| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-17 | sketchmzb/conn25-access-to-ext | Michael Ben-Ami | 2 | -55/+52 |
| 2026-04-17 | cmd/k8s-operator: add priorityClassName support to helm chart (#19236) | Bjorn Stange | 2 | -0/+5 |
| 2026-04-17 | control/tsp: add lite map update support | Brad Fitzpatrick | 2 | -0/+205 |
| 2026-04-17 | tstest/integration/vms: skip cloud-init package updates (#19443) | Tom Proctor | 1 | -3/+2 |
| 2026-04-16 | control/tsp, cmd/tsp: add low-level Tailscale protocol client and tool | Brad Fitzpatrick | 7 | -0/+1710 |
| 2026-04-16 | derp/derpserver: add rate limit config metrics | Jordan Whited | 1 | -0/+26 |
| 2026-04-16 | appc,feature/conn25: prevent clients from forwarding DNS requests and | Michael Ben-Ami | 5 | -121/+437 |
| 2026-04-16 | ipn/ipnlocal: log AUM hash on startup as base32, not hex | Alex Chan | 1 | -1/+1 |
| 2026-04-15 | magicsock: invalidate endpoint on trust timeout (#19415) | Alex Valiushko | 2 | -8/+237 |
| 2026-04-15 | util/httpm: open .git/index to defeat Go test caching | Brad Fitzpatrick | 1 | -0/+7 |
| 2026-04-15 | cmd/k8s-operator: add affinity rules to DNSConfig (#19360) | David Bond | 7 | -0/+1792 |
| 2026-04-15 | control/controlclient: enable request signatures on macOS (#19317) | Jonathan Nobels | 11 | -14/+12 |
| 2026-04-15 | ipn/ipnlocal: discard cached netmaps upon panic during SetNetworkMap (#19414) | M. J. Fromberger | 1 | -0/+17 |
| 2026-04-15 | control/controlclient: handle 429 responses during node registration | Anton Tolchanov | 6 | -2/+282 |
| 2026-04-15 | derp/derpserver: implement hierarchical token bucket rate limiting | Jordan Whited | 2 | -152/+243 |
| 2026-04-15 | cmd/containerboot,cmd/k8s-proxy,kube: add authkey renewal to k8s-proxy (#19221) | Tom Meadows | 10 | -142/+665 |
| 2026-04-15 | control/controlclient: add patchify miss stats | Brad Fitzpatrick | 3 | -6/+59 |
| 2026-04-15 | control/controlclient: accept key if last seen on exist node is absent (#19402) | Claus Lensbøl | 3 | -5/+20 |
| 2026-04-14 | wgengine/magicsock: remove pickPort, use port 0 to avoid TOCTOU race | Avery Pennarun | 1 | -14/+12 |
| 2026-04-14 | util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr | Naman Sood | 14 | -69/+527 |
| 2026-04-14 | wgengine: replace reflect.DeepEqual with typed Equal for maybeReconfigInputs ... | Fernando Serboncini | 2 | -4/+151 |
| 2026-04-14 | util/linuxfw: fix nil deref in nftables chain check | Brad Fitzpatrick | 2 | -2/+43 |
| 2026-04-14 | tstest/integration: use linkat to hardlink test binaries on Linux | Brad Fitzpatrick | 4 | -5/+104 |
| 2026-04-14 | tstest: fix kernel version parsing for Debian-style version strings | Avery Pennarun | 2 | -4/+46 |
| 2026-04-14 | wgengine/magicsock: deflake TestTwoDevicePing compare-metrics-stats | Brad Fitzpatrick | 1 | -72/+107 |
| 2026-04-14 | net/dns: fix TestDNSTrampleRecovery failure under flakestress | Brad Fitzpatrick | 4 | -31/+36 |
| 2026-04-14 | control/controlclient: improve filter on netmap updates (#19308) | Claus Lensbøl | 2 | -41/+240 |
| 2026-04-13 | go.mod: upgrade go-git to v5.17.1 | Patrick O'Doherty | 5 | -9/+9 |
| 2026-04-13 | derp/derpserver: increase minimum token bucket size | Jordan Whited | 2 | -24/+36 |
| 2026-04-13 | tstest/integration: clear SSH_CLIENT env to prevent false positive detection | Avery Pennarun | 1 | -0/+3 |
| 2026-04-13 | all: fix six tests that failed with -count=2 | Brad Fitzpatrick | 9 | -15/+70 |
| 2026-04-13 | .gitignore: explicitly include tool/go.exe | James Tucker | 1 | -1/+4 |
| 2026-04-13 | cmd/derper: fix TestLookupMetric to pass when run alone | Brad Fitzpatrick | 1 | -6/+28 |
| 2026-04-13 | tstest/integration/nat, tstest/natlab/vnet: fix natlab test flake | Brad Fitzpatrick | 3 | -8/+138 |
| 2026-04-13 | tstest: add AssertNotParallel helper | Brad Fitzpatrick | 1 | -0/+14 |
| 2026-04-13 | wgengine/netstack: fix data race on in-flight connection test globals | Brad Fitzpatrick | 2 | -9/+13 |
| 2026-04-13 | cmd/containerboot: mark TestContainerBoot as flaky | Brad Fitzpatrick | 1 | -0/+2 |
| 2026-04-13 | version: show tailscale/go toolchain git hash in version output | Brad Fitzpatrick | 4 | -13/+69 |
| 2026-04-13 | ipn/ipnlocal: mark TestStateMachineSeamless as flaky | Brad Fitzpatrick | 1 | -0/+2 |
| 2026-04-13 | types/netmap,tailcfg: update documentation for Services cap | Adriano Sela Aviles | 2 | -4/+8 |
| 2026-04-13 | ssh/tailssh: speed up SSH integration tests | Brad Fitzpatrick | 4 | -118/+104 |
| 2026-04-13 | licenses: update license notices | License Updater | 3 | -6/+6 |
| 2026-04-13 | cmd/derper: mark rate-config flag as experimental and unstable | Jordan Whited | 1 | -1/+1 |
| 2026-04-13 | ipn/localapi,client/local: add services over localapi | Adriano Sela Aviles | 3 | -0/+28 |
| 2026-04-13 | ssh/tailssh: gofmt | Brad Fitzpatrick | 1 | -2/+2 |
| 2026-04-13 | tailscaleroot: add test that tsgo rev is in Go build cache keys | Brad Fitzpatrick | 1 | -0/+57 |
| 2026-04-13 | tailcfg,types/netmap: add (visible) Services to SelfNode Caps (#19335) | Adriano Sela Aviles | 2 | -0/+54 |
| 2026-04-11 | tstest/tailmac: add headless mode for automated VM testing | Brad Fitzpatrick | 5 | -10/+36 |
| 2026-04-10 | gokrazy: add arm64 natlab appliance image support | Brad Fitzpatrick | 7 | -3/+27 |
| 2026-04-10 | .github, tool/listpkgs: automatically find tests which use tstest.RequireRoot | Brad Fitzpatrick | 5 | -11/+82 |