| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-02-18 | cmd/testwrapper: wip ideaicio/testwrapper2 | Paul Scott | 4 | -3/+278 |
| 2025-02-18 | cmd,tsnet,internal/client: create internal shim to deprecated control plane API | Percy Wegmann | 6 | -15/+6 |
| 2025-02-17 | cmd/testwrapper: temporarily remove test coverage support | Brad Fitzpatrick | 1 | -148/+1 |
| 2025-02-14 | various: keep tailscale connected when Always On mode is enabled on Windows | Nick Khyl | 3 | -0/+10 |
| 2025-02-14 | cmd/k8s-operator: allow to optionally configure an HTTP endpoint for the HA I... | Irbe Krumina | 2 | -110/+352 |
| 2025-02-14 | ipn, tailscale/cli: add TaildropTargetStatus and remove race with FileTargets... | kari-ts | 1 | -31/+63 |
| 2025-02-12 | go.mod: bump bart | James Tucker | 2 | -2/+4 |
| 2025-02-11 | net/dns: update to illarion/gonotify/v3 to fix a panic | Anton | 2 | -2/+4 |
| 2025-02-11 | go.mod: bump x/* deps | Brad Fitzpatrick | 3 | -0/+3 |
| 2025-02-06 | cmd/natc: remove speculative tuning from natc | James Tucker | 1 | -22/+0 |
| 2025-02-06 | go.mod,wgengine/netstack: use cubic congestion control, bump gvisor | James Tucker | 2 | -2/+2 |
| 2025-02-06 | cmd/tailscale: make ssh command work when tailscaled is built with the ts_inc... | Sandro Jäckel | 1 | -5/+3 |
| 2025-02-06 | cmd/derper: support no mesh key (#14931) | Mike O'Driscoll | 1 | -0/+2 |
| 2025-02-06 | cmd/derper: close setec after use (#14929) | Mike O'Driscoll | 1 | -0/+1 |
| 2025-02-05 | all: use new LocalAPI client package location | Brad Fitzpatrick | 22 | -52/+53 |
| 2025-02-05 | client,localclient: move localclient.go to client/local package | Percy Wegmann | 4 | -47/+51 |
| 2025-02-05 | cmd/derper: remove logging of mesh key (#14915) | Mike O'Driscoll | 1 | -1/+2 |
| 2025-02-05 | cmd/derper: add setec secret support (#14890) | Mike O'Driscoll | 5 | -9/+117 |
| 2025-02-04 | cmd/k8s-operator: reinstate HA Ingress reconciler (#14887) | Irbe Krumina | 7 | -42/+147 |
| 2025-02-03 | tailcfg: add JSON unmarshal helper for view of node/peer capabilities | Adrian Dewhurst | 1 | -3/+1 |
| 2025-02-03 | cmd/tailscale/cli: update tailscale down to accept an optional --reason | Nick Khyl | 1 | -0/+4 |
| 2025-01-31 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 4 | -18/+25 |
| 2025-01-30 | cli/funnel: fix comment typo (#14840) | Andrea Gottardo | 1 | -1/+1 |
| 2025-01-30 | cmd/containerboot: wait for consistent state on shutdown (#14263) | Tom Proctor | 5 | -75/+294 |
| 2025-01-30 | cmd/k8s-operator: temporarily disable HA Ingress controller (#14833) | Irbe Krumina | 3 | -60/+2 |
| 2025-01-30 | cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup P... | Irbe Krumina | 7 | -8/+916 |
| 2025-01-29 | Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-cr... | Percy Wegmann | 4 | -25/+18 |
| 2025-01-29 | cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817) | Irbe Krumina | 2 | -66/+1 |
| 2025-01-29 | cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't... | Irbe Krumina | 14 | -162/+775 |
| 2025-01-28 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 4 | -18/+25 |
| 2025-01-28 | cmd/tailscale: add warning to help text of `--force-reauth` (#14778) | yejingchen | 1 | -1/+1 |
| 2025-01-27 | tempfork/acme: add new package for x/crypto package acme fork, move | Brad Fitzpatrick | 2 | -2/+2 |
| 2025-01-26 | control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n | Brad Fitzpatrick | 3 | -5/+5 |
| 2025-01-26 | go.mod: bump depaware, add --internal flag to stop hiding internal packages | Brad Fitzpatrick | 5 | -0/+308 |
| 2025-01-24 | feature/capture: move packet capture to feature/*, out of iOS + CLI | Brad Fitzpatrick | 7 | -353/+411 |
| 2025-01-24 | cmd/natc: expose netstack metrics in client metrics in natc | James Tucker | 1 | -0/+4 |
| 2025-01-24 | cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc | James Tucker | 1 | -0/+31 |
| 2025-01-24 | cmd/derper,derp: make TCP write timeout configurable | Percy Wegmann | 1 | -0/+3 |
| 2025-01-23 | cmd/tailscale: fix, test some recent doc inconsistencies | Brad Fitzpatrick | 9 | -28/+68 |
| 2025-01-23 | cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the ... | Nick Khyl | 1 | -2/+23 |
| 2025-01-23 | net/tstun: move TAP support out to separate package feature/tap | Brad Fitzpatrick | 2 | -6/+8 |
| 2025-01-23 | cmd/k8s-operator: fix reconciler name clash (#14712) | Tom Proctor | 1 | -0/+7 |
| 2025-01-22 | feature/*: make Wake-on-LAN conditional, start supporting modular features | Brad Fitzpatrick | 3 | -2/+9 |
| 2025-01-22 | cmd/tailscale: define CLI tools to manipulate macOS network and system extens... | Andrea Gottardo | 8 | -68/+213 |
| 2025-01-22 | tailcfg: add ServiceName | Adrian Dewhurst | 3 | -9/+11 |
| 2025-01-22 | util/slicesx: add AppendNonzero | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-21 | ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation | Brad Fitzpatrick | 4 | -0/+4 |
| 2025-01-21 | cmd/tailscale/cli: clean up how optional commands get registered | Brad Fitzpatrick | 2 | -16/+20 |
| 2025-01-20 | build(deps): bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (#12468) | dependabot[bot] | 1 | -8/+8 |
| 2025-01-21 | cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ... | Irbe Krumina | 11 | -125/+1388 |