| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-09 | wgengine/magicsock: enable setting relay epAddr's as bestAddr (#16229) | Jordan Whited | 5 | -61/+212 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-06-09 | health: prefix Warnables received from the control plane | James Sanderson | 5 | -26/+34 |
| 2025-06-06 | ipn/ipnlocal: Update hostinfo to control on service config change (#16146) | KevinLiang10 | 2 | -8/+76 |
| 2025-06-06 | wgengine/magicsock: make endpoint.bestAddr Geneve-aware (#16195) | Jordan Whited | 14 | -386/+604 |
| 2025-06-06 | wgengine/magicsock: fix bpf fragmentation jump offsets (#16204) | Claus Lensbøl | 2 | -2/+78 |
| 2025-06-05 | cmd/natc: use new on disk state store for consensus | Fran Bull | 2 | -2/+34 |
| 2025-06-05 | net/packet: fix Parsed docs (#16200) | Jordan Whited | 1 | -3/+4 |
| 2025-06-04 | cmd/natc: add optional consensus backend | Fran Bull | 7 | -10/+1029 |
| 2025-06-04 | health: show DisplayMessage actions in 'tailscale status' | James Sanderson | 2 | -11/+35 |
| 2025-06-04 | ipn: add watch opt to include actions in health messages | James Sanderson | 3 | -17/+161 |
| 2025-06-03 | ssh/tailssh: display more useful error messages when authentication fails | Percy Wegmann | 2 | -30/+73 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 5 | -73/+712 |
| 2025-06-03 | posture: propagate serial number from MDM on Android | Anton Tolchanov | 3 | -6/+7 |
| 2025-06-03 | ipn/ipnlocal: fix deadlock when filtering DisplayMessage URLs | James Sanderson | 2 | -2/+13 |
| 2025-06-02 | go.mod,wgengine/magicsock: update wireguard-go (#16148) | Jordan Whited | 10 | -35/+43 |
| 2025-05-30 | tsconsensus: enable writing state to disk | Fran Bull | 5 | -7/+80 |
| 2025-05-30 | syncs: fix AtomicValue.CompareAndSwap (#16137) | Joe Tsai | 2 | -2/+25 |
| 2025-05-30 | controlclient,health,ipnlocal,tailcfg: add DisplayMessage support | James Sanderson | 7 | -22/+417 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | util/set: add SmallSet.SoleElement, fix bug, add more tests | Brad Fitzpatrick | 2 | -5/+54 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 5 | -36/+39 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 2 | -9/+21 |
| 2025-05-29 | ipn/ipnlocal: fix data race when accessing b.appConnector | Nick Khyl | 2 | -7/+15 |
| 2025-05-29 | util/set: add SmallSet | Brad Fitzpatrick | 2 | -0/+225 |
| 2025-05-28 | go.toolchain.rev: bump to 1.24.3 (#16060) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-05-28 | tsnet: remove an expired configuration-path migration step (#16120) | M. J. Fromberger | 1 | -47/+1 |
| 2025-05-28 | net/dns: cache dns.Config for reuse when compileConfig fails (#16059) | Jonathan Nobels | 4 | -61/+76 |
| 2025-05-28 | wgengine/magicsock: implement relayManager endpoint probing (#16029) | Jordan Whited | 4 | -126/+215 |
| 2025-05-28 | ipn: set RouteAll=true by default for new accounts on iOS and Android (#16110) | Jonathan Nobels | 1 | -1/+2 |
| 2025-05-27 | .github/workflows: use Ubuntu 24.04 images (#16097) | Irbe Krumina | 1 | -18/+18 |
| 2025-05-26 | feature/capture: fix wireshark decoding and add new disco frame types (#16089) | Mike O'Driscoll | 1 | -1/+5 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | ipn/ipnlocal: improve dohQuery error to suggest `?dns=` and `?q=` (#16056) | Zach Buchheit | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | ssh/tailssh: exclude Android from Linux build tags | Brad Fitzpatrick | 5 | -6/+6 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 8 | -168/+183 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 9 | -71/+338 |
| 2025-05-22 | control/controlclient,health,tailcfg: refactor control health messages (#15839) | James 'zofrex' Sanderson | 12 | -122/+495 |
| 2025-05-21 | VERSION.txt: this is v1.85.0 (#16042)v1.85.0-pre | Jonathan Nobels | 1 | -1/+1 |
| 2025-05-21 | ipn/store: remove a layer of indirection for registering stores (#15986) | Andrew Lytvynov | 4 | -21/+4 |
| 2025-05-20 | ipn,ipnlocal,taildrop: use SAF for Android files (#15976) | kari-ts | 5 | -84/+371 |
| 2025-05-20 | wgengine/magicsock: fix outdated heartbeat comment (#16023) | Jordan Whited | 1 | -1/+1 |
| 2025-05-20 | prober: update header check test (#15993) | Mike O'Driscoll | 1 | -10/+29 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | wgengine/magicsock: introduce virtualNetworkID type (#16021) | Jordan Whited | 4 | -14/+100 |
| 2025-05-19 | ipn/ipnlocal: make GetExt work earlier, before extension init | Brad Fitzpatrick | 3 | -8/+59 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | wgengine/magicsock: fix pong handling 'EndpointChange' reporting (#16018) | Jordan Whited | 1 | -4/+4 |