| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-03-24 | net/tsdial: add VIP service names to dnsmap with correct address family selec...rajsingh/fix-vip-dnsmap-addr-family | Raj Singh | 2 | -0/+157 |
| 2026-03-23 | tsnet: print state change in auth loop more responsively (#18048) | Tom Proctor | 1 | -0/+17 |
| 2026-03-23 | net/dns/resolver: treat DNS REFUSED responses as soft errors in forwarder rac... | Brendan Creane | 4 | -52/+198 |
| 2026-03-23 | ipn/ipnlocal: add a map for node public key to node ID lookups (#19051) | Amal Bansode | 2 | -43/+177 |
| 2026-03-23 | .github/workflows: limit vet to the tailscale.com module (#19084) | Tom Proctor | 1 | -1/+5 |
| 2026-03-23 | .github: Bump github/codeql-action from 4.32.6 to 4.34.1 | dependabot[bot] | 1 | -3/+3 |
| 2026-03-23 | feature/conn25: add packet filter allow functions | Fran Bull | 2 | -1/+117 |
| 2026-03-23 | cmd/tailscale/cli: fix a typo in the `whois` help text | Alex Chan | 1 | -1/+1 |
| 2026-03-23 | safesocket, ipn/ipnserver: use PeerCreds on solaris and illumos | Nahum Shalman | 2 | -2/+2 |
| 2026-03-23 | util/osdiag: fix typo in comment (reciever -> receiver) | Charlie Tonneslan | 1 | -1/+1 |
| 2026-03-23 | docs/windows/policy: add CheckUpdates key to tailscale.admx (#19044) | jpelchat | 2 | -0/+20 |
| 2026-03-23 | .github: Bump actions/cache from 5.0.3 to 5.0.4 | dependabot[bot] | 1 | -29/+29 |
| 2026-03-23 | cmd/tailscale: print a helpful error for Taildrive CLI on macOS GUI | Alex Chan | 2 | -0/+99 |
| 2026-03-20 | tsnet: fall back to 'tsnet' when os.Executable fails on darwin | Prakash Rudraraju | 1 | -3/+8 |
| 2026-03-20 | ipn/{ipnext,ipnlocal}: expose authReconfig in ipnext.Host as AuthReconfigAsync | Michael Ben-Ami | 4 | -3/+48 |
| 2026-03-20 | feature/conn25: guard against an index out of bounds panic (#19066) | Andrew Lytvynov | 1 | -0/+3 |
| 2026-03-20 | tka: use constant-time comparison of disablement secret (#19064) | Andrew Lytvynov | 1 | -1/+2 |
| 2026-03-20 | ipn: reject advertised routes with non-address bits set (#18649) | Brendan Creane | 4 | -0/+198 |
| 2026-03-20 | feature/conn25: implement IPMapper | Fran Bull | 1 | -15/+15 |
| 2026-03-20 | feature/conn25: implement IPMapper | Fran Bull | 2 | -32/+188 |
| 2026-03-20 | wgengine/magicsock,control/controlclient: do not overwrite discokey with old ... | Claus Lensbøl | 15 | -45/+345 |
| 2026-03-19 | ipn/ipnlocal: populate Groups field in profileFromView | Gesa Stupperich | 2 | -8/+14 |
| 2026-03-19 | feature/featuretags: skip TestAllOmitBuildTagsDeclared when not in a git repo | Brad Fitzpatrick | 1 | -9/+6 |
| 2026-03-19 | net/dns: use the correct separator for multiple servers in the same NRPT rule... | Nick Khyl | 1 | -1/+1 |
| 2026-03-18 | net/tstun: do not write when Wrapper is closed (#19038) | Claus Lensbøl | 1 | -3/+7 |
| 2026-03-18 | control,health,ipn: move IP forwarding check to health tracker (#19007) | Mike O'Driscoll | 10 | -79/+226 |
| 2026-03-18 | derp/derpserver: fix locking in a few expvar.Func metrics (#19031) | Brad Fitzpatrick | 1 | -3/+3 |
| 2026-03-18 | net/batching: eliminate gso helper func indirection | Jordan Whited | 2 | -45/+34 |
| 2026-03-18 | derp: add envknob to disable RTT stats collection (#19029) | Mike O'Driscoll | 1 | -1/+6 |
| 2026-03-18 | feature/conn25: add NATing support with flow caching | Michael Ben-Ami | 5 | -1/+878 |
| 2026-03-17 | build_docker.sh: fix typo | Aaron Perkins | 1 | -1/+1 |
| 2026-03-17 | wgengine/netstack: add TS_NETSTACK_KEEPALIVE_{IDLE,INTERVAL} envknobs | Josef Bacik | 1 | -8/+36 |
| 2026-03-17 | docs: add new package to go:embed commit-messages.md | Brad Fitzpatrick | 1 | -0/+12 |
| 2026-03-17 | kube/certs: discover TLS domains from TCP TerminateTLS handlers (#19020) | Raj Singh | 2 | -0/+45 |
| 2026-03-16 | go.mod: bump tailscale/wireguard-go | Jordan Whited | 5 | -6/+6 |
| 2026-03-16 | feature/conn25: rewrite A records for connector domains | Fran Bull | 2 | -68/+553 |
| 2026-03-13 | wgengine/netstack: don't register subnet/4via6 TCP flows with proxymap | Brad Fitzpatrick | 1 | -6/+9 |
| 2026-03-13 | tstest/integration: add userspace-networking + proxymap WhoIs integration test | Brad Fitzpatrick | 1 | -0/+152 |
| 2026-03-13 | net/{batching,udprelay},wgengine/magicsock: add SO_RXQ_OVFL clientmetrics | Jordan Whited | 5 | -53/+330 |
| 2026-03-13 | feature/conn25: Update ConnectorTransitIPRequest handling (#18979) | George Jones | 2 | -177/+409 |
| 2026-03-13 | cmd/k8s-operator: fix Service reconcile triggers for default ProxyClass (#18983) | Tom Proctor | 5 | -90/+331 |
| 2026-03-12 | gokrazy: fix busybox breakglass support, add test | Brad Fitzpatrick | 6 | -6/+292 |
| 2026-03-12 | flake.nix: update build to use buildGo126Module (#18977) | Mike O'Driscoll | 1 | -1/+1 |
| 2026-03-12 | tsnet: make tsnet fallback to control url from environment | Kristoffer Dalby | 1 | -2/+11 |
| 2026-03-11 | .github: Bump github/codeql-action from 4.32.5 to 4.32.6 | dependabot[bot] | 1 | -3/+3 |
| 2026-03-11 | .github: Bump actions/download-artifact from 7.0.0 to 8.0.0 | dependabot[bot] | 1 | -1/+1 |
| 2026-03-11 | .github: Bump actions/upload-artifact from 6.0.0 to 7.0.0 | dependabot[bot] | 2 | -2/+2 |
| 2026-03-11 | wgengine{,/magicsock}: add DERP hooks for filtering+sending packets | Brad Fitzpatrick | 4 | -11/+51 |
| 2026-03-11 | netns: add Android callback to bind socket to network (#18915) | kari-ts | 4 | -4/+59 |
| 2026-03-11 | wgengine: search randomly for unused port instead of in contiguous range (#18... | kari-ts | 1 | -2/+3 |