| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-12-25 | cmd/derper: add --acme-email flag for GCP cert mode (#18278) | Raj Singh | 3 | -7/+21 |
| 2025-12-22 | cmd/tailscale/cli: document why there's no --force-reauth on login | Alex Chan | 1 | -0/+3 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 3 | -0/+26 |
| 2025-12-18 | cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) | Tom Proctor | 4 | -57/+125 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 1 | -3/+3 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 1 | -1/+1 |
| 2025-12-15 | .github,cmd/cigocacher: add flags --version --stats --cigocached-hostcmd/cigocacher/d0d993f5d6576b5d97d0242c64bbe2de049d6486 | Tom Proctor | 2 | -26/+81 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-10 | cmd/derper: add GCP Certificate Manager support (#18161) | Raj Singh | 4 | -8/+76 |
| 2025-12-09 | net/dns: retrample resolve.conf when another process has trampled it (#18069) | Claus Lensbøl | 1 | -2/+2 |
| 2025-12-09 | appc,feature: add the start of new conn25 app connector | Fran Bull | 3 | -5/+8 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 4 | -21/+439 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 3 | -1/+93 |
| 2025-12-03 | go.mod: bump the version of setec | Alex Chan | 1 | -1/+1 |
| 2025-12-02 | tsnet: enable node registration via federated identity | Gesa Stupperich | 2 | -1/+5 |
| 2025-12-02 | cmd/netlogfmt: allow empty --resolve-addrs flag (#18103) | Joe Tsai | 1 | -0/+1 |
| 2025-12-02 | cleanup: fix typos across multiple files | Naasir | 4 | -4/+4 |
| 2025-12-02 | .github,cmd/cigocacher: use cigocacher for windows | Tom Proctor | 4 | -24/+261 |
| 2025-12-01 | k8s-operator: Fix typos in egress-pod-readiness.go | Shaikh Naasir | 1 | -2/+2 |
| 2025-12-01 | cmd/tailscale/cli: soften the warning on `--force-reauth` for seamless | Alex Chan | 1 | -1/+1 |
| 2025-11-28 | cmd/k8s-operator fix populateTLSSecret on tests (#18088) | Fernando Serboncini | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596) | Fernando Serboncini | 5 | -36/+429 |
| 2025-11-26 | derp/derpserver: add a unique sender cardinality estimate | James Tucker | 1 | -0/+2 |
| 2025-11-25 | cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 | Jordan Whited | 1 | -1/+1 |
| 2025-11-25 | tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to... | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-11-25 | cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not ... | David Bond | 3 | -26/+71 |
| 2025-11-24 | cmd/tailscale,feature/relayserver,ipn: add relay-server-static-endpoints set ... | Jordan Whited | 2 | -23/+43 |
| 2025-11-24 | cmd/cigocacher,go.mod: add cigocacher cmd | Tom Proctor | 9 | -13/+442 |
| 2025-11-20 | cmd/tailscaled,ipn: show a health warning when state store fails to open (#17... | Andrew Lytvynov | 4 | -3/+64 |
| 2025-11-20 | ipn/ipnlocal: add validations when setting serve config (#17950) | Harry Harpham | 2 | -272/+0 |
| 2025-11-20 | cmd/k8s-operator: add multi replica support for recorders (#17864) | David Bond | 7 | -150/+366 |
| 2025-11-20 | cmd/k8s-operator: use stable image for k8s-nameserver (#17985) | David Bond | 2 | -5/+4 |
| 2025-11-19 | cmd/tailscale/cli: allow remote target as service destination (#17607) | KevinLiang10 | 4 | -21/+128 |
| 2025-11-19 | cmd/tailscale/cli: remove Latin abbreviations from CLI help text | Alex Chan | 2 | -2/+2 |
| 2025-11-19 | cmd/k8s-operator: fix type comparison in apiserver proxy template (#17981) | Raj Singh | 1 | -3/+3 |
| 2025-11-19 | cmd/k8s-operator: default to stable image (#17848) | David Bond | 2 | -3/+3 |
| 2025-11-18 | cmd/netlogfmt: support resolving IP addresses to synonymous labels (#17955) | Joe Tsai | 1 | -62/+87 |
| 2025-11-18 | types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key r... | James Tucker | 1 | -0/+6 |
| 2025-11-18 | types/netmap,*: remove some redundant fields from NetMap | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-11-18 | cmd/vet/jsontags: fix a typo in an error message | Alex Chan | 1 | -2/+2 |
| 2025-11-18 | all: rename variables with lowercase-l/uppercase-I | Alex Chan | 18 | -225/+225 |
| 2025-11-18 | cmd/tailscale/cli: warn if a simple up would change prefs (#17877) | James 'zofrex' Sanderson | 2 | -23/+73 |
| 2025-11-17 | ipn{,/local},cmd/tailscale: add "sync" flag and pref to disable control map poll | Brad Fitzpatrick | 2 | -1/+5 |
| 2025-11-17 | ipn/ipnlocal: use an in-memory TKA store if FS is unavailable | Alex Chan | 1 | -0/+1 |
| 2025-11-17 | go.mod: bump golang.org/x/crypto (#17907) | Andrew Lytvynov | 3 | -3/+3 |
| 2025-11-17 | cmd/tailscale/cli: stabilise the output of `tailscale lock log --json` | Alex Chan | 5 | -10/+511 |
| 2025-11-16 | ipn/ipnlocal: add PROXY protocol support to Funnel/Serve | Andrew Dunham | 6 | -22/+105 |