| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-19 | lolbradfitz/tinyderpclient | Brad Fitzpatrick | 16 | -515/+76 |
| 2025-06-19 | Revert "types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoi... | Jordan Whited | 3 | -26/+0 |
| 2025-06-18 | net/tlsdial: fix TLS cert validation of HTTPS proxies | Brad Fitzpatrick | 17 | -49/+672 |
| 2025-06-18 | feature/tpm: implement ipn.StateStore using TPM sealing (#16030) | Andrew Lytvynov | 7 | -23/+500 |
| 2025-06-18 | net/*: remove Windows exceptions for when Resolver.PreferGo didn't work | Brad Fitzpatrick | 3 | -17/+1 |
| 2025-06-18 | ipn/ipnlocal,wgengine{/magicsock}: replace SetNetworkMap with eventbus (#16299) | Jordan Whited | 7 | -129/+194 |
| 2025-06-18 | cmd/tsidp: fix OIDC client persistence across restarts | Raj Singh | 2 | -9/+148 |
| 2025-06-18 | ipn/ipnlocal: make pricing restriction message for Tailnet Lock clearer | Anton Tolchanov | 2 | -6/+14 |
| 2025-06-17 | cmd/tailscale: clean up dns --help messages (#16306) | Simon Law | 3 | -63/+98 |
| 2025-06-17 | ipn: add missing entries for OpenBSD | Juan Francisco Cantero Hurtado | 2 | -2/+2 |
| 2025-06-17 | ipn/ipnlocal: add some verbose logging to taildrive peerapi handler | Percy Wegmann | 1 | -14/+21 |
| 2025-06-17 | tool/gocross: put the synthetic GOROOTs outside of the tsgo directory | Brad Fitzpatrick | 2 | -1/+2 |
| 2025-06-17 | derp/derphttp: add error notify for RunWatchConnectionLoop (#16261) | Mike O'Driscoll | 3 | -7/+84 |
| 2025-06-17 | .github/workflows: remove redundant work between staticcheck jobs | Brad Fitzpatrick | 3 | -12/+283 |
| 2025-06-16 | prober: speed up TestCRL ~450x by baking in some test keys | Brad Fitzpatrick | 1 | -12/+53 |
| 2025-06-16 | .github/workflows: test that ./go/tool version matches go mod version | Irbe Krumina | 1 | -10/+62 |
| 2025-06-16 | .github/workflows: removes extra '$' | Irbe Krumina | 9 | -9/+9 |
| 2025-06-16 | tool/gocross: make gocross opt-in instead of opt-out | Brad Fitzpatrick | 4 | -5/+35 |
| 2025-06-16 | scripts/check_license_headers.sh: delete, rewrite as a Go test | Brad Fitzpatrick | 11 | -78/+138 |
| 2025-06-16 | cmd/natc: add a flag to use specific DNS servers | James Tucker | 2 | -2/+225 |
| 2025-06-16 | util/must: add Get2 for functions that return two values | James Sanderson | 1 | -0/+8 |
| 2025-06-16 | tsconsensus: protect from data race | Fran Bull | 1 | -6/+6 |
| 2025-06-16 | util/eventbus: remove redundant code from eventbus.Publish | Nick Khyl | 3 | -20/+13 |
| 2025-06-16 | .github/workflows: do a go mod download & cache it before all jobs | Brad Fitzpatrick | 2 | -33/+215 |
| 2025-06-16 | ipn/ipnlocal,wgengine/magicsock: use eventbus for node & filter updates (#16271) | Jordan Whited | 4 | -25/+108 |
| 2025-06-16 | tka: reject removal of the last signing key | Anton Tolchanov | 3 | -0/+25 |
| 2025-06-16 | .github: Bump github/codeql-action from 3.28.19 to 3.29.0 (#16287) | dependabot[bot] | 1 | -3/+3 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-13 | ipn/ipnlocal: signal nodeBackend readiness and shutdown | Nick Khyl | 3 | -16/+230 |
| 2025-06-13 | client/local: use an iterator to stream bus events (#16269) | M. J. Fromberger | 3 | -29/+41 |
| 2025-06-13 | ipn/ipnlocal: replace nodeContext with nodeBackend in comments | Nick Khyl | 1 | -24/+24 |
| 2025-06-13 | go.mod: bump github.com/cloudflare/circl (#16264) | Andrew Lytvynov | 2 | -3/+3 |
| 2025-06-13 | prober: record DERP dropped packets as they occur | James Tucker | 1 | -0/+20 |
| 2025-06-13 | net/packet: cleanup IPv4 fragment guards | James Tucker | 4 | -10/+149 |
| 2025-06-13 | net/netcheck: preserve live home DERP through packet loss | James Tucker | 5 | -17/+65 |
| 2025-06-12 | feature/relayserver,net/{netcheck,udprelay}: implement addr discovery (#16253) | Jordan Whited | 4 | -42/+169 |
| 2025-06-12 | tsweb/varz: add binary name to version metric | Brad Fitzpatrick | 1 | -1/+19 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-11 | .github: Bump actions/setup-go from 5.4.0 to 5.5.0 (#15947) | dependabot[bot] | 3 | -3/+3 |
| 2025-06-11 | .github: Bump slackapi/slack-github-action from 2.0.0 to 2.1.0 (#15948) | dependabot[bot] | 3 | -3/+3 |
| 2025-06-11 | .github: Bump github/codeql-action from 3.28.15 to 3.28.19 (#16227) | dependabot[bot] | 1 | -3/+3 |
| 2025-06-11 | ipn/localapi,client/local: add debug watcher for bus events (#16239) | Claus Lensbøl | 5 | -37/+154 |
| 2025-06-11 | cmd/natc: allow specifying the tsnet state dir | Fran Bull | 2 | -33/+34 |
| 2025-06-10 | types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoint (#16244) | Jordan Whited | 4 | -0/+33 |
| 2025-06-10 | go.toolchain.rev: bump to go 1.24.4 (#16230) | Patrick O'Doherty | 1 | -1/+1 |
| 2025-06-10 | cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) | Mike O'Driscoll | 8 | -55/+195 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 10 | -71/+143 |
| 2025-06-09 | types/netmap: fix NodeMutationEndpoints docs typo (#16234) | Jordan Whited | 1 | -1/+1 |
| 2025-06-09 | wgengine/magicsock: don't cancel in-progress relayManager work (#16233) | Jordan Whited | 1 | -32/+30 |
| 2025-06-09 | wgengine/relaymanager: don't start runLoop() on init() (#16231) | Jordan Whited | 1 | -1/+1 |