| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-07-28 | cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName`k8s_priority_class | Lee Briggs | 4 | -0/+17 |
| 2025-07-03 | cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) | David Bond | 5 | -11/+24 |
| 2025-07-02 | cmd/k8s-operator: Allow configuration of login server (#16432) | David Bond | 10 | -10/+50 |
| 2025-06-30 | cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) | Tom Meadows | 6 | -28/+398 |
| 2025-06-27 | tsidp: update README to refer to community projects (#16411) | Simon Law | 1 | -2/+2 |
| 2025-06-27 | ipn/store: make StateStore.All optional (#16409) | Andrew Lytvynov | 3 | -28/+0 |
| 2025-06-27 | cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (... | Tom Proctor | 16 | -188/+349 |
| 2025-06-27 | cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) | Tom Meadows | 12 | -63/+1972 |
| 2025-06-27 | cmd/tailscale: use text format for TKA head | Kristoffer Dalby | 1 | -1/+5 |
| 2025-06-27 | cmd/tailscale: add tlpub: prefix to lock log output | Kristoffer Dalby | 1 | -3/+3 |
| 2025-06-26 | ipn/store: automatically migrate between plaintext and encrypted state (#16318) | Andrew Lytvynov | 4 | -4/+73 |
| 2025-06-25 | cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) | David Bond | 1 | -0/+25 |
| 2025-06-23 | cmd/tailscale: warn user about nllock key removal without resigning | Kristoffer Dalby | 1 | -0/+14 |
| 2025-06-23 | util/prompt: make yes/no prompt reusable | Kristoffer Dalby | 3 | -17/+5 |
| 2025-06-20 | .github/workflows: shard the Windows builder | Brad Fitzpatrick | 1 | -0/+10 |
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-18 | net/tlsdial: fix TLS cert validation of HTTPS proxies | Brad Fitzpatrick | 1 | -0/+81 |
| 2025-06-18 | feature/tpm: implement ipn.StateStore using TPM sealing (#16030) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-06-18 | cmd/tsidp: fix OIDC client persistence across restarts | Raj Singh | 2 | -9/+148 |
| 2025-06-17 | cmd/tailscale: clean up dns --help messages (#16306) | Simon Law | 3 | -63/+98 |
| 2025-06-17 | derp/derphttp: add error notify for RunWatchConnectionLoop (#16261) | Mike O'Driscoll | 1 | -1/+2 |
| 2025-06-16 | scripts/check_license_headers.sh: delete, rewrite as a Go test | Brad Fitzpatrick | 4 | -0/+4 |
| 2025-06-16 | cmd/natc: add a flag to use specific DNS servers | James Tucker | 2 | -2/+225 |
| 2025-06-16 | tka: reject removal of the last signing key | Anton Tolchanov | 1 | -0/+3 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-13 | client/local: use an iterator to stream bus events (#16269) | M. J. Fromberger | 2 | -10/+3 |
| 2025-06-13 | net/netcheck: preserve live home DERP through packet loss | James Tucker | 1 | -1/+1 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-11 | ipn/localapi,client/local: add debug watcher for bus events (#16239) | Claus Lensbøl | 2 | -0/+25 |
| 2025-06-11 | cmd/natc: allow specifying the tsnet state dir | Fran Bull | 2 | -33/+34 |
| 2025-06-10 | cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) | Mike O'Driscoll | 3 | -2/+71 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 5 | -3/+28 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-06-05 | cmd/natc: use new on disk state store for consensus | Fran Bull | 2 | -2/+34 |
| 2025-06-04 | cmd/natc: add optional consensus backend | Fran Bull | 7 | -10/+1029 |
| 2025-06-03 | cmd/tsidp: add Docker image building support (#16078) | Raj Singh | 3 | -71/+682 |
| 2025-05-30 | cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) | Irbe Krumina | 3 | -91/+322 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 2 | -2/+4 |
| 2025-05-29 | net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier | Nick Khyl | 1 | -1/+1 |
| 2025-05-24 | cmd/tsidp: add web UI for managing OIDC clients (#16068) | Raj Singh | 6 | -7/+1097 |
| 2025-05-24 | cmd/tsidp: Fix sending string for refresh_token | Tim Klocke | 1 | -1/+1 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 4 | -18/+14 |
| 2025-05-22 | cmd/derper: fix mesh auth for DERP servers (#16061) | Simon Law | 2 | -56/+1 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 5 | -0/+5 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 11 | -21/+1427 |