| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-23 | go.mod: bump github.com/google/go-containerregistry (#19500) | Andrew Lytvynov | 6 | -6/+7 |
| 2026-04-22 | tstest/natlab/vmtest,cmd/tta: add TestSiteToSite | Brad Fitzpatrick | 1 | -1/+20 |
| 2026-04-22 | cmd/tsnet-proxy: add tsnet-based port proxy tool (#19468) | Fernando Serboncini | 1 | -0/+173 |
| 2026-04-20 | ipn/ipnlocal,tailcfg: add /debug/tka c2n endpoint (#19198) | James 'zofrex' Sanderson | 1 | -0/+2 |
| 2026-04-17 | cmd/k8s-operator: add e2e test setup and l7 ingress test for multi-tailnet (#... | BeckyPauley | 2 | -27/+328 |
| 2026-04-17 | cmd/cloner: deep-clone pointer elements in map-of-slice values | Andrew Dunham | 5 | -38/+193 |
| 2026-04-17 | cmd/k8s-operator: add priorityClassName support to helm chart (#19236) | Bjorn Stange | 2 | -0/+5 |
| 2026-04-16 | control/tsp, cmd/tsp: add low-level Tailscale protocol client and tool | Brad Fitzpatrick | 1 | -0/+513 |
| 2026-04-15 | cmd/k8s-operator: add affinity rules to DNSConfig (#19360) | David Bond | 4 | -0/+1783 |
| 2026-04-15 | control/controlclient: enable request signatures on macOS (#19317) | Jonathan Nobels | 3 | -3/+3 |
| 2026-04-15 | cmd/containerboot,cmd/k8s-proxy,kube: add authkey renewal to k8s-proxy (#19221) | Tom Meadows | 6 | -127/+415 |
| 2026-04-13 | all: fix six tests that failed with -count=2 | Brad Fitzpatrick | 2 | -13/+40 |
| 2026-04-13 | cmd/derper: fix TestLookupMetric to pass when run alone | Brad Fitzpatrick | 1 | -6/+28 |
| 2026-04-13 | cmd/containerboot: mark TestContainerBoot as flaky | Brad Fitzpatrick | 1 | -0/+2 |
| 2026-04-13 | cmd/derper: mark rate-config flag as experimental and unstable | Jordan Whited | 1 | -1/+1 |
| 2026-04-10 | cmd/derper,derp: add --rate-config file with SIGHUP reload (#19314) | Mike O'Driscoll | 1 | -7/+26 |
| 2026-04-09 | cmd/k8s-operator: set PreferDualStack on ProxyGroup egress services (#19194) | Fernando Serboncini | 2 | -3/+5 |
| 2026-04-09 | cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) | David Bond | 23 | -882/+645 |
| 2026-04-08 | vmtest: add VM-based integration test framework | Brad Fitzpatrick | 1 | -7/+101 |
| 2026-04-07 | tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths | Brad Fitzpatrick | 2 | -0/+2 |
| 2026-04-07 | cmd/containerboot: rate-limit IPN bus netmap notifications | Doug Bryant | 1 | -3/+3 |
| 2026-04-07 | derp/derpserver: add per-connection receive rate limiting (#19222) | Mike O'Driscoll | 1 | -0/+10 |
| 2026-04-07 | ipn/desktop: move behind feature/condregister | Brad Fitzpatrick | 2 | -11/+10 |
| 2026-04-07 | ipn/localapi, cli, clientmetric: add ipnbus feature tag; fix omit.go stub | Brad Fitzpatrick | 1 | -0/+5 |
| 2026-04-07 | ssh: replace tempfork with tailscale/gliderssh | Kristoffer Dalby | 2 | -15/+15 |
| 2026-04-05 | cmd/cloner, cmd/viewer: handle named map/slice types with Clone/View methods | Brad Fitzpatrick | 9 | -4/+439 |
| 2026-04-05 | cmd/vet: add subtestnames analyzer; fix all existing violations | Brad Fitzpatrick | 20 | -191/+558 |
| 2026-04-02 | client,cmd/tailscale,ipn/{ipnlocal,localapi}: add debug CLI command to clear ... | M. J. Fromberger | 2 | -3/+36 |
| 2026-04-02 | tstest: add test for connectivity to off-tailnet CGNAT endpoints | Naman Sood | 1 | -0/+35 |
| 2026-04-02 | cmd/k8s-operator: add further E2E tests for Ingress (#19219) | BeckyPauley | 4 | -74/+416 |
| 2026-04-01 | ipn, cmd/tailscale/cli: allow setting FQDN sans dot as an exit node | Alex Chan | 2 | -2/+2 |
| 2026-04-01 | tka: refer consistently to "DisablementValues" | Alex Chan | 3 | -8/+12 |
| 2026-03-29 | cmd/tailscale: improve `tailscale lock` error message if no keys | Alex Chan | 1 | -17/+21 |
| 2026-03-26 | ipn/ipnlocal: warn incompatibility between no-snat-routes and exitnode (#19023) | KevinLiang10 | 2 | -0/+10 |
| 2026-03-24 | feature/*,net/tstun: add tundev_txq_drops clientmetric on Linux | Jordan Whited | 1 | -0/+1 |
| 2026-03-24 | cmd/tailscale/cli: add a debug command to print the statedir | Alex Chan | 1 | -0/+25 |
| 2026-03-24 | derp,types,util: use bufio Peek+Discard for allocation-free fast reads (#19067) | Mike O'Driscoll | 8 | -0/+8 |
| 2026-03-24 | all: use `bart.Lite` instead of `bart.Table` where appropriate | Alex Chan | 2 | -10/+10 |
| 2026-03-23 | cmd/tailscale/cli: fix a typo in the `whois` help text | Alex Chan | 1 | -1/+1 |
| 2026-03-23 | cmd/tailscale: print a helpful error for Taildrive CLI on macOS GUI | Alex Chan | 2 | -0/+99 |
| 2026-03-20 | wgengine/magicsock,control/controlclient: do not overwrite discokey with old ... | Claus Lensbøl | 5 | -0/+5 |
| 2026-03-18 | control,health,ipn: move IP forwarding check to health tracker (#19007) | Mike O'Driscoll | 2 | -2/+2 |
| 2026-03-18 | feature/conn25: add NATing support with flow caching | Michael Ben-Ami | 1 | -1/+1 |
| 2026-03-13 | cmd/k8s-operator: fix Service reconcile triggers for default ProxyClass (#18983) | Tom Proctor | 5 | -90/+331 |
| 2026-03-11 | cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies (#16450) | Tom Proctor | 10 | -146/+865 |
| 2026-03-10 | ipn/ipnlocal, feature/ssh: move SSH code out of LocalBackend to feature | Brad Fitzpatrick | 4 | -18/+13 |
| 2026-03-10 | cmd/k8s-operator: use correct tailnet client for L7 & L3 ingresses (#18749) | David Bond | 12 | -322/+403 |
| 2026-03-09 | appc,feature/conn25: conn25: send address assignments to connector | Fran Bull | 5 | -5/+5 |
| 2026-03-06 | cmd/testwrapper: make test tolerant of a GOEXPERIMENT being set | Brad Fitzpatrick | 1 | -2/+5 |
| 2026-03-06 | all: use Go 1.26 things, run most gofix modernizers | Brad Fitzpatrick | 41 | -136/+93 |