| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-03-24 | Add Grafana dashboard for Tailscale K8s operator monitoringchart/k8s-operator | Raj Singh | 3 | -0/+1189 |
| 2025-03-24 | net/netmon: use Monitor's tsIfName if set by SetTailscaleInterfaceName | Brad Fitzpatrick | 5 | -12/+14 |
| 2025-03-24 | net/netmon: unexport GetState | Brad Fitzpatrick | 3 | -3/+3 |
| 2025-03-24 | tstest/mts: add multiple-tailscaled development tool | Brad Fitzpatrick | 1 | -0/+599 |
| 2025-03-24 | clientupdate: cache CanAutoUpdate, avoid log spam when false | Brad Fitzpatrick | 2 | -13/+20 |
| 2025-03-21 | all: skip looking for package comments in .git/ repository (#15384) | Simon Law | 1 | -0/+3 |
| 2025-03-21 | safesocket: respect context timeout when sleeping for 250ms in retry loop | Brad Fitzpatrick | 1 | -1/+5 |
| 2025-03-21 | tstest: make it clearer where AwaitRunning failed and why | James Sanderson | 1 | -1/+3 |
| 2025-03-21 | tsnet: use test logger for testcontrol and node logs | James Sanderson | 1 | -1/+2 |
| 2025-03-21 | cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ow... | Tom Proctor | 3 | -71/+92 |
| 2025-03-21 | cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for... | Irbe Krumina | 8 | -168/+413 |
| 2025-03-20 | ipn/ipnlocal: do not attempt to start the auditlogger with a nil transport | Nick Khyl | 1 | -2/+5 |
| 2025-03-20 | ipn/ipnlocal: do not reset the netmap and packet filter in (*LocalBackend).St... | Nick Khyl | 3 | -16/+28 |
| 2025-03-20 | cmd/tailscale: add CLI debug command to do raw LocalAPI requests | Brad Fitzpatrick | 1 | -0/+86 |
| 2025-03-20 | ipn: ensure that conffile is source of truth for advertised services. (#15361) | Irbe Krumina | 2 | -23/+130 |
| 2025-03-19 | web: support Host 100.100.100.100:80 in tailscaled web server | klyubin | 2 | -1/+12 |
| 2025-03-19 | cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353) | Tom Proctor | 2 | -20/+12 |
| 2025-03-19 | net/dns: expose a function for recompiling the DNS configuration (#15346) | Jonathan Nobels | 1 | -8/+28 |
| 2025-03-19 | cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode ... | Irbe Krumina | 18 | -67/+255 |
| 2025-03-19 | cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343) | Tom Proctor | 6 | -51/+158 |
| 2025-03-18 | util/eventbus: remove debug UI from iOS build | David Anderson | 2 | -0/+20 |
| 2025-03-18 | tsweb: split promvarz into an optional dependency | David Anderson | 12 | -26/+58 |
| 2025-03-18 | client/tailscale: add tailnet lock fields to Device struct | Anton Tolchanov | 1 | -0/+7 |
| 2025-03-18 | ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore... | Irbe Krumina | 8 | -89/+878 |
| 2025-03-18 | cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344) | Tom Proctor | 2 | -17/+60 |
| 2025-03-18 | cmd/proxy-to-grafana: support setting Grafana role via grants | Anton Tolchanov | 1 | -7/+97 |
| 2025-03-17 | licenses: update license notices | License Updater | 4 | -7/+7 |
| 2025-03-17 | ipn/ipnlocal: add test for CapMap packet filters | James Sanderson | 1 | -0/+59 |
| 2025-03-14 | .github/workflows/govulncheck.yml: send messages to another channel (#15295) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-03-14 | cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) | Irbe Krumina | 7 | -5/+419 |
| 2025-03-13 | net/packet: implement Geneve header serialization (#15301) | Jordan Whited | 2 | -0/+136 |
| 2025-03-13 | go.mod update golang.org/x/net to 0.36.0 for govulncheck (#15296) | Patrick O'Doherty | 2 | -3/+3 |
| 2025-03-13 | util/eventbus: add basic throughput benchmarks (#15284) | M. J. Fromberger | 1 | -0/+125 |
| 2025-03-13 | cmd/testwrapper: print failed tests preventing retry (#15270) | Paul Scott | 1 | -0/+14 |
| 2025-03-13 | ipn/ipnlocal, envknob: make it possible to configure the cert client to act i... | Irbe Krumina | 3 | -3/+206 |
| 2025-03-12 | tsweb: add title to DebugHandler and helper registration methods | Will Norris | 1 | -5/+26 |
| 2025-03-12 | util/eventbus: add a helper program for bus development | David Anderson | 1 | -0/+103 |
| 2025-03-12 | util/eventbus: add a debug HTTP handler for the bus | David Anderson | 10 | -3/+541 |
| 2025-03-12 | net/netmon, wgengine/magicsock: be quieter with portmapper logs | Andrew Dunham | 3 | -1/+131 |
| 2025-03-12 | control/controlclient, ipn: add client audit logging (#14950) | Jonathan Nobels | 13 | -13/+1204 |
| 2025-03-11 | words: append to the tail of the wordlists (#15278) | Naman Sood | 2 | -0/+67 |
| 2025-03-11 | tsnet,wgengine: fix src to primary Tailscale IP for TCP dials | Fran Bull | 3 | -2/+51 |
| 2025-03-11 | cmd/tsidp: allow CORS requests to openid-configuration (#15229) | Patrick O'Doherty | 1 | -0/+12 |
| 2025-03-11 | .github: Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#15257) | dependabot[bot] | 2 | -2/+2 |
| 2025-03-11 | .github: Bump github/codeql-action from 3.28.10 to 3.28.11 (#15258) | dependabot[bot] | 1 | -3/+3 |
| 2025-03-11 | safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275) | Jonathan Nobels | 3 | -48/+104 |
| 2025-03-11 | ipn/ipnlocal: allow cache hits for testing ACME certs (#15023) | Tom Proctor | 2 | -8/+43 |
| 2025-03-10 | ssh/tailssh: fix typo in forwardedEnviron method, add docs | Brad Fitzpatrick | 1 | -13/+25 |
| 2025-03-10 | cmd/natc: error and log when IP range is exhausted | James Tucker | 1 | -7/+15 |
| 2025-03-09 | .github: Bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 (#15046) | dependabot[bot] | 2 | -8/+1 |