| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-04-04 | TO DO:kari/taildropsaf | kari-ts | 170 | -1001/+9120 |
| 2025-03-19 | ipnlocal, taildrop: use SAF to open Android files | kari-ts | 3 | -9/+35 |
| 2025-03-19 | web: support Host 100.100.100.100:80 in tailscaled web server | klyubin | 2 | -1/+12 |
| 2025-03-19 | cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353) | Tom Proctor | 2 | -20/+12 |
| 2025-03-19 | net/dns: expose a function for recompiling the DNS configuration (#15346) | Jonathan Nobels | 1 | -8/+28 |
| 2025-03-19 | cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode ... | Irbe Krumina | 18 | -67/+255 |
| 2025-03-19 | cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343) | Tom Proctor | 6 | -51/+158 |
| 2025-03-18 | util/eventbus: remove debug UI from iOS build | David Anderson | 2 | -0/+20 |
| 2025-03-18 | tsweb: split promvarz into an optional dependency | David Anderson | 12 | -26/+58 |
| 2025-03-18 | client/tailscale: add tailnet lock fields to Device struct | Anton Tolchanov | 1 | -0/+7 |
| 2025-03-18 | ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore... | Irbe Krumina | 8 | -89/+878 |
| 2025-03-18 | cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344) | Tom Proctor | 2 | -17/+60 |
| 2025-03-18 | cmd/proxy-to-grafana: support setting Grafana role via grants | Anton Tolchanov | 1 | -7/+97 |
| 2025-03-17 | licenses: update license notices | License Updater | 4 | -7/+7 |
| 2025-03-17 | ipn/ipnlocal: add test for CapMap packet filters | James Sanderson | 1 | -0/+59 |
| 2025-03-14 | .github/workflows/govulncheck.yml: send messages to another channel (#15295) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-03-14 | cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) | Irbe Krumina | 7 | -5/+419 |
| 2025-03-13 | net/packet: implement Geneve header serialization (#15301) | Jordan Whited | 2 | -0/+136 |
| 2025-03-13 | go.mod update golang.org/x/net to 0.36.0 for govulncheck (#15296) | Patrick O'Doherty | 2 | -3/+3 |
| 2025-03-13 | util/eventbus: add basic throughput benchmarks (#15284) | M. J. Fromberger | 1 | -0/+125 |
| 2025-03-13 | cmd/testwrapper: print failed tests preventing retry (#15270) | Paul Scott | 1 | -0/+14 |
| 2025-03-13 | ipn/ipnlocal, envknob: make it possible to configure the cert client to act i... | Irbe Krumina | 3 | -3/+206 |
| 2025-03-12 | tsweb: add title to DebugHandler and helper registration methods | Will Norris | 1 | -5/+26 |
| 2025-03-12 | util/eventbus: add a helper program for bus development | David Anderson | 1 | -0/+103 |
| 2025-03-12 | util/eventbus: add a debug HTTP handler for the bus | David Anderson | 10 | -3/+541 |
| 2025-03-12 | net/netmon, wgengine/magicsock: be quieter with portmapper logs | Andrew Dunham | 3 | -1/+131 |
| 2025-03-12 | control/controlclient, ipn: add client audit logging (#14950) | Jonathan Nobels | 13 | -13/+1204 |
| 2025-03-11 | words: append to the tail of the wordlists (#15278) | Naman Sood | 2 | -0/+67 |
| 2025-03-11 | tsnet,wgengine: fix src to primary Tailscale IP for TCP dials | Fran Bull | 3 | -2/+51 |
| 2025-03-11 | cmd/tsidp: allow CORS requests to openid-configuration (#15229) | Patrick O'Doherty | 1 | -0/+12 |
| 2025-03-11 | .github: Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#15257) | dependabot[bot] | 2 | -2/+2 |
| 2025-03-11 | .github: Bump github/codeql-action from 3.28.10 to 3.28.11 (#15258) | dependabot[bot] | 1 | -3/+3 |
| 2025-03-11 | safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275) | Jonathan Nobels | 3 | -48/+104 |
| 2025-03-11 | ipn/ipnlocal: allow cache hits for testing ACME certs (#15023) | Tom Proctor | 2 | -8/+43 |
| 2025-03-10 | ssh/tailssh: fix typo in forwardedEnviron method, add docs | Brad Fitzpatrick | 1 | -13/+25 |
| 2025-03-10 | cmd/natc: error and log when IP range is exhausted | James Tucker | 1 | -7/+15 |
| 2025-03-09 | .github: Bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 (#15046) | dependabot[bot] | 2 | -8/+1 |
| 2025-03-09 | .github: Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#15111) | dependabot[bot] | 1 | -1/+1 |
| 2025-03-09 | .github: Bump github/codeql-action from 3.28.9 to 3.28.10 (#15110) | dependabot[bot] | 1 | -3/+3 |
| 2025-03-09 | .github: Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#15113) | dependabot[bot] | 2 | -2/+2 |
| 2025-03-07 | tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115] | Brad Fitzpatrick | 7 | -30/+58 |
| 2025-03-07 | util/eventbus: add debugger methods to list pub/sub types | David Anderson | 3 | -0/+50 |
| 2025-03-07 | util/eventbus: don't allow publishers to skip events while debugging | David Anderson | 2 | -1/+5 |
| 2025-03-07 | util/eventbus: initial debugging facilities for the event bus | David Anderson | 6 | -66/+207 |
| 2025-03-07 | .github/workflows: tidy go caches before uploading | Mario Minardi | 1 | -1/+25 |
| 2025-03-07 | net/portmapper: retry UPnP when we get an "Invalid Args" | Andrew Dunham | 2 | -2/+110 |
| 2025-03-07 | ipn: sort VIP services before hashing (#15035) | Naman Sood | 1 | -1/+8 |
| 2025-03-07 | wgengine/magicsock: use learned DERP route as send path of last resort | Brad Fitzpatrick | 5 | -3/+72 |
| 2025-03-07 | cmd/derper, derp/derphttp: support, generate self-signed IP address certs | Brad Fitzpatrick | 5 | -4/+238 |
| 2025-03-06 | util/eventbus: add debug hooks to snoop on bus traffic | David Anderson | 4 | -28/+56 |