonathan Nobels | 1 | -1/+1 |
| 2025-05-21 | ipn/store: remove a layer of indirection for registering stores (#15986) | Andrew Lytvynov | 4 | -21/+4 |
| 2025-05-20 | ipn,ipnlocal,taildrop: use SAF for Android files (#15976) | kari-ts | 5 | -84/+371 |
| 2025-05-20 | wgengine/magicsock: fix outdated heartbeat comment (#16023) | Jordan Whited | 1 | -1/+1 |
| 2025-05-20 | prober: update header check test (#15993) | Mike O'Driscoll | 1 | -10/+29 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | wgengine/magicsock: introduce virtualNetworkID type (#16021) | Jordan Whited | 4 | -14/+100 |
| 2025-05-19 | ipn/ipnlocal: make GetExt work earlier, before extension init | Brad Fitzpatrick | 3 | -8/+59 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | wgengine/magicsock: fix pong handling 'EndpointChange' reporting (#16018) | Jordan Whited | 1 | -4/+4 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 11 | -27/+77 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 13 | -21/+1431 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 9 | -25/+359 |
| 2025-05-19 | cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to c... | Irbe Krumina | 10 | -801/+1453 |
| 2025-05-16 | wgengine/magicsock: add missing logf arg (#15995) | Jordan Whited | 1 | -1/+1 |
| 2025-05-16 | wgengine/magicsock: implement relayManager handshaking (#15977) | Jordan Whited | 4 | -55/+393 |
| 2025-05-16 | prober: correct content-type response (#15989) | Mike O'Driscoll | 2 | -1/+4 |
| 2025-05-15 | cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) | Patrick O'Doherty | 2 | -9/+91 |