| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-04 | cmd/{k8s-operator,k8s-proxy}: support new ProxyGroup type kube-apiservertomhjp/k8s-proxy-3 | Tom Proctor | 16 | -64/+1367 |
| 2025-05-20 | cmd/{k8s-operator,k8s-proxy},k8s-operator,kube: add new k8s-proxy command | Tom Proctor | 7 | -137/+277 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | wgengine/magicsock: introduce virtualNetworkID type (#16021) | Jordan Whited | 4 | -14/+100 |
| 2025-05-19 | ipn/ipnlocal: make GetExt work earlier, before extension init | Brad Fitzpatrick | 3 | -8/+59 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | wgengine/magicsock: fix pong handling 'EndpointChange' reporting (#16018) | Jordan Whited | 1 | -4/+4 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 11 | -27/+77 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 13 | -21/+1431 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 9 | -25/+359 |
| 2025-05-19 | cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to c... | Irbe Krumina | 10 | -801/+1453 |
| 2025-05-16 | wgengine/magicsock: add missing logf arg (#15995) | Jordan Whited | 1 | -1/+1 |
| 2025-05-16 | wgengine/magicsock: implement relayManager handshaking (#15977) | Jordan Whited | 4 | -55/+393 |
| 2025-05-16 | prober: correct content-type response (#15989) | Mike O'Driscoll | 2 | -1/+4 |
| 2025-05-15 | cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) | Patrick O'Doherty | 2 | -9/+91 |
| 2025-05-14 | feature/taildrop,ipn/ipn{ext,local}: initialize taildrop for initial profile | Nick Khyl | 4 | -4/+18 |
| 2025-05-14 | feature/taildrop: add integration test variant with profiles that exist | Brad Fitzpatrick | 1 | -12/+39 |
| 2025-05-14 | cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou... | Irbe Krumina | 3 | -145/+191 |
| 2025-05-13 | prober: fix test logic (#15952) | Mike O'Driscoll | 1 | -2/+2 |
| 2025-05-13 | ipn/ipnlocal: attach Tailnet Lock status to bugreports | Anton Tolchanov | 1 | -0/+9 |
| 2025-05-12 | ipn/ipnlocal,wgengine: move (*tsdial.Dialer).SetRoutes() calls from LocalBack... | Nick Khyl | 2 | -7/+11 |
| 2025-05-12 | docs/commit-messages.md: explain #cleanup commits (#15933) | Simon Law | 1 | -1/+49 |
| 2025-05-12 | cmd/derpprobe: exit with non-zero status if --once fails (#15926) | Simon Law | 1 | -0/+4 |
| 2025-05-12 | docs/windows/policy: add OnboardingFlow policy to ADMX file | Aaron Klotz | 2 | -0/+21 |
| 2025-05-12 | net/dns,docs/windows/policy,util/syspolicy: register Tailscale IP addresses i... | Nick Khyl | 5 | -12/+121 |
| 2025-05-12 | util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) | Irbe Krumina | 7 | -39/+558 |
| 2025-05-12 | net/udprelay{/endpoint}: move ServerEndpoint tests (#15949) | Jordan Whited | 2 | -97/+110 |
| 2025-05-12 | prober: update cert check for prober (#15919) | Mike O'Driscoll | 2 | -82/+137 |
| 2025-05-10 | ssh/tailssh: fix data race during execution of test | Nick Khyl | 1 | -10/+10 |
| 2025-05-09 | ipn/ipnlocal: move nodeBackend methods from local.go to node_backend.go | Nick Khyl | 3 | -480/+490 |
| 2025-05-09 | ipn/ipn{server,test}: extract the LocalAPI test client and server into ipntest | Nick Khyl | 9 | -335/+846 |
| 2025-05-09 | wgengine/magicsock: re-shape relayManager to use an event loop (#15935) | Jordan Whited | 6 | -20/+302 |
| 2025-05-09 | net/tsdial: update (*Dialer).SetRoutes() to log the size of the resulting bar... | Nick Khyl | 2 | -9/+8 |
| 2025-05-09 | ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forward... | Nick Khyl | 5 | -16/+36 |
| 2025-05-09 | safeweb: Set Cross-Origin-Opener-Policy for browser requests (#15936) | Patrick O'Doherty | 1 | -0/+1 |
| 2025-05-09 | ssh/tailssh: chdir to user's homedir when directly running a command (#15351) | Simon Law | 1 | -5/+63 |
| 2025-05-09 | net/udprelay{/endpoint}, all: move ServerEndpoint to independent pkg (#15934) | Jordan Whited | 7 | -79/+98 |
| 2025-05-09 | health, ipn/ipnlocal: add metrics for various client events (#15828) | Jonathan Nobels | 6 | -9/+158 |
| 2025-05-09 | client/local: add godoc links | Olivier Mengué | 1 | -19/+20 |
| 2025-05-08 | util/deephash: move tests that depend on other tailscale packages to deephash... | Nick Khyl | 2 | -156/+177 |
| 2025-05-08 | feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare | Brad Fitzpatrick | 9 | -32/+40 |
| 2025-05-08 | util/eventbus: also disable websocket debug on Android | Brad Fitzpatrick | 3 | -9/+11 |
| 2025-05-08 | tsnet: add test for packet filter generation from netmap | James Sanderson | 3 | -2/+254 |
| 2025-05-07 | all: remove non-applicable "linux" deps on Android | Brad Fitzpatrick | 11 | -15/+21 |
| 2025-05-07 | util/systemd: don't link systemd-notification package on Android | Brad Fitzpatrick | 3 | -3/+3 |
| 2025-05-07 | net/dns: don't link dbus, gonotify on Android | Brad Fitzpatrick | 10 | -9/+15 |
| 2025-05-07 | control/controlclient: send optional ConnectionHandleForTest with map request... | Brian Palmer | 2 | -20/+37 |
| 2025-05-07 | ipn/store: don't link in AWS & Kubernetes stuff on Android | Brad Fitzpatrick | 3 | -82/+82 |