| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-11-26 | WIPbradfitz/lazy_wg_pushdown2 | Brad Fitzpatrick | 6 | -5/+91 |
| 2025-11-26 | wgengine{,/wgcfg}: push down lazy config into wireguard-go | Brad Fitzpatrick | 9 | -593/+51 |
| 2025-11-26 | wgengine: simplify how discokey change session dropping is implemented | Brad Fitzpatrick | 1 | -37/+9 |
| 2025-11-26 | syncs: add means of declare locking assumptions for debug mode validation | Brad Fitzpatrick | 3 | -0/+48 |
| 2025-11-26 | VERSION.txt: this is v1.93.0 (#18074)v1.93.0-pre | Jonathan Nobels | 1 | -1/+1 |
| 2025-11-26 | derp/derpserver: add a unique sender cardinality estimate | James Tucker | 8 | -4/+238 |
| 2025-11-26 | feature/tpm: return opening errors from both /dev/tpmrm0 and /dev/tpm0 (#18071) | Andrew Lytvynov | 1 | -1/+8 |
| 2025-11-26 | util/execqueue: don't hold mutex in RunSync | Brad Fitzpatrick | 2 | -17/+29 |
| 2025-11-26 | tstest/integration: add integration test for Tailnet Lock | Alex Chan | 7 | -286/+573 |
| 2025-11-25 | cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 | Jordan Whited | 9 | -51/+48 |
| 2025-11-25 | ipn/serve: validate service paths in HasPathHandler | Sachin Iyer | 2 | -0/+44 |
| 2025-11-25 | net/tstun: add TSMPDiscoAdvertisement to TSMPPing (#17995) | Claus Lensbøl | 7 | -25/+280 |
| 2025-11-25 | ipn/ipnlocal: don't panic if there are no suitable exit nodes | Alex Chan | 2 | -0/+66 |
| 2025-11-25 | tsconsensus: skip integration tests in CI | Fran Bull | 1 | -11/+2 |
| 2025-11-25 | tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to... | Brad Fitzpatrick | 9 | -43/+147 |
| 2025-11-25 | ipn/ipnlocal: test traffic-steering when feature is not enabled (#17997) | Simon Law | 2 | -0/+23 |
| 2025-11-25 | ipn/ipnlocal: do not call controlclient.Client.Shutdown with b.mu held | Nick Khyl | 1 | -7/+10 |
| 2025-11-25 | cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not ... | David Bond | 3 | -26/+71 |
| 2025-11-24 | ipn/ipnlocal: replace log.Printf with logf (#18045) | Simon Law | 2 | -9/+15 |
| 2025-11-24 | cmd/tailscale,feature/relayserver,ipn: add relay-server-static-endpoints set ... | Jordan Whited | 8 | -138/+278 |
| 2025-11-24 | net/udprelay: use blake2s-256 MAC for handshake challenge | Jordan Whited | 2 | -57/+227 |
| 2025-11-24 | cmd/cigocacher,go.mod: add cigocacher cmd | Tom Proctor | 15 | -38/+470 |
| 2025-11-24 | ipn/ipnlocal: fix panic in driveTransport on network error | Andrew Dunham | 2 | -36/+89 |
| 2025-11-23 | tstest/integration/testcontrol: de-flake TestUserMetricsRouteGauges | Andrew Dunham | 1 | -0/+3 |
| 2025-11-21 | portlist,tstest: skip tests on kernels with /proc/net/tcp regression | Andrew Dunham | 5 | -1/+112 |
| 2025-11-21 | util/eventbus: use unbounded event queues for DeliveredEvents in subscribers | Nick Khyl | 3 | -39/+16 |
| 2025-11-21 | feature/relayserver: don't publish from within a subscribe fn goroutine | Jordan Whited | 1 | -1/+6 |
| 2025-11-21 | wgengine/userspace: run link change subscribers in eventqueue (#18024) | Claus Lensbøl | 1 | -1/+7 |
| 2025-11-21 | util/eventbus: add tests for a subscriber publishing events | Nick Khyl | 1 | -0/+60 |
| 2025-11-21 | util/eventbus: add tests for a subscriber trying to acquire the same mutex as... | Nick Khyl | 1 | -0/+70 |
| 2025-11-21 | tka: don't panic if no clock set in tka.Mem | Alex Chan | 1 | -1/+11 |
| 2025-11-20 | cmd/tailscaled,ipn: show a health warning when state store fails to open (#17... | Andrew Lytvynov | 14 | -4/+211 |
| 2025-11-20 | go.mod: bump golang.org/x/crypto (#18011) | Andrew Lytvynov | 5 | -6/+6 |
| 2025-11-20 | ipn/ipnlocal: add validations when setting serve config (#17950) | Harry Harpham | 5 | -314/+483 |
| 2025-11-20 | cmd/k8s-operator: add multi replica support for recorders (#17864) | David Bond | 10 | -151/+380 |
| 2025-11-19 | net/netns: remove spammy logs for interface binding caps | Jonathan Nobels | 1 | -6/+10 |
| 2025-11-19 | net/batching: fix import formatting | Brad Fitzpatrick | 1 | -1/+0 |
| 2025-11-20 | cmd/k8s-operator: use stable image for k8s-nameserver (#17985) | David Bond | 2 | -5/+4 |
| 2025-11-19 | cmd/tailscale/cli: allow remote target as service destination (#17607) | KevinLiang10 | 10 | -44/+221 |
| 2025-11-19 | licenses: update license notices | License Updater | 1 | -0/+1 |
| 2025-11-19 | ipn/ipnlocal: remove the always-true CanSupportNetworkLock() | Alex Chan | 1 | -28/+0 |
| 2025-11-19 | util/eventbus: simplify some reflect in Bus.pump | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-11-19 | cmd/tailscale/cli: remove Latin abbreviations from CLI help text | Alex Chan | 2 | -2/+2 |
| 2025-11-19 | ipn/ipnlocal: reduce profileManager boilerplate in network-lock tests | Alex Chan | 1 | -83/+33 |
| 2025-11-19 | cmd/k8s-operator: fix type comparison in apiserver proxy template (#17981) | Raj Singh | 1 | -3/+3 |
| 2025-11-19 | ipn/ipnlocal, tka: compact TKA state after every sync | Alex Chan | 10 | -31/+276 |
| 2025-11-19 | cmd/k8s-operator: default to stable image (#17848) | David Bond | 2 | -3/+3 |
| 2025-11-18 | feature/featuretags: add CacheNetMap feature tag for upcoming work | Brad Fitzpatrick | 3 | -0/+30 |
| 2025-11-18 | tailcfg: add some omitzero, adjust some omitempty to omitzero | Brad Fitzpatrick | 1 | -113/+113 |
| 2025-11-18 | cmd/netlogfmt: support resolving IP addresses to synonymous labels (#17955) | Joe Tsai | 1 | -62/+87 |