| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-18 | net/tlsdial: fix TLS cert validation of HTTPS proxies | Brad Fitzpatrick | 1 | -0/+81 |
| 2025-06-18 | feature/tpm: implement ipn.StateStore using TPM sealing (#16030) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-06-18 | cmd/tsidp: fix OIDC client persistence across restarts | Raj Singh | 2 | -9/+148 |
| 2025-06-17 | cmd/tailscale: clean up dns --help messages (#16306) | Simon Law | 3 | -63/+98 |
| 2025-06-17 | derp/derphttp: add error notify for RunWatchConnectionLoop (#16261) | Mike O'Driscoll | 1 | -1/+2 |
| 2025-06-16 | scripts/check_license_headers.sh: delete, rewrite as a Go test | Brad Fitzpatrick | 4 | -0/+4 |
| 2025-06-16 | cmd/natc: add a flag to use specific DNS servers | James Tucker | 2 | -2/+225 |
| 2025-06-16 | tka: reject removal of the last signing key | Anton Tolchanov | 1 | -0/+3 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-13 | client/local: use an iterator to stream bus events (#16269) | M. J. Fromberger | 2 | -10/+3 |
| 2025-06-13 | net/netcheck: preserve live home DERP through packet loss | James Tucker | 1 | -1/+1 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-11 | ipn/localapi,client/local: add debug watcher for bus events (#16239) | Claus Lensbøl | 2 | -0/+25 |
| 2025-06-11 | cmd/natc: allow specifying the tsnet state dir | Fran Bull | 2 | -33/+34 |
| 2025-06-10 | cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) | Mike O'Driscoll | 3 | -2/+71 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 5 | -3/+28 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-06-05 | cmd/natc: use new on disk state store for consensus | Fran Bull | 2 | -2/+34 |
| 2025-06-04 | cmd/natc: add optional consensus backend | Fran Bull | 7 | -10/+1029 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 3 | -71/+682 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 2 | -2/+4 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 1 | -1/+1 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 4 | -18/+14 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 2 | -56/+1 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 5 | -0/+5 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 11 | -21/+1427 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 6 | -25/+288 |
| 2025-05-19 | cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to c... | Irbe Krumina | 8 | -793/+1392 |
| 2025-05-15 | cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) | Patrick O'Doherty | 2 | -9/+91 |
| 2025-05-14 | cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou... | Irbe Krumina | 3 | -145/+191 |
| 2025-05-12 | cmd/derpprobe: exit with non-zero status if --once fails (#15926) | Simon Law | 1 | -0/+4 |
| 2025-05-09 | wgengine/magicsock: re-shape relayManager to use an event loop (#15935) | Jordan Whited | 1 | -0/+1 |
| 2025-05-09 | ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forward... | Nick Khyl | 2 | -2/+2 |
| 2025-05-09 | net/udprelay{/endpoint}, all: move ServerEndpoint to independent pkg (#15934) | Jordan Whited | 1 | -0/+1 |
| 2025-05-08 | feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare | Brad Fitzpatrick | 4 | -4/+17 |
| 2025-05-07 | cmd/tailscale/cli: omit "file" subcommand if taildrop is omitted from build | Brad Fitzpatrick | 2 | -9/+26 |
| 2025-05-07 | tsnet: don't depend on condregister & its default tailscaled features | Brad Fitzpatrick | 1 | -36/+7 |
| 2025-05-06 | taildrop: merge taildrop and feature/taildrop packages together | Brad Fitzpatrick | 2 | -2/+0 |
| 2025-05-06 | feature/taildrop: move rest of Taildrop out of LocalBackend | Brad Fitzpatrick | 5 | -147/+3 |
| 2025-05-06 | cmd/tailscale/cli: rename "--posture-checking" to "--report-posture" | Brad Fitzpatrick | 5 | -25/+37 |
| 2025-05-06 | cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857) | Tom Proctor | 4 | -625/+7 |
