| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-03-24 | derp,types,util: use bufio Peek+Discard for allocation-free fast reads (#19067) | Mike O'Driscoll | 1 | -0/+1 |
| 2026-03-20 | wgengine/magicsock,control/controlclient: do not overwrite discokey with old ... | Claus Lensbøl | 1 | -0/+1 |
| 2026-03-13 | cmd/k8s-operator: fix Service reconcile triggers for default ProxyClass (#18983) | Tom Proctor | 5 | -90/+331 |
| 2026-03-11 | cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies (#16450) | Tom Proctor | 6 | -102/+434 |
| 2026-03-10 | ipn/ipnlocal, feature/ssh: move SSH code out of LocalBackend to feature | Brad Fitzpatrick | 1 | -8/+5 |
| 2026-03-10 | cmd/k8s-operator: use correct tailnet client for L7 & L3 ingresses (#18749) | David Bond | 12 | -322/+403 |
| 2026-03-09 | appc,feature/conn25: conn25: send address assignments to connector | Fran Bull | 1 | -1/+1 |
| 2026-03-06 | all: use Go 1.26 things, run most gofix modernizers | Brad Fitzpatrick | 15 | -66/+42 |
| 2026-03-05 | types/ptr: deprecate ptr.To, use Go 1.26 new | Brad Fitzpatrick | 26 | -187/+155 |
| 2026-03-05 | cmd/k8s-proxy: use L4 TCPForward instead of L7 HTTP proxy (#18179) | Raj Singh | 1 | -1/+1 |
| 2026-03-05 | cmd/k8s-operator: remove deprecated TS_EXPERIMENTAL_KUBE_API_EVENTS (#18893) | BeckyPauley | 1 | -0/+10 |
| 2026-03-04 | go.toolchain.branch: switch to Go 1.26 | Brad Fitzpatrick | 1 | -16/+22 |
| 2026-03-04 | cmd/tailscale,ipn,net/netutil: remove rp_filter strict mode warnings (#18863) | Mike O'Driscoll | 1 | -1/+1 |
| 2026-02-26 | go.mod: bump gvisor | Brad Fitzpatrick | 1 | -2/+2 |
| 2026-02-25 | cmd/k8s-operator: add exit node example (#18087) | Chris Mosetick | 2 | -2/+28 |
| 2026-02-20 | cmd/containerboot,kube: enable autoadvertisement of Tailscale services on con... | Tom Meadows | 3 | -0/+10 |
| 2026-02-20 | cmd/k8s-operator/e2e: mark TestIngress flaky (#18773) | Tom Proctor | 2 | -1/+69 |
| 2026-02-18 | cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) | David Bond | 15 | -20/+379 |
| 2026-02-17 | ipn/ipnlocal: add basic support for netmap caching (#18530) | M. J. Fromberger | 1 | -0/+1 |
| 2026-02-13 | k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) | David Bond | 1 | -0/+139 |
| 2026-02-09 | go.mod: update bart dep to v0.26.1 (#18659) | Amal Bansode | 1 | -2/+7 |
| 2026-02-03 | cmd/k8s-operator,k8s-operator:ensure that recorder replicas default to 1 (#18... | Tom Meadows | 2 | -0/+2 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 64 | -64/+64 |
| 2026-01-21 | cmd/k8s-operator,k8s-operator: Allow the use of multiple tailnets (#18344) | David Bond | 17 | -64/+548 |
| 2026-01-14 | cmd,feature: add identity token auto generation for workload identity (#18373) | Danni Popova | 1 | -0/+72 |
| 2026-01-09 | go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374) | Patrick O'Doherty | 1 | -4/+4 |
| 2026-01-08 | net/portmapper, go.mod: unfork our goupnp dependency | Andrew Dunham | 1 | -6/+6 |
| 2026-01-08 | cmd/k8s-operator/e2e,go.mod: remove client v2 dependency | Tom Proctor | 1 | -31/+50 |
| 2026-01-08 | cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415) | Tom Proctor | 12 | -196/+1349 |
| 2026-01-06 | wgengine/magicsock: extract IMDS utilities into a standalone package (#18334) | Alex Valiushko | 1 | -0/+1 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 3 | -0/+26 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-02 | tsnet: enable node registration via federated identity | Gesa Stupperich | 1 | -0/+2 |
| 2025-12-02 | cleanup: fix typos across multiple files | Naasir | 1 | -1/+1 |
| 2025-12-01 | k8s-operator: Fix typos in egress-pod-readiness.go | Shaikh Naasir | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator fix populateTLSSecret on tests (#18088) | Fernando Serboncini | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596) | Fernando Serboncini | 5 | -36/+429 |
| 2025-11-25 | cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not ... | David Bond | 3 | -26/+71 |
| 2025-11-24 | cmd/cigocacher,go.mod: add cigocacher cmd | Tom Proctor | 1 | -5/+7 |
| 2025-11-20 | cmd/k8s-operator: add multi replica support for recorders (#17864) | David Bond | 7 | -150/+366 |
| 2025-11-20 | cmd/k8s-operator: use stable image for k8s-nameserver (#17985) | David Bond | 2 | -5/+4 |
| 2025-11-19 | cmd/k8s-operator: fix type comparison in apiserver proxy template (#17981) | Raj Singh | 1 | -3/+3 |
| 2025-11-19 | cmd/k8s-operator: default to stable image (#17848) | David Bond | 2 | -3/+3 |
| 2025-11-18 | all: rename variables with lowercase-l/uppercase-I | Alex Chan | 9 | -146/+146 |
| 2025-11-17 | go.mod: bump golang.org/x/crypto (#17907) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-11-16 | ipn/ipnlocal: add PROXY protocol support to Funnel/Serve | Andrew Dunham | 1 | -0/+1 |
| 2025-11-12 | cmd/k8s-operator: remove early return in ingress matching (#17841) | Sachin Iyer | 2 | -1/+37 |