| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-01-05 | ssh/tailssh: fix exit-status ordering and improve signal/exit code handlingraggi/ssh-shutdown | James Tucker | 3 | -59/+94 |
| 2025-12-25 | cmd/derper: add --acme-email flag for GCP cert mode (#18278) | Raj Singh | 3 | -7/+21 |
| 2025-12-23 | ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipns... | Nick Khyl | 3 | -34/+76 |
| 2025-12-22 | cmd/tailscale/cli: document why there's no --force-reauth on login | Alex Chan | 1 | -0/+3 |
| 2025-12-19 | net/udprelay: remove tailscaled_peer_relay_endpoints_total (#18254) | Alex Valiushko | 3 | -36/+0 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 4 | -1/+30 |
| 2025-12-18 | net/udprelay: expose peer relay metrics (#18218) | Alex Valiushko | 5 | -12/+269 |
| 2025-12-18 | cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) | Tom Proctor | 4 | -57/+125 |
| 2025-12-18 | docs: use -x for cherry-picks | Tom Proctor | 1 | -0/+4 |
| 2025-12-18 | ipn/ipnlocal: log cert renewal failures (#18246) | Irbe Krumina | 1 | -1/+5 |
| 2025-12-17 | go.toolchain.rev: update to Go 1.25.5 (#18123) | Brendan Creane | 2 | -2/+2 |
| 2025-12-17 | types/persist: omit Persist.AttestationKey based on IsZero (#18241) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-17 | net/dns/resolver: log source IP of forwarded queries | Andrew Dunham | 2 | -2/+50 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 19 | -273/+754 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 6 | -25/+52 |
| 2025-12-16 | words: 33 tails and 26 scales (#18213) | stratself | 2 | -1/+50 |
| 2025-12-15 | net/udprelay: replace map+sync.Mutex with sync.Map for VNI lookup | Jordan Whited | 2 | -82/+93 |
| 2025-12-15 | client/systray: add missing deferred unlock for httpCache mutex | Will Norris | 1 | -1/+1 |
| 2025-12-15 | .github,cmd/cigocacher: add flags --version --stats --cigocached-hostcmd/cigocacher/d0d993f5d6576b5d97d0242c64bbe2de049d6486 | Tom Proctor | 5 | -76/+99 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-12 | .github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180) | Irbe Krumina | 3 | -5/+39 |
| 2025-12-12 | tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195) | James 'zofrex' Sanderson | 1 | -0/+4 |
| 2025-12-12 | ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) | Raj Singh | 1 | -88/+79 |
| 2025-12-11 | logtail: add metrics (#18184) | Joe Tsai | 3 | -3/+85 |
| 2025-12-11 | ipn/ipnlocal: avoid ResetAndStop panic | Brad Fitzpatrick | 1 | -1/+8 |
| 2025-12-10 | portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185) | Simon Law | 1 | -0/+1 |
| 2025-12-10 | logtail/filch: rewrite the package (#18143) | Joe Tsai | 6 | -304/+732 |
| 2025-12-10 | net/{packet,tstun},wgengine: update disco key when receiving via TSMP (#18158) | Claus Lensbøl | 6 | -4/+111 |
| 2025-12-10 | Dockerfile,Dockerfile.base: link iptables to legacy binary (#18177) | Irbe Krumina | 2 | -4/+4 |
| 2025-12-10 | cmd/derper: add GCP Certificate Manager support (#18161) | Raj Singh | 4 | -8/+76 |
| 2025-12-09 | net/dns: retrample resolve.conf when another process has trampled it (#18069) | Claus Lensbøl | 17 | -45/+261 |
| 2025-12-09 | net/udprelay: re-use mono.Time in control packet handling | Jordan Whited | 1 | -5/+5 |
| 2025-12-09 | net/udprelay: use `mono.Time` instead of `time.Time` | Simar | 2 | -13/+15 |
| 2025-12-09 | appc,feature: add the start of new conn25 app connector | Fran Bull | 7 | -5/+398 |
| 2025-12-09 | .github: add cigocacher release workflow | Tom Proctor | 1 | -0/+73 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 6 | -21/+441 |
| 2025-12-08 | Revert "ipn/ipnlocal: shut down old control client synchronously on reset" | Nick Khyl | 1 | -10/+29 |
| 2025-12-08 | scripts/installer.sh: add SteamOS handling (#18159) | Erisa A | 1 | -0/+5 |
| 2025-12-08 | tka: add some more tests for Bootstrap() | Alex Chan | 1 | -0/+60 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-05 | client/systray: change systray to start after graphical.target (#18138) | Claus Lensbøl | 1 | -1/+1 |
| 2025-12-05 | ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (... | James 'zofrex' Sanderson | 2 | -10/+102 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 8 | -3/+482 |
| 2025-12-04 | ipn/ipnlocal: fix LocalBackend deadlock when packet arrives during profile sw... | Nick Khyl | 1 | -10/+10 |
| 2025-12-03 | ipn/ipnlocal: shut down old control client synchronously on reset | Nick Khyl | 1 | -29/+10 |
| 2025-12-03 | go.toolchain.rev: update to Go 1.25.5 (#18123) | Andrew Lytvynov | 4 | -4/+4 |
| 2025-12-03 | net/udprelay: bind multiple sockets per af on Linux | Jordan Whited | 3 | -58/+165 |
| 2025-12-03 | go.mod: bump the version of setec | Alex Chan | 6 | -11/+10 |