| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-01-08 | use net/artjonathan/netns_probe | Jonathan Nobels | 1 | -15/+21 |
| 2026-01-08 | Refactoring. Probes return probe results and probe | Jonathan Nobels | 3 | -182/+94 |
| 2026-01-08 | const the options with a TODO to make the compile | Jonathan Nobels | 2 | -6/+7 |
| 2026-01-08 | Renaming reachability->probe | Jonathan Nobels | 4 | -149/+193 |
| 2026-01-07 | Refactoring netns configuration to fix thread safety | Jonathan Nobels | 5 | -90/+113 |
| 2026-01-06 | net/netns: interface probe prototype | Jonathan Nobels | 6 | -101/+1285 |
| 2026-01-06 | .github: Bump actions/checkout from 4.2.2 to 5.0.0 | dependabot[bot] | 18 | -35/+35 |
| 2026-01-06 | cmd/tailscale/cli: remove Services-specific subcommands from funnel (#18225) | Harry Harpham | 1 | -74/+81 |
| 2026-01-06 | cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys ... | Irbe Krumina | 4 | -15/+251 |
| 2026-01-05 | cmd/tailscaled: disable state encryption / attestation by default (#18336) | Andrew Lytvynov | 2 | -15/+11 |
| 2026-01-05 | ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335) | Andrew Lytvynov | 2 | -7/+79 |
| 2026-01-05 | ssh/tailssh: send audit messages on SSH login (Linux) | James Tucker | 3 | -0/+366 |
| 2026-01-05 | scripts/installer.sh: add ultramarine to supported OS list | Vince Liem | 1 | -1/+1 |
| 2025-12-25 | cmd/derper: add --acme-email flag for GCP cert mode (#18278) | Raj Singh | 3 | -7/+21 |
| 2025-12-23 | ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipns... | Nick Khyl | 3 | -34/+76 |
| 2025-12-22 | cmd/tailscale/cli: document why there's no --force-reauth on login | Alex Chan | 1 | -0/+3 |
| 2025-12-19 | net/udprelay: remove tailscaled_peer_relay_endpoints_total (#18254) | Alex Valiushko | 3 | -36/+0 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 4 | -1/+30 |
| 2025-12-18 | net/udprelay: expose peer relay metrics (#18218) | Alex Valiushko | 5 | -12/+269 |
| 2025-12-18 | cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) | Tom Proctor | 4 | -57/+125 |
| 2025-12-18 | docs: use -x for cherry-picks | Tom Proctor | 1 | -0/+4 |
| 2025-12-18 | ipn/ipnlocal: log cert renewal failures (#18246) | Irbe Krumina | 1 | -1/+5 |
| 2025-12-17 | go.toolchain.rev: update to Go 1.25.5 (#18123) | Brendan Creane | 2 | -2/+2 |
| 2025-12-17 | types/persist: omit Persist.AttestationKey based on IsZero (#18241) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-17 | net/dns/resolver: log source IP of forwarded queries | Andrew Dunham | 2 | -2/+50 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 19 | -273/+754 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 6 | -25/+52 |
| 2025-12-16 | words: 33 tails and 26 scales (#18213) | stratself | 2 | -1/+50 |
| 2025-12-15 | net/udprelay: replace map+sync.Mutex with sync.Map for VNI lookup | Jordan Whited | 2 | -82/+93 |
| 2025-12-15 | client/systray: add missing deferred unlock for httpCache mutex | Will Norris | 1 | -1/+1 |
| 2025-12-15 | .github,cmd/cigocacher: add flags --version --stats --cigocached-hostcmd/cigocacher/d0d993f5d6576b5d97d0242c64bbe2de049d6486 | Tom Proctor | 5 | -76/+99 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-12 | .github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180) | Irbe Krumina | 3 | -5/+39 |
| 2025-12-12 | tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195) | James 'zofrex' Sanderson | 1 | -0/+4 |
| 2025-12-12 | ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) | Raj Singh | 1 | -88/+79 |
| 2025-12-11 | logtail: add metrics (#18184) | Joe Tsai | 3 | -3/+85 |
| 2025-12-11 | ipn/ipnlocal: avoid ResetAndStop panic | Brad Fitzpatrick | 1 | -1/+8 |
| 2025-12-10 | portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185) | Simon Law | 1 | -0/+1 |
| 2025-12-10 | logtail/filch: rewrite the package (#18143) | Joe Tsai | 6 | -304/+732 |
| 2025-12-10 | net/{packet,tstun},wgengine: update disco key when receiving via TSMP (#18158) | Claus Lensbøl | 6 | -4/+111 |
| 2025-12-10 | Dockerfile,Dockerfile.base: link iptables to legacy binary (#18177) | Irbe Krumina | 2 | -4/+4 |
| 2025-12-10 | cmd/derper: add GCP Certificate Manager support (#18161) | Raj Singh | 4 | -8/+76 |
| 2025-12-09 | net/dns: retrample resolve.conf when another process has trampled it (#18069) | Claus Lensbøl | 17 | -45/+261 |
| 2025-12-09 | net/udprelay: re-use mono.Time in control packet handling | Jordan Whited | 1 | -5/+5 |
| 2025-12-09 | net/udprelay: use `mono.Time` instead of `time.Time` | Simar | 2 | -13/+15 |
| 2025-12-09 | appc,feature: add the start of new conn25 app connector | Fran Bull | 7 | -5/+398 |
| 2025-12-09 | .github: add cigocacher release workflow | Tom Proctor | 1 | -0/+73 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 6 | -21/+441 |
| 2025-12-08 | Revert "ipn/ipnlocal: shut down old control client synchronously on reset" | Nick Khyl | 1 | -10/+29 |