| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-03-26 | cmd/k8s-operator,k8s-operator: disable HA Ingress before stable release (#15433)v1.83.0-pre | Irbe Krumina | 4 | -184/+2 |
| 2025-03-25 | cmd/natc: add test and fix for ip exhaustion | James Tucker | 2 | -18/+104 |
| 2025-03-26 | cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPServic... | Irbe Krumina | 4 | -32/+168 |
| 2025-03-24 | cmd/natc: add some initial unit test coverage | James Tucker | 1 | -0/+365 |
| 2025-03-21 | cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ow... | Tom Proctor | 2 | -71/+90 |
| 2025-03-21 | cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for... | Irbe Krumina | 6 | -168/+397 |
| 2025-03-20 | cmd/tailscale: add CLI debug command to do raw LocalAPI requests | Brad Fitzpatrick | 1 | -0/+86 |
| 2025-03-19 | cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353) | Tom Proctor | 2 | -20/+12 |
| 2025-03-19 | cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode ... | Irbe Krumina | 17 | -66/+254 |
| 2025-03-19 | cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343) | Tom Proctor | 6 | -51/+158 |
| 2025-03-18 | tsweb: split promvarz into an optional dependency | David Anderson | 9 | -21/+35 |
| 2025-03-18 | ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore... | Irbe Krumina | 1 | -1/+1 |
| 2025-03-18 | cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344) | Tom Proctor | 2 | -17/+60 |
| 2025-03-18 | cmd/proxy-to-grafana: support setting Grafana role via grants | Anton Tolchanov | 1 | -7/+97 |
| 2025-03-14 | cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) | Irbe Krumina | 7 | -5/+419 |
| 2025-03-13 | cmd/testwrapper: print failed tests preventing retry (#15270) | Paul Scott | 1 | -0/+14 |
| 2025-03-12 | control/controlclient, ipn: add client audit logging (#14950) | Jonathan Nobels | 2 | -0/+2 |
| 2025-03-11 | tsnet,wgengine: fix src to primary Tailscale IP for TCP dials | Fran Bull | 1 | -0/+1 |
| 2025-03-11 | cmd/tsidp: allow CORS requests to openid-configuration (#15229) | Patrick O'Doherty | 1 | -0/+12 |
| 2025-03-10 | cmd/natc: error and log when IP range is exhausted | James Tucker | 1 | -7/+15 |
| 2025-03-07 | cmd/derper, derp/derphttp: support, generate self-signed IP address certs | Brad Fitzpatrick | 2 | -1/+174 |
| 2025-03-06 | cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157) | Irbe Krumina | 4 | -187/+472 |
| 2025-03-06 | cmd/tsidp: use constant time comparison for client_id/secret (#15222) | Patrick O'Doherty | 1 | -1/+4 |
| 2025-03-06 | cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946) | Tom Proctor | 6 | -36/+251 |
| 2025-03-05 | cmd/tsidp: add README and Dockerfile (#15205) | Sam Linville | 2 | -0/+141 |
| 2025-03-04 | cmd/derper: add --home flag to control home page behavior | Brad Fitzpatrick | 1 | -13/+39 |
| 2025-03-04 | cmd/testwrapper: Display package-level output | James Sanderson | 1 | -2/+14 |
| 2025-03-04 | cmd/hello: display native ipv4 (#15191) | Brian Palmer | 1 | -0/+5 |
| 2025-02-27 | cmd/containerboot: fix nil pointer exception (#15090) | Irbe Krumina | 2 | -4/+11 |
| 2025-02-25 | cmd/derper: add --socket flag to change unix socket path to tailscaled | Brad Fitzpatrick | 1 | -0/+4 |
| 2025-02-24 | cmd/testwrapper/flakytest: add Marked to check if in flakytest (#15119) | Paul Scott | 2 | -0/+75 |
| 2025-02-19 | go.toolchain.branch: update to Go 1.24 (#15016) | Brad Fitzpatrick | 8 | -163/+307 |
| 2025-02-19 | various: disable MPTCP when setting TCP_USER_TIMEOUT sockopt (#15063) | Andrew Lytvynov | 1 | -0/+3 |
| 2025-02-18 | client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service... | Percy Wegmann | 4 | -155/+22 |
| 2025-02-18 | cmd/gitops-pusher: log error details when unable to fetch ACL ETag | Percy Wegmann | 1 | -1/+3 |
| 2025-02-18 | cmd,tsnet,internal/client: create internal shim to deprecated control plane API | Percy Wegmann | 6 | -15/+6 |
| 2025-02-17 | cmd/testwrapper: temporarily remove test coverage support | Brad Fitzpatrick | 1 | -148/+1 |
| 2025-02-14 | various: keep tailscale connected when Always On mode is enabled on Windows | Nick Khyl | 3 | -0/+10 |
| 2025-02-14 | cmd/k8s-operator: allow to optionally configure an HTTP endpoint for the HA I... | Irbe Krumina | 2 | -110/+352 |
| 2025-02-14 | ipn, tailscale/cli: add TaildropTargetStatus and remove race with FileTargets... | kari-ts | 1 | -31/+63 |
| 2025-02-12 | go.mod: bump bart | James Tucker | 2 | -2/+4 |
| 2025-02-11 | net/dns: update to illarion/gonotify/v3 to fix a panic | Anton | 2 | -2/+4 |
| 2025-02-11 | go.mod: bump x/* deps | Brad Fitzpatrick | 3 | -0/+3 |
| 2025-02-06 | cmd/natc: remove speculative tuning from natc | James Tucker | 1 | -22/+0 |
| 2025-02-06 | go.mod,wgengine/netstack: use cubic congestion control, bump gvisor | James Tucker | 2 | -2/+2 |
| 2025-02-06 | cmd/tailscale: make ssh command work when tailscaled is built with the ts_inc... | Sandro Jäckel | 1 | -5/+3 |
| 2025-02-06 | cmd/derper: support no mesh key (#14931) | Mike O'Driscoll | 1 | -0/+2 |
| 2025-02-06 | cmd/derper: close setec after use (#14929) | Mike O'Driscoll | 1 | -0/+1 |
| 2025-02-05 | all: use new LocalAPI client package location | Brad Fitzpatrick | 22 | -52/+53 |
| 2025-02-05 | client,localclient: move localclient.go to client/local package | Percy Wegmann | 4 | -47/+51 |