| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-18 | feature/tpm: log timing of TPM commandsawly/tpm-seal-timing | Andrew Lytvynov | 1 | -0/+11 |
| 2025-06-17 | feature/tpm: implement ipn.StateStore using TPM sealing | Andrew Lytvynov | 7 | -23/+500 |
| 2025-06-11 | cmd/natc: allow specifying the tsnet state dir | Fran Bull | 2 | -33/+34 |
| 2025-06-10 | types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoint (#16244) | Jordan Whited | 4 | -0/+33 |
| 2025-06-10 | go.toolchain.rev: bump to go 1.24.4 (#16230) | Patrick O'Doherty | 1 | -1/+1 |
| 2025-06-10 | cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) | Mike O'Driscoll | 8 | -55/+195 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 10 | -71/+143 |
| 2025-06-09 | types/netmap: fix NodeMutationEndpoints docs typo (#16234) | Jordan Whited | 1 | -1/+1 |
| 2025-06-09 | wgengine/magicsock: don't cancel in-progress relayManager work (#16233) | Jordan Whited | 1 | -32/+30 |
| 2025-06-09 | wgengine/relaymanager: don't start runLoop() on init() (#16231) | Jordan Whited | 1 | -1/+1 |
| 2025-06-09 | wgengine/magicsock: enable setting relay epAddr's as bestAddr (#16229) | Jordan Whited | 5 | -61/+212 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-06-09 | health: prefix Warnables received from the control plane | James Sanderson | 5 | -26/+34 |
| 2025-06-06 | ipn/ipnlocal: Update hostinfo to control on service config change (#16146) | KevinLiang10 | 2 | -8/+76 |
| 2025-06-06 | wgengine/magicsock: make endpoint.bestAddr Geneve-aware (#16195) | Jordan Whited | 14 | -386/+604 |
| 2025-06-06 | wgengine/magicsock: fix bpf fragmentation jump offsets (#16204) | Claus Lensbøl | 2 | -2/+78 |
| 2025-06-05 | cmd/natc: use new on disk state store for consensus | Fran Bull | 2 | -2/+34 |
| 2025-06-05 | net/packet: fix Parsed docs (#16200) | Jordan Whited | 1 | -3/+4 |
| 2025-06-04 | cmd/natc: add optional consensus backend | Fran Bull | 7 | -10/+1029 |
| 2025-06-04 | health: show DisplayMessage actions in 'tailscale status' | James Sanderson | 2 | -11/+35 |
| 2025-06-04 | ipn: add watch opt to include actions in health messages | James Sanderson | 3 | -17/+161 |
| 2025-06-03 | ssh/tailssh: display more useful error messages when authentication fails | Percy Wegmann | 2 | -30/+73 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 5 | -73/+712 |
| 2025-06-03 | posture: propagate serial number from MDM on Android | Anton Tolchanov | 3 | -6/+7 |
| 2025-06-03 | ipn/ipnlocal: fix deadlock when filtering DisplayMessage URLs | James Sanderson | 2 | -2/+13 |
| 2025-06-02 | go.mod,wgengine/magicsock: update wireguard-go (#16148) | Jordan Whited | 10 | -35/+43 |
| 2025-05-30 | tsconsensus: enable writing state to disk | Fran Bull | 5 | -7/+80 |
| 2025-05-30 | syncs: fix AtomicValue.CompareAndSwap (#16137) | Joe Tsai | 2 | -2/+25 |
| 2025-05-30 | controlclient,health,ipnlocal,tailcfg: add DisplayMessage support | James Sanderson | 7 | -22/+417 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | util/set: add SmallSet.SoleElement, fix bug, add more tests | Brad Fitzpatrick | 2 | -5/+54 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 5 | -36/+39 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 2 | -9/+21 |
| 2025-05-29 | ipn/ipnlocal: fix data race when accessing b.appConnector | Nick Khyl | 2 | -7/+15 |
| 2025-05-29 | util/set: add SmallSet | Brad Fitzpatrick | 2 | -0/+225 |
| 2025-05-28 | go.toolchain.rev: bump to 1.24.3 (#16060) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-05-28 | tsnet: remove an expired configuration-path migration step (#16120) | M. J. Fromberger | 1 | -47/+1 |
| 2025-05-28 | net/dns: cache dns.Config for reuse when compileConfig fails (#16059) | Jonathan Nobels | 4 | -61/+76 |
| 2025-05-28 | wgengine/magicsock: implement relayManager endpoint probing (#16029) | Jordan Whited | 4 | -126/+215 |
| 2025-05-28 | ipn: set RouteAll=true by default for new accounts on iOS and Android (#16110) | Jonathan Nobels | 1 | -1/+2 |
| 2025-05-27 | .github/workflows: use Ubuntu 24.04 images (#16097) | Irbe Krumina | 1 | -18/+18 |
| 2025-05-26 | feature/capture: fix wireshark decoding and add new disco frame types (#16089) | Mike O'Driscoll | 1 | -1/+5 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | ipn/ipnlocal: improve dohQuery error to suggest `?dns=` and `?q=` (#16056) | Zach Buchheit | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | ssh/tailssh: exclude Android from Linux build tags | Brad Fitzpatrick | 5 | -6/+6 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 8 | -168/+183 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 9 | -71/+338 |
| 2025-05-22 | control/controlclient,health,tailcfg: refactor control health messages (#15839) | James 'zofrex' Sanderson | 12 | -122/+495 |