| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2025-07-09 | cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) | Tom Proctor | 18 | -160/+1070 |
| 2025-07-09 | cmd/k8s-operator/deploy: clarify helm install notes (#16449) | Tom Proctor | 1 | -1/+3 |
| 2025-07-08 | cmd/tailscale: format empty cities and countries as hyphens (#16495) | Simon Law | 2 | -21/+29 |
| 2025-07-08 | cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled | Nick Khyl | 2 | -1/+14 |
| 2025-07-07 | cmd/k8s-operator: Allow custom ingress class names (#16472) | David Bond | 10 | -52/+83 |
| 2025-07-07 | cmd/k8s-operator: always set ProxyGroup status conditions (#16429) | Tom Proctor | 4 | -170/+206 |
| 2025-07-04 | cmd/k8s-operator: Move login server value to top-level (#16470) | David Bond | 2 | -4/+4 |
| 2025-07-03 | cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic... | Nick Khyl | 1 | -0/+4 |
| 2025-07-03 | cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) | David Bond | 5 | -11/+24 |
| 2025-07-02 | cmd/k8s-operator: Allow configuration of login server (#16432) | David Bond | 10 | -10/+50 |
| 2025-06-30 | cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) | Tom Meadows | 6 | -28/+398 |
| 2025-06-27 | tsidp: update README to refer to community projects (#16411) | Simon Law | 1 | -2/+2 |
| 2025-06-27 | ipn/store: make StateStore.All optional (#16409) | Andrew Lytvynov | 3 | -28/+0 |
| 2025-06-27 | cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (... | Tom Proctor | 16 | -188/+349 |
| 2025-06-27 | cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) | Tom Meadows | 12 | -63/+1972 |
| 2025-06-27 | cmd/tailscale: use text format for TKA head | Kristoffer Dalby | 1 | -1/+5 |
| 2025-06-27 | cmd/tailscale: add tlpub: prefix to lock log output | Kristoffer Dalby | 1 | -3/+3 |
| 2025-06-26 | ipn/store: automatically migrate between plaintext and encrypted state (#16318) | Andrew Lytvynov | 4 | -4/+73 |
| 2025-06-25 | cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) | David Bond | 1 | -0/+25 |
| 2025-06-23 | cmd/tailscale: warn user about nllock key removal without resigning | Kristoffer Dalby | 1 | -0/+14 |
| 2025-06-23 | util/prompt: make yes/no prompt reusable | Kristoffer Dalby | 3 | -17/+5 |
| 2025-06-20 | .github/workflows: shard the Windows builder | Brad Fitzpatrick | 1 | -0/+10 |
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-18 | net/tlsdial: fix TLS cert validation of HTTPS proxies | Brad Fitzpatrick | 1 | -0/+81 |
| 2025-06-18 | feature/tpm: implement ipn.StateStore using TPM sealing (#16030) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-06-18 | cmd/tsidp: fix OIDC client persistence across restarts | Raj Singh | 2 | -9/+148 |
| 2025-06-17 | cmd/tailscale: clean up dns --help messages (#16306) | Simon Law | 3 | -63/+98 |
| 2025-06-17 | derp/derphttp: add error notify for RunWatchConnectionLoop (#16261) | Mike O'Driscoll | 1 | -1/+2 |
| 2025-06-16 | scripts/check_license_headers.sh: delete, rewrite as a Go test | Brad Fitzpatrick | 4 | -0/+4 |
| 2025-06-16 | cmd/natc: add a flag to use specific DNS servers | James Tucker | 2 | -2/+225 |
| 2025-06-16 | tka: reject removal of the last signing key | Anton Tolchanov | 1 | -0/+3 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-13 | client/local: use an iterator to stream bus events (#16269) | M. J. Fromberger | 2 | -10/+3 |
| 2025-06-13 | net/netcheck: preserve live home DERP through packet loss | James Tucker | 1 | -1/+1 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-11 | ipn/localapi,client/local: add debug watcher for bus events (#16239) | Claus Lensbøl | 2 | -0/+25 |
| 2025-06-11 | cmd/natc: allow specifying the tsnet state dir | Fran Bull | 2 | -33/+34 |
| 2025-06-10 | cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) | Mike O'Driscoll | 3 | -2/+71 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 5 | -3/+28 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-06-05 | cmd/natc: use new on disk state store for consensus | Fran Bull | 2 | -2/+34 |
| 2025-06-04 | cmd/natc: add optional consensus backend | Fran Bull | 7 | -10/+1029 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 3 | -71/+682 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 2 | -2/+4 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 1 | -1/+1 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 4 | -18/+14 |
