| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-10-24 | health: compare warnable codes to avoid errors on release branch (#17637) | Claus Lensbøl | 2 | -2/+2 |
| 2025-10-20 | cmd/tailscale: improve the error message for `lock log` with no lock | Alex Chan | 1 | -0/+8 |
| 2025-10-17 | cmd/tailscale/cli,feature: add support for identity federation (#17529) | Max Coulombe | 5 | -8/+56 |
| 2025-10-17 | cmd/k8s-operator: allow pod tolerations on nameservers (#17260) | David Bond | 4 | -7/+117 |
| 2025-10-16 | all: use a consistent capitalisation for "Tailnet Lock" | Alex Chan | 1 | -4/+4 |
| 2025-10-16 | wgengine/netlog: merge connstats into package (#17557) | Joe Tsai | 3 | -8/+5 |
| 2025-10-15 | net/connstats: prepare to remove package (#17554) | Joe Tsai | 5 | -5/+8 |
| 2025-10-15 | cmd/tailscale: surface relay-server-port set flag (#17528) | Jordan Whited | 1 | -1/+1 |
| 2025-10-10 | types/persist: add AttestationKey (#17281) | Patrick O'Doherty | 8 | -22/+153 |
| 2025-10-10 | cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (#17... | Naman Sood | 3 | -1/+303 |
| 2025-10-10 | tsweb/varz: add support for ShardedInt metrics | Anton Tolchanov | 1 | -1/+1 |
| 2025-10-09 | feature/relayserver: init server at config time instead of request time (#17484) | Jordan Whited | 1 | -1/+1 |
| 2025-10-08 | cmd/tailscale/cli: only print authURLs and device approval URLs once | Alex Chan | 1 | -10/+38 |
| 2025-10-08 | go.toolchain.rev: bump Go to 1.25.2 | Brad Fitzpatrick | 8 | -4/+8 |
| 2025-10-08 | cmd/tsrecorder: adds sending api level logging to tsrecorder (#16960) | Tom Meadows | 2 | -6/+28 |
| 2025-10-07 | cmd/tailscaled: default state encryption off for incompatible args (#17480) | Tom Proctor | 1 | -28/+38 |
| 2025-10-07 | feature/linkspeed: move cosmetic tstun netlink code out to modular feature | Brad Fitzpatrick | 6 | -11/+9 |
| 2025-10-06 | util/checkchange: stop using deephash everywhere | Brad Fitzpatrick | 6 | -7/+12 |
| 2025-10-06 | cmd/tailscaled: guard some flag work with buildfeatures checks | Brad Fitzpatrick | 1 | -29/+35 |
| 2025-10-06 | feature/condlite/expvar: add expvar stub package when metrics not needed | Brad Fitzpatrick | 6 | -8/+12 |
| 2025-10-06 | feature/featuretags: make usermetrics modular | Brad Fitzpatrick | 8 | -21/+18 |
| 2025-10-06 | cmd/testwrapper/flakytest: use t.Attr annotation on flaky tests | Brad Fitzpatrick | 2 | -2/+12 |
| 2025-10-06 | all: use buildfeatures consts in a few more places | Brad Fitzpatrick | 1 | -1/+3 |
| 2025-10-04 | wgengine: stop importing flowtrack when unused | Brad Fitzpatrick | 5 | -5/+5 |
| 2025-10-04 | net/connstats: make it modular (omittable) | Brad Fitzpatrick | 3 | -4/+3 |
| 2025-10-04 | feature/c2n: move answerC2N code + deps out of control/controlclient | Brad Fitzpatrick | 5 | -9/+10 |
| 2025-10-03 | feature/ace: make ACE modular | Brad Fitzpatrick | 6 | -7/+5 |
| 2025-10-03 | health: make it omittable | Brad Fitzpatrick | 6 | -10/+10 |
| 2025-10-03 | all: use buildfeature constants in a few more places | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-10-03 | cmd/k8s-proxy: switching to using ipn/store/kubestore (#17402) | Tom Meadows | 1 | -1/+3 |
| 2025-10-02 | appc,*: publish events for route updates and storage (#17392) | M. J. Fromberger | 8 | -20/+18 |
| 2025-10-02 | control/controlclient: remove x/net/http2, use net/http | Brad Fitzpatrick | 9 | -87/+74 |
| 2025-10-02 | feature/featuretags, all: add build features, use existing ones in more places | Brad Fitzpatrick | 6 | -16/+16 |
| 2025-10-02 | cmd/k8s-operator: add .gitignore for generated chart CRDs (#17406) | Tom Proctor | 3 | -2/+20 |
| 2025-10-01 | cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376) | Andrew Lytvynov | 2 | -5/+39 |
| 2025-10-01 | control/ts2021: rename from internal/noiseconn in prep for controlclient split | Brad Fitzpatrick | 7 | -8/+8 |
| 2025-10-01 | Makefile, cmd/*/depaware.txt: split out vendor packages explicitly | Brad Fitzpatrick | 8 | -60/+156 |
| 2025-10-01 | net/netmon: remove usage of direct callbacks from netmon (#17292) | Claus Lensbøl | 3 | -11/+35 |
| 2025-10-01 | tsnet: remove AuthenticatedAPITransport (API-over-noise) support | Brad Fitzpatrick | 1 | -9/+0 |
| 2025-10-01 | all: use Go 1.20's errors.Join instead of our multierr package | Brad Fitzpatrick | 9 | -9/+3 |
| 2025-10-01 | cmd/k8s-proxy: importing feature/condregister on cmd/k8s-proxy (#17383) | Tom Meadows | 1 | -0/+1 |
| 2025-09-30 | ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug | Brad Fitzpatrick | 3 | -6/+4 |
| 2025-09-30 | feature/featuretags, ipn/conffile: make HuJSON support in config files optional | Brad Fitzpatrick | 3 | -4/+8 |
| 2025-09-30 | feature/appconnectors: start making it modular | Brad Fitzpatrick | 3 | -2/+3 |
| 2025-09-30 | cmd/tailscaled, ipn/localapi, util/eventbus: don't link in regexp when debug ... | Brad Fitzpatrick | 5 | -57/+87 |
| 2025-09-30 | feature/featuretags: add a catch-all "Debug" feature flag | Brad Fitzpatrick | 2 | -4/+4 |
| 2025-09-30 | util/prompt: add a default and take default in non-interactive cases | James Tucker | 4 | -4/+4 |
| 2025-09-30 | feature, net/tshttpproxy: pull out support for using proxies as a feature | Brad Fitzpatrick | 12 | -33/+56 |
| 2025-09-30 | ipn/ipnlocal: drop h2c package, use net/http's support | Brad Fitzpatrick | 5 | -10/+5 |
| 2025-09-30 | cmd/k8s-operator: add DNS policy and config support to ProxyClass (#16887) | Raj Singh | 4 | -0/+131 |