| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-05-05 | cmd/tailscale/cli: unhide `--report posture` flag in `up` | Alex Chan | 1 | -1/+1 |
| 2026-05-04 | wgengine/netstack, net/ping: stop using pro-bing and use our net/ping instead | Brad Fitzpatrick | 3 | -23/+18 |
| 2026-05-04 | cmd/vet/lowerell, drive/driveimpl: forbid variables named "l" or "I" | Brad Fitzpatrick | 4 | -1/+249 |
| 2026-05-01 | cmd/k8s-operator: add authkey reissuing to recorder reconciler (#19556) | Tom Meadows | 4 | -33/+151 |
| 2026-05-01 | client/web: move API permission checks into handlers (#19576) | Andrew Lytvynov | 4 | -4/+4 |
| 2026-05-01 | cmd/tailscale/cli: fetch netmap via current-netmap debug action | Brad Fitzpatrick | 1 | -9/+2 |
| 2026-05-01 | all: migrate code off Notify.NetMap to Notify.SelfChange | Brad Fitzpatrick | 8 | -347/+454 |
| 2026-04-30 | client/local, ipn/localapi, all: add CertDomains and DNSConfig accessors | Brad Fitzpatrick | 2 | -43/+10 |
| 2026-04-30 | cmd/hello: split server into helloserver package | Brad Fitzpatrick | 3 | -180/+151 |
| 2026-04-30 | cmd/{containerboot,k8s-operator}: don't return pointers to maps (#19593) | David Bond | 5 | -28/+32 |
| 2026-04-30 | cmd/tailscale/cli: allow tag without "tag:" prefix in 'tailscale up' | Brad Fitzpatrick | 2 | -7/+45 |
| 2026-04-29 | tstest/natlab/vmtest: add TestDiscoKeyChange | Brad Fitzpatrick | 2 | -0/+64 |
| 2026-04-29 | cmd/derper,derp: add metrics for rate limit hits (#19560) | Alex Valiushko | 1 | -1/+1 |
| 2026-04-29 | tstest/natlab/vmtest: add macOS VM snapshot caching for fast test starts | Brad Fitzpatrick | 3 | -2/+195 |
| 2026-04-29 | cmd/k8s-operator: add nodeSelector to `DNSConfig` resource (#19429) | David Bond | 4 | -9/+28 |
| 2026-04-28 | cmd/hello: remove hello.ipn.dev (#19567) | Noel O'Brien | 1 | -23/+2 |
| 2026-04-28 | tstest/natlab/vmtest, cmd/tta: add TestTaildrop | Brad Fitzpatrick | 1 | -0/+67 |
| 2026-04-28 | tstest/natlab/{vmtest,vnet}, cmd/tta: add TestMullvadExitNode | Brad Fitzpatrick | 2 | -0/+167 |
| 2026-04-28 | cmd/tailscale/cli: drive "file cp" progress and offline warning from peerAPI | Brad Fitzpatrick | 1 | -20/+189 |
| 2026-04-28 | tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool | Brad Fitzpatrick | 4 | -219/+255 |
| 2026-04-28 | cmd/k8s-operator: truncate long label values in metrics resources (#18895) | Daniel Pañeda | 2 | -6/+7 |
| 2026-04-27 | client/systray: support several different color themes | Will Norris | 3 | -5/+18 |
| 2026-04-27 | tstest/natlab/{vmtest,vnet}, cmd/tta: add TestExitNode | Brad Fitzpatrick | 3 | -1/+56 |
| 2026-04-27 | cmd/k8s-operator: use dynamic resource names in e2e ingress tests (#19536) | BeckyPauley | 2 | -50/+54 |
| 2026-04-23 | go.mod: bump github.com/google/go-containerregistry (#19500) | Andrew Lytvynov | 6 | -6/+7 |
| 2026-04-22 | tstest/natlab/vmtest,cmd/tta: add TestSiteToSite | Brad Fitzpatrick | 1 | -1/+20 |
| 2026-04-22 | cmd/tsnet-proxy: add tsnet-based port proxy tool (#19468) | Fernando Serboncini | 1 | -0/+173 |
| 2026-04-20 | ipn/ipnlocal,tailcfg: add /debug/tka c2n endpoint (#19198) | James 'zofrex' Sanderson | 1 | -0/+2 |
| 2026-04-17 | cmd/k8s-operator: add e2e test setup and l7 ingress test for multi-tailnet (#... | BeckyPauley | 2 | -27/+328 |
| 2026-04-17 | cmd/cloner: deep-clone pointer elements in map-of-slice values | Andrew Dunham | 5 | -38/+193 |
| 2026-04-17 | cmd/k8s-operator: add priorityClassName support to helm chart (#19236) | Bjorn Stange | 2 | -0/+5 |
| 2026-04-16 | control/tsp, cmd/tsp: add low-level Tailscale protocol client and tool | Brad Fitzpatrick | 1 | -0/+513 |
| 2026-04-15 | cmd/k8s-operator: add affinity rules to DNSConfig (#19360) | David Bond | 4 | -0/+1783 |
| 2026-04-15 | control/controlclient: enable request signatures on macOS (#19317) | Jonathan Nobels | 3 | -3/+3 |
| 2026-04-15 | cmd/containerboot,cmd/k8s-proxy,kube: add authkey renewal to k8s-proxy (#19221) | Tom Meadows | 6 | -127/+415 |
| 2026-04-13 | all: fix six tests that failed with -count=2 | Brad Fitzpatrick | 2 | -13/+40 |
| 2026-04-13 | cmd/derper: fix TestLookupMetric to pass when run alone | Brad Fitzpatrick | 1 | -6/+28 |
| 2026-04-13 | cmd/containerboot: mark TestContainerBoot as flaky | Brad Fitzpatrick | 1 | -0/+2 |
| 2026-04-13 | cmd/derper: mark rate-config flag as experimental and unstable | Jordan Whited | 1 | -1/+1 |
| 2026-04-10 | cmd/derper,derp: add --rate-config file with SIGHUP reload (#19314) | Mike O'Driscoll | 1 | -7/+26 |
| 2026-04-09 | cmd/k8s-operator: set PreferDualStack on ProxyGroup egress services (#19194) | Fernando Serboncini | 2 | -3/+5 |
| 2026-04-09 | cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) | David Bond | 23 | -882/+645 |
| 2026-04-08 | vmtest: add VM-based integration test framework | Brad Fitzpatrick | 1 | -7/+101 |
| 2026-04-07 | tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths | Brad Fitzpatrick | 2 | -0/+2 |
| 2026-04-07 | cmd/containerboot: rate-limit IPN bus netmap notifications | Doug Bryant | 1 | -3/+3 |
| 2026-04-07 | derp/derpserver: add per-connection receive rate limiting (#19222) | Mike O'Driscoll | 1 | -0/+10 |
| 2026-04-07 | ipn/desktop: move behind feature/condregister | Brad Fitzpatrick | 2 | -11/+10 |
| 2026-04-07 | ipn/localapi, cli, clientmetric: add ipnbus feature tag; fix omit.go stub | Brad Fitzpatrick | 1 | -0/+5 |
| 2026-04-07 | ssh: replace tempfork with tailscale/gliderssh | Kristoffer Dalby | 2 | -15/+15 |
| 2026-04-05 | cmd/cloner, cmd/viewer: handle named map/slice types with Clone/View methods | Brad Fitzpatrick | 9 | -4/+439 |