| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-09-05 | cmd/tailscale/cli: add new line for set --webclient (#17043) | Mike O'Driscoll | 1 | -1/+1 |
| 2025-09-04 | cmd/containerboot: do not reset state on non-existant secret (#17021) | David Bond | 1 | -2/+5 |
| 2025-09-03 | cmd/k8s-operator: update connector example (#17020) | David Bond | 1 | -1/+2 |
| 2025-09-02 | util/syspolicy: finish adding ts_omit_syspolicy build tags, tests | Brad Fitzpatrick | 3 | -34/+54 |
| 2025-09-02 | util/syspolicy: finish plumbing policyclient, add feature/syspolicy, move glo... | Brad Fitzpatrick | 9 | -30/+37 |
| 2025-09-02 | util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new l... | Brad Fitzpatrick | 5 | -0/+5 |
| 2025-09-02 | cmd/tailscale/cli: prompt for y/n when attempting risky action | Percy Wegmann | 1 | -25/+4 |
| 2025-09-02 | cmd/tailscale/cli: add a debug command to force a risky action | Brad Fitzpatrick | 1 | -0/+26 |
| 2025-09-02 | cmd/k8s-operator: allow specifying replicas for connectors (#16721) | David Bond | 10 | -193/+566 |
| 2025-09-01 | util/syspolicy/policyclient: add policyclient.Client interface, start plumbing | Brad Fitzpatrick | 5 | -3/+8 |
| 2025-08-31 | util/syspolicy/*: move syspolicy keys to new const leaf "pkey" package | Brad Fitzpatrick | 7 | -4/+10 |
| 2025-08-29 | cmd/tsidp: add allow-insecure-no-client-registration and JSON file migration ... | Remy Guercio | 2 | -74/+1441 |
| 2025-08-28 | syncs: delete WaitGroup and use sync.WaitGroup.Go in Go 1.25 | Joe Tsai | 3 | -6/+5 |
| 2025-08-28 | wgengine/magicsock: shorten process internal DERP queue | James Tucker | 3 | -3/+0 |
| 2025-08-28 | util/ringbuffer: rename to ringlog | James Tucker | 3 | -3/+3 |
| 2025-08-27 | cmd/viewer: add field comments to generated view methods | Maisem Ali | 3 | -52/+132 |
| 2025-08-26 | go.toolchain.branch: bump to go1.25 (#16954) | Patrick O'Doherty | 6 | -17/+82 |
| 2025-08-25 | cmd/tailscaled: add Dnscache as a service dependency | Aaron Klotz | 1 | -0/+1 |
| 2025-08-25 | client/systray: go back to using upstream library (#16938) | Claus Lensbøl | 1 | -6/+6 |
| 2025-08-24 | cmd/tsidp: Add Docker image to README (#16915) | Kot C | 1 | -0/+4 |
| 2025-08-22 | fix: invalid memory address or nil pointer dereference (#16922) | Need-an-AwP | 1 | -0/+1 |
| 2025-08-22 | cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode (#16919) | Tom Proctor | 1 | -1/+1 |
| 2025-08-21 | wgengine/magicsock,net/sockopts: export Windows ICMP suppression logic (#16917) | Jordan Whited | 3 | -3/+3 |
| 2025-08-21 | net/udprelay: increase socket buffer size (#16910) | Jordan Whited | 1 | -1/+1 |
| 2025-08-21 | cmd/tsidp: update oidc-funnel-clients.json store path (#16845) | Mike O'Driscoll | 1 | -7/+36 |
| 2025-08-20 | net/sockopts,wgengine/magicsock: export socket buffer sizing logic (#16909) | Jordan Whited | 3 | -0/+3 |
| 2025-08-20 | cmd/natc,tsconsensus: add cluster config admin | Fran Bull | 2 | -0/+55 |
| 2025-08-20 | tsconsensus,cmd/natc: add 'follower only' bootstrap option | Fran Bull | 2 | -16/+30 |
| 2025-08-19 | net/udprelay: use batching.Conn (#16866) | Jordan Whited | 1 | -1/+1 |
| 2025-08-16 | cmd/derpprobe,prober: add run all probes handler (#16875) | Mike O'Driscoll | 1 | -0/+1 |
| 2025-08-15 | {cmd/dist,release/dist}: add support for intermediary QNAP signing certificates | Percy Wegmann | 1 | -9/+11 |
| 2025-08-14 | cmd/viewer, types/views: implement support for json/v2 (#16852) | Joe Tsai | 5 | -44/+310 |
| 2025-08-13 | net/{batching,packet},wgengine/magicsock: export batchingConn (#16848) | Jordan Whited | 3 | -0/+3 |
| 2025-08-13 | cmd/tailscale: add --json-docs flag (#16851) | Andrew Lytvynov | 1 | -1/+58 |
| 2025-08-12 | cmd/tailscale: fix a panic in netcheck portmapper construction (#16843) | M. J. Fromberger | 1 | -2/+3 |
| 2025-08-08 | cmd/tailscale/cli: move systray configuration to tailscale configure (#16817) | Claus Lensbøl | 4 | -23/+62 |
| 2025-08-07 | client/systray: temporarily replace systray module (#16807) | Claus Lensbøl | 1 | -6/+6 |
| 2025-08-07 | client/systray: add startup script generator for systemd (#16801) | Claus Lensbøl | 1 | -3/+27 |
| 2025-08-05 | .github/workflows: enforce github action version pinning (#16768) | Andrew Lytvynov | 3 | -1/+6 |
| 2025-08-05 | client/systray: allow specifying tailscaled socket | Will Norris | 2 | -3/+10 |
| 2025-08-05 | wgengine/router: rely on events for deleted IP rules (#16744) | Claus Lensbøl | 1 | -1/+1 |
| 2025-08-01 | cmd/tailscale: add systray subcommand on Linux builds | Will Norris | 4 | -3/+80 |
| 2025-07-31 | cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName` (#16685) | Lee Briggs | 4 | -0/+16 |
| 2025-07-31 | cmd/tsidp,tsnet: update tsidp oidc-key store path (#16735) | Mike O'Driscoll | 1 | -3/+23 |
| 2025-07-29 | cmd/tailscale/cli: update message for disable service (#16705) | KevinLiang10 | 1 | -1/+1 |
| 2025-07-25 | cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services ... | Raj Singh | 2 | -98/+310 |
| 2025-07-25 | cmd/tailscaled: update installSystemDaemonWindows to set the correct system s... | Aaron Klotz | 1 | -0/+10 |
| 2025-07-25 | cmd/tailscale: allow SSH to IPs or DNS names without MagicDNS (#16591) | Danni Popova | 1 | -2/+61 |
| 2025-07-23 | cmd/tailscale/cli: use DNS name instead of Location to hide Mullvad exit node... | Nick Khyl | 1 | -3/+4 |
| 2025-07-22 | cmd/tailscale/cli: add advertise command to advertise a node as service proxy... | KevinLiang10 | 2 | -11/+36 |