| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-02-04 | (do not merge) local dev hack to send device certszach/temporary-cert-testing | Zach Hauser | 2 | -2/+3 |
| 2025-02-04 | cmd/k8s-operator: reinstate HA Ingress reconciler (#14887) | Irbe Krumina | 9 | -44/+149 |
| 2025-02-03 | derp: tcp-write-timeout=0 should disable write deadline (#14895) | Jordan Whited | 1 | -0/+8 |
| 2025-02-03 | net/netmon: add extra panic guard around ParseRIB | James Tucker | 1 | -1/+13 |
| 2025-02-03 | ipn/ipnlocal: add VIP service IPs to localnets | Adrian Dewhurst | 1 | -0/+27 |
| 2025-02-03 | tailcfg: add JSON unmarshal helper for view of node/peer capabilities | Adrian Dewhurst | 4 | -14/+24 |
| 2025-02-03 | wgengine/wgcfg/nmcfg: coalesce, limit some debug logs | Brad Fitzpatrick | 1 | -6/+14 |
| 2025-02-03 | derp/derphttp,ipn/localapi,net/captivedetection: add cache resistance to capt... | James Tucker | 4 | -4/+97 |
| 2025-02-03 | cmd/tailscale/cli: update tailscale down to accept an optional --reason | Nick Khyl | 1 | -0/+4 |
| 2025-02-03 | go.mod: bump inetaf/tcpproxy | Brad Fitzpatrick | 2 | -3/+3 |
| 2025-02-01 | client/tailscale,ipn/ipn{local,server},util/syspolicy: implement the AlwaysOn... | Nick Khyl | 7 | -17/+125 |
| 2025-02-01 | util/syspolicy/internal/metrics: replace dots with underscores for metric names | Nick Khyl | 1 | -0/+1 |
| 2025-01-31 | ipn/ipnlocal: fix a panic in setPrefsLockedOnEntry when cc is nil | Nick Khyl | 1 | -1/+1 |
| 2025-01-31 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 22 | -231/+172 |
| 2025-01-31 | ipn/ipnauth,util/syspolicy: improve comments | Nick Khyl | 3 | -3/+8 |
| 2025-01-31 | ipn/ipn{auth,server,local}: initial support for the always-on mode | Nick Khyl | 5 | -2/+54 |
| 2025-01-31 | ipn/ipnauth: implement an Actor representing tailscaled itself | Nick Khyl | 1 | -0/+46 |
| 2025-01-31 | ipn/{ipnauth, ipnserver}: extend the ipnauth.Actor interface with a CheckProf... | Nick Khyl | 4 | -1/+27 |
| 2025-01-30 | ipn: generate LoginProfileView and use it instead of *LoginProfile where appr... | Nick Khyl | 12 | -151/+254 |
| 2025-01-30 | types/views: make SliceEqualAnyOrder also do short slice optimization | Brad Fitzpatrick | 2 | -59/+162 |
| 2025-01-30 | cli/funnel: fix comment typo (#14840) | Andrea Gottardo | 1 | -1/+1 |
| 2025-01-30 | VERSION.txt: this is v1.81.0 (#14838)v1.81.0-pre | Andrea Gottardo | 1 | -1/+1 |
| 2025-01-30 | cmd/containerboot: wait for consistent state on shutdown (#14263) | Tom Proctor | 5 | -75/+294 |
| 2025-01-30 | prober: support multiple probes running concurrently | Anton Tolchanov | 2 | -15/+105 |
| 2025-01-30 | cmd/k8s-operator: temporarily disable HA Ingress controller (#14833) | Irbe Krumina | 5 | -62/+4 |
| 2025-01-30 | control/controlclient: flesh out a recently added comment | Brad Fitzpatrick | 1 | -6/+11 |
| 2025-01-30 | control/controlclient: add missing word in comment | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-30 | cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup P... | Irbe Krumina | 7 | -8/+916 |
| 2025-01-29 | go.mod: bump gorilla/csrf for security fix (#14822) | Brad Fitzpatrick | 4 | -6/+22 |
| 2025-01-29 | Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-cr... | Percy Wegmann | 22 | -172/+231 |
| 2025-01-29 | cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817) | Irbe Krumina | 2 | -66/+1 |
| 2025-01-29 | cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't... | Irbe Krumina | 18 | -176/+791 |
| 2025-01-28 | types/views: fix SliceEqualAnyOrderFunc short optimization | Andrew Dunham | 2 | -6/+64 |
| 2025-01-28 | .github: Bump actions/checkout from 3.6.0 to 4.2.2 (#14139) | dependabot[bot] | 13 | -33/+29 |
| 2025-01-28 | go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (#14814) | Mario Minardi | 1 | -1/+1 |
| 2025-01-28 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 22 | -231/+172 |
| 2025-01-28 | tsnet: return from Accept when the listener gets closed | Anton Tolchanov | 2 | -3/+35 |
| 2025-01-28 | cmd/tailscale: add warning to help text of `--force-reauth` (#14778) | yejingchen | 1 | -1/+1 |
| 2025-01-27 | tempfork/acme: fix TestSyncedToUpstream with Windows line endings | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-27 | types/persist: remove Persist.LegacyFrontendPrivateMachineKey | Brad Fitzpatrick | 7 | -80/+21 |
| 2025-01-27 | tempfork/acme: add new package for x/crypto package acme fork, move | Brad Fitzpatrick | 16 | -3/+5679 |
| 2025-01-27 | health: relax no-derp-home warnable to not fire if not in map poll | Brad Fitzpatrick | 3 | -23/+88 |
| 2025-01-27 | health: do Warnable dependency filtering in tailscaled | Brad Fitzpatrick | 3 | -3/+39 |
| 2025-01-27 | .github: Bump github/codeql-action from 3.28.1 to 3.28.5 (#14794) | dependabot[bot] | 1 | -3/+3 |
| 2025-01-27 | .github: Bump actions/setup-go from 5.2.0 to 5.3.0 (#14793) | dependabot[bot] | 3 | -3/+3 |
| 2025-01-26 | control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n | Brad Fitzpatrick | 5 | -7/+265 |
| 2025-01-26 | go.mod: bump depaware, add --internal flag to stop hiding internal packages | Brad Fitzpatrick | 9 | -6/+314 |
| 2025-01-26 | tstest/deptest: verify that tailscale.com BadDeps actually exist | Brad Fitzpatrick | 1 | -0/+25 |
| 2025-01-26 | control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance | Brad Fitzpatrick | 2 | -21/+19 |
| 2025-01-26 | envknob/featureknob: allow use of exit node on unraid (#14754) | Derek Kaser | 1 | -2/+1 |