| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-07-25 | cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress servicesdns-proxygroup | Raj Singh | 2 | -98/+310 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 2 | -2/+4 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 1 | -1/+1 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 4 | -18/+14 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 2 | -56/+1 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 5 | -0/+5 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 11 | -21/+1427 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 6 | -25/+288 |
| 2025-05-19 | cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to c... | Irbe Krumina | 8 | -793/+1392 |
| 2025-05-15 | cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) | Patrick O'Doherty | 2 | -9/+91 |
| 2025-05-14 | cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou... | Irbe Krumina | 3 | -145/+191 |
| 2025-05-12 | cmd/derpprobe: exit with non-zero status if --once fails (#15926) | Simon Law | 1 | -0/+4 |
| 2025-05-09 | wgengine/magicsock: re-shape relayManager to use an event loop (#15935) | Jordan Whited | 1 | -0/+1 |
| 2025-05-09 | ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forward... | Nick Khyl | 2 | -2/+2 |
| 2025-05-09 | net/udprelay{/endpoint}, all: move ServerEndpoint to independent pkg (#15934) | Jordan Whited | 1 | -0/+1 |
| 2025-05-08 | feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare | Brad Fitzpatrick | 4 | -4/+17 |
| 2025-05-07 | cmd/tailscale/cli: omit "file" subcommand if taildrop is omitted from build | Brad Fitzpatrick | 2 | -9/+26 |
| 2025-05-07 | tsnet: don't depend on condregister & its default tailscaled features | Brad Fitzpatrick | 1 | -36/+7 |
| 2025-05-06 | taildrop: merge taildrop and feature/taildrop packages together | Brad Fitzpatrick | 2 | -2/+0 |
| 2025-05-06 | feature/taildrop: move rest of Taildrop out of LocalBackend | Brad Fitzpatrick | 5 | -147/+3 |
| 2025-05-06 | cmd/tailscale/cli: rename "--posture-checking" to "--report-posture" | Brad Fitzpatrick | 5 | -25/+37 |
| 2025-05-06 | cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857) | Tom Proctor | 4 | -625/+7 |
| 2025-05-02 | hostinfo,tailcfg: report TPM availability on windows/linux (#15831) | Andrew Lytvynov | 2 | -0/+16 |
| 2025-05-01 | cmd/tsidp: remove backticks in README in shell example | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-01 | feature/taildrop: add integration test | Brad Fitzpatrick | 1 | -4/+12 |
| 2025-05-01 | cmd/tailscale/cli: unhide `--posture-checking` flag to `set` | Anton Tolchanov | 1 | -1/+1 |
| 2025-04-28 | tsweb/varz: export GC CPU fraction gauge | James Tucker | 3 | -3/+4 |
| 2025-04-25 | types/mapx, ipn/ipnext: add ordered map, akin to set.Slice | Brad Fitzpatrick | 2 | -0/+2 |
| 2025-04-17 | cmd/tsidp: fix interface{} linter warnings (#15729) | Patrick O'Doherty | 2 | -97/+98 |
| 2025-04-17 | cmd/tsidp: add groups claim to tsidp (#15127) | Cedric Kienzler | 2 | -2/+997 |
| 2025-04-17 | cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) | Tom Meadows | 2 | -6/+176 |
| 2025-04-17 | cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key | Percy Wegmann | 1 | -8/+17 |
| 2025-04-16 | feature/taildrop: start moving Taildrop out of LocalBackend | Brad Fitzpatrick | 4 | -5/+22 |
| 2025-04-16 | net/netmon: publish events to event bus | David Anderson | 7 | -7/+19 |
| 2025-04-16 | derp/derphttp: remove ban on websockets dependency | David Anderson | 1 | -1/+0 |
| 2025-04-16 | cmd/tailscaled: clean up unnecessary logf indirection #cleanup | David Anderson | 1 | -3/+1 |
| 2025-04-16 | all: update the tsd.System constructor name (#15372) | M. J. Fromberger | 3 | -3/+3 |
| 2025-04-16 | {wgengine,util/portmapper}: add and plumb an event bus (#15359) | M. J. Fromberger | 1 | -3/+15 |
| 2025-04-16 | portmapper: update NewClient to use a Config argument | M. J. Fromberger | 1 | -1/+4 |
| 2025-04-16 | all: construct new System values with an event bus pre-populated | M. J. Fromberger | 5 | -8/+6 |
| 2025-04-16 | tsd: wire up the event bus to tailscaled | David Anderson | 3 | -3/+20 |
| 2025-04-16 | feature/{condregister,relayserver}: implement the skeleton for the relayserve... | Jordan Whited | 2 | -1/+5 |