| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-02-04 | WIPpercy/movelocalapi | Percy Wegmann | 31 | -93/+95 |
| 2025-02-04 | cmd/k8s-operator: reinstate HA Ingress reconciler (#14887) | Irbe Krumina | 7 | -42/+147 |
| 2025-02-03 | tailcfg: add JSON unmarshal helper for view of node/peer capabilities | Adrian Dewhurst | 1 | -3/+1 |
| 2025-02-03 | cmd/tailscale/cli: update tailscale down to accept an optional --reason | Nick Khyl | 1 | -0/+4 |
| 2025-01-31 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 4 | -18/+25 |
| 2025-01-30 | cli/funnel: fix comment typo (#14840) | Andrea Gottardo | 1 | -1/+1 |
| 2025-01-30 | cmd/containerboot: wait for consistent state on shutdown (#14263) | Tom Proctor | 5 | -75/+294 |
| 2025-01-30 | cmd/k8s-operator: temporarily disable HA Ingress controller (#14833) | Irbe Krumina | 3 | -60/+2 |
| 2025-01-30 | cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup P... | Irbe Krumina | 7 | -8/+916 |
| 2025-01-29 | Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-cr... | Percy Wegmann | 4 | -25/+18 |
| 2025-01-29 | cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817) | Irbe Krumina | 2 | -66/+1 |
| 2025-01-29 | cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't... | Irbe Krumina | 14 | -162/+775 |
| 2025-01-28 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 4 | -18/+25 |
| 2025-01-28 | cmd/tailscale: add warning to help text of `--force-reauth` (#14778) | yejingchen | 1 | -1/+1 |
| 2025-01-27 | tempfork/acme: add new package for x/crypto package acme fork, move | Brad Fitzpatrick | 2 | -2/+2 |
| 2025-01-26 | control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n | Brad Fitzpatrick | 3 | -5/+5 |
| 2025-01-26 | go.mod: bump depaware, add --internal flag to stop hiding internal packages | Brad Fitzpatrick | 5 | -0/+308 |
| 2025-01-24 | feature/capture: move packet capture to feature/*, out of iOS + CLI | Brad Fitzpatrick | 7 | -353/+411 |
| 2025-01-24 | cmd/natc: expose netstack metrics in client metrics in natc | James Tucker | 1 | -0/+4 |
| 2025-01-24 | cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc | James Tucker | 1 | -0/+31 |
| 2025-01-24 | cmd/derper,derp: make TCP write timeout configurable | Percy Wegmann | 1 | -0/+3 |
| 2025-01-23 | cmd/tailscale: fix, test some recent doc inconsistencies | Brad Fitzpatrick | 9 | -28/+68 |
| 2025-01-23 | cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the ... | Nick Khyl | 1 | -2/+23 |
| 2025-01-23 | net/tstun: move TAP support out to separate package feature/tap | Brad Fitzpatrick | 2 | -6/+8 |
| 2025-01-23 | cmd/k8s-operator: fix reconciler name clash (#14712) | Tom Proctor | 1 | -0/+7 |
| 2025-01-22 | feature/*: make Wake-on-LAN conditional, start supporting modular features | Brad Fitzpatrick | 3 | -2/+9 |
| 2025-01-22 | cmd/tailscale: define CLI tools to manipulate macOS network and system extens... | Andrea Gottardo | 8 | -68/+213 |
| 2025-01-22 | tailcfg: add ServiceName | Adrian Dewhurst | 3 | -9/+11 |
| 2025-01-22 | util/slicesx: add AppendNonzero | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-21 | ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation | Brad Fitzpatrick | 4 | -0/+4 |
| 2025-01-21 | cmd/tailscale/cli: clean up how optional commands get registered | Brad Fitzpatrick | 2 | -16/+20 |
| 2025-01-20 | build(deps): bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (#12468) | dependabot[bot] | 1 | -8/+8 |
| 2025-01-21 | cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ... | Irbe Krumina | 11 | -125/+1388 |
| 2025-01-20 | build(deps): bump nanoid from 3.3.4 to 3.3.8 in /cmd/tsconnect (#14352) | dependabot[bot] | 1 | -3/+3 |
| 2025-01-17 | go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#1... | Irbe Krumina | 20 | -250/+571 |
| 2025-01-16 | cmd/k8s-operator: require namespace config (#14648) | Tom Proctor | 1 | -0/+9 |
| 2025-01-15 | cmd/tailscaled: add some more depchecker dep tests | Brad Fitzpatrick | 1 | -2/+4 |
| 2025-01-15 | atomicfile: use ReplaceFile on Windows so that attributes and ACLs are preserved | Aaron Klotz | 4 | -4/+4 |
| 2025-01-15 | cmd/derper: support explicit configuration of mesh dial hosts | Percy Wegmann | 2 | -31/+28 |
| 2025-01-14 | cmd/viewer,all: consistently use "read-only" instead of "readonly" | Brad Fitzpatrick | 3 | -27/+27 |
| 2025-01-14 | go.mod: bump mdlayher/netlink and u-root/uio to use Go 1.21 NativeEndian | Brad Fitzpatrick | 4 | -8/+4 |
| 2025-01-14 | cmd/viewer,types/views,various: avoid allocations in pointer field getters wh... | Nick Khyl | 5 | -48/+84 |
| 2025-01-14 | cmd/tailscale/cli: add --posture-checking to tailscale up | Anton Tolchanov | 2 | -0/+19 |
| 2025-01-13 | cmd/tailscale/cli: only exit silently if len(args) == 0 | Michael Stapelberg | 1 | -3/+3 |
| 2025-01-12 | util/uniq,types/lazy,*: delete code that's now in Go std | Brad Fitzpatrick | 2 | -2/+0 |
| 2025-01-10 | prober: support filtering regions by region ID in addition to code | Percy Wegmann | 1 | -3/+3 |
| 2025-01-10 | cmd/containerboot: load containerboot serve config that does not contain HTTP... | Irbe Krumina | 2 | -11/+290 |
| 2025-01-10 | cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) | Irbe Krumina | 8 | -39/+207 |
| 2025-01-09 | all: illumos/solaris userspace only support | Nahum Shalman | 1 | -2/+2 |
| 2025-01-09 | cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optio... | Irbe Krumina | 12 | -94/+296 |