| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-11-15 | types/netmap: remove some useless denormalized fields from NetworkMapbradfitz/nm_cache | Brad Fitzpatrick | 7 | -17/+26 |
| 2025-11-15 | wgengine/netlog: fix send to closed channel in test | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-11-15 | util/clientmetric: fix regression causing Metric.v to be uninitialised | Avery Palmer | 1 | -5/+8 |
| 2025-11-15 | cmd/tailscale/cli: fix panic in netcheck with mismatched DERP region IDs | Xinyu Kuo | 1 | -1/+5 |
| 2025-11-14 | net/udprelay: implement Server.SetStaticAddrPorts (#17909) | Jordan Whited | 4 | -72/+64 |
| 2025-11-14 | control/controlclient,ipn/ipnlocal: replace State enum with boolean flags | James Tucker | 5 | -193/+224 |
| 2025-11-14 | feature/tpm: check IsZero in clone instead of just nil (#17884) | Andrew Lytvynov | 2 | -4/+7 |
| 2025-11-14 | ipn/localapi: use constant-time comparison for RequiredPassword (#17906) | Andrew Lytvynov | 1 | -1/+2 |
| 2025-11-14 | various: adds missing apostrophes to comments | Alex Chan | 13 | -27/+27 |
| 2025-11-14 | scripts/installer.sh: compare major versions numerically (#17904) | Simon Law | 1 | -19/+20 |
| 2025-11-14 | net/netmon: do not abandon a subscriber when exiting early (#17899) | M. J. Fromberger | 1 | -19/+3 |
| 2025-11-14 | wgengine/wgcfg/nmcfg: reduce wireguard reconfig log spam | Brad Fitzpatrick | 1 | -44/+31 |
| 2025-11-14 | logpolicy: fix nil pointer dereference with invalid TS_LOG_TARGET | Andrew Dunham | 2 | -4/+54 |
| 2025-11-14 | control/controlclient: make Observer optional | Brad Fitzpatrick | 3 | -11/+10 |
| 2025-11-14 | feature/relayserver: fix Shutdown() deadlock (#17898) | Jordan Whited | 1 | -1/+4 |
| 2025-11-14 | ipn/ipnlocal: log prefs changes and reason in Start (#17876) | James 'zofrex' Sanderson | 1 | -7/+13 |
| 2025-11-14 | tka: add a test for unmarshaling existing AUMs | Alex Chan | 1 | -0/+76 |
| 2025-11-13 | feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (#17881) | Jordan Whited | 4 | -169/+324 |
| 2025-11-13 | ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) | Brad Fitzpatrick | 9 | -505/+360 |
| 2025-11-13 | cmd/cloner: support cloning arbitrarily-nested maps | Andrew Dunham | 4 | -32/+354 |
| 2025-11-13 | cmd/tailscale/cli: remove service flag from funnel command (#17850) | Naman Sood | 1 | -1/+1 |
| 2025-11-12 | cmd/{cloner,viewer}: handle maps of views | Andrew Dunham | 5 | -10/+120 |
| 2025-11-12 | net/udprelay: replace VNI pool with selection algorithm (#17868) | Jordan Whited | 2 | -12/+56 |
| 2025-11-12 | licenses: update license notices | License Updater | 3 | -12/+16 |
| 2025-11-12 | util/dnsname: fix test error message | Fran Bull | 1 | -1/+1 |
| 2025-11-12 | wgengine/wgcfg: remove two unused Config fields | Brad Fitzpatrick | 7 | -30/+1 |
| 2025-11-12 | util/dnsname: increase maxNameLength to account for trailing dot | Fran Bull | 2 | -1/+33 |
| 2025-11-12 | ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on n... | Jonathan Nobels | 4 | -11/+30 |
| 2025-11-12 | net/batching: fix gro size handling for misordered UDP_GRO messages (#17842) | Sachin Iyer | 2 | -1/+37 |
| 2025-11-12 | cmd/k8s-operator: remove early return in ingress matching (#17841) | Sachin Iyer | 2 | -1/+37 |
| 2025-11-11 | wf: correct IPv6 link-local range from ff80::/10 to fe80::/10 (#17840) | Sachin Iyer | 1 | -1/+1 |
| 2025-11-11 | wgengine/router/osrouter: fix linux magicsock port changing | Sachin Iyer | 2 | -1/+41 |
| 2025-11-11 | util/eventbus: log goroutine stacks when hung in CI | Brad Fitzpatrick | 9 | -8/+15 |
| 2025-11-11 | wgengine/magicsock: unblock Conn.Synchronize on Conn.Close | Brad Fitzpatrick | 1 | -1/+4 |
| 2025-11-10 | wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock (#17831) | Jordan Whited | 1 | -1/+4 |
| 2025-11-10 | wgengine/magicsock: validate endpoint.derpAddr in Conn.onUDPRelayAllocResp (#... | Jordan Whited | 1 | -1/+3 |
| 2025-11-10 | ipn/ipnlocal: fix state_test data race seen in CI | Brad Fitzpatrick | 1 | -0/+2 |
| 2025-11-10 | tsnet: add tstest.Shard on the slow tests | Brad Fitzpatrick | 2 | -0/+17 |
| 2025-11-10 | ipn/ipnlocal: move vipServiceHash etc to serve.go, out of local.go | Brad Fitzpatrick | 3 | -51/+75 |
| 2025-11-10 | feature, ipn/ipnlocal: add, use feature.CanSystemdStatus for more DCE | Brad Fitzpatrick | 2 | -6/+15 |
| 2025-11-10 | wgengine/magicsock: clean up determineEndpoints docs (#17822) | Jordan Whited | 1 | -2/+2 |
| 2025-11-10 | wgengine: make getStatus a bit cheaper (less alloc-y) | Brad Fitzpatrick | 1 | -6/+9 |
| 2025-11-10 | tka: log a better error if there are no chain candidates | Alex Chan | 1 | -0/+4 |
| 2025-11-10 | tka: remove an unused parameter from `computeActiveAncestor` | Alex Chan | 1 | -2/+2 |
| 2025-11-09 | ipn/ipnlocal: clean up some of the weird locking (#17802) | Andrew Lytvynov | 1 | -9/+5 |
| 2025-11-09 | tsnet: fix TestConn to be fast, not flaky | Brad Fitzpatrick | 1 | -28/+88 |
| 2025-11-09 | tailcfg: kill off rest of HairPinning symbols | Brad Fitzpatrick | 5 | -15/+2 |
| 2025-11-08 | tsnet: skip a 30s long flaky-ish test on macOS | Brad Fitzpatrick | 1 | -0/+3 |
| 2025-11-07 | net/udprelay: use GetGlobalAddrs and add local port endpoint (#17797) | Raj Singh | 1 | -6/+21 |
| 2025-11-07 | cmd/k8s-operator: support workload identity federation | Tom Proctor | 7 | -34/+272 |