| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-11-24 | WIPbradfitz/disco_change_remove_sync | Brad Fitzpatrick | 2 | -0/+26 |
| 2025-11-20 | cmd/tailscaled,ipn: show a health warning when state store fails to open (#17... | Andrew Lytvynov | 4 | -1/+105 |
| 2025-11-20 | ipn/ipnlocal: add validations when setting serve config (#17950) | Harry Harpham | 3 | -42/+483 |
| 2025-11-19 | cmd/tailscale/cli: allow remote target as service destination (#17607) | KevinLiang10 | 3 | -23/+68 |
| 2025-11-19 | ipn/ipnlocal: remove the always-true CanSupportNetworkLock() | Alex Chan | 1 | -28/+0 |
| 2025-11-19 | ipn/ipnlocal: reduce profileManager boilerplate in network-lock tests | Alex Chan | 1 | -83/+33 |
| 2025-11-19 | ipn/ipnlocal, tka: compact TKA state after every sync | Alex Chan | 2 | -5/+230 |
| 2025-11-18 | types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key r... | James Tucker | 3 | -0/+49 |
| 2025-11-18 | types/netmap,*: remove some redundant fields from NetMap | Brad Fitzpatrick | 6 | -21/+29 |
| 2025-11-18 | all: rename variables with lowercase-l/uppercase-I | Alex Chan | 1 | -2/+2 |
| 2025-11-18 | ipn/localapi: log calls to localapi (#17880) | James 'zofrex' Sanderson | 2 | -16/+41 |
| 2025-11-17 | ipn{,/local},cmd/tailscale: add "sync" flag and pref to disable control map poll | Brad Fitzpatrick | 6 | -5/+100 |
| 2025-11-17 | ipn/ipnlocal: use an in-memory TKA store if FS is unavailable | Alex Chan | 1 | -21/+33 |
| 2025-11-17 | go.mod: bump golang.org/x/crypto (#17907) | Andrew Lytvynov | 1 | -12/+12 |
| 2025-11-17 | ipn: fix typo in comment | Brad Fitzpatrick | 2 | -2/+2 |
| 2025-11-17 | control/controlclient: remove some public API, move to Options & test-only | Brad Fitzpatrick | 1 | -1/+3 |
| 2025-11-16 | syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging | Brad Fitzpatrick | 4 | -9/+10 |
| 2025-11-16 | ipn/ipnlocal: add PROXY protocol support to Funnel/Serve | Andrew Dunham | 4 | -11/+104 |
| 2025-11-16 | types/netmap: remove PrivateKey from NetworkMap | Brad Fitzpatrick | 8 | -400/+124 |
| 2025-11-14 | control/controlclient,ipn/ipnlocal: replace State enum with boolean flags | James Tucker | 2 | -73/+174 |
| 2025-11-14 | ipn/localapi: use constant-time comparison for RequiredPassword (#17906) | Andrew Lytvynov | 1 | -1/+2 |
| 2025-11-14 | various: adds missing apostrophes to comments | Alex Chan | 1 | -1/+1 |
| 2025-11-14 | control/controlclient: make Observer optional | Brad Fitzpatrick | 1 | -7/+0 |
| 2025-11-14 | ipn/ipnlocal: log prefs changes and reason in Start (#17876) | James 'zofrex' Sanderson | 1 | -7/+13 |
| 2025-11-13 | feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap (#17881) | Jordan Whited | 1 | -4/+9 |
| 2025-11-13 | ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) | Brad Fitzpatrick | 4 | -504/+293 |
| 2025-11-12 | wgengine/wgcfg: remove two unused Config fields | Brad Fitzpatrick | 1 | -14/+0 |
| 2025-11-12 | ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on n... | Jonathan Nobels | 1 | -3/+4 |
| 2025-11-10 | ipn/ipnlocal: fix state_test data race seen in CI | Brad Fitzpatrick | 1 | -0/+2 |
| 2025-11-10 | ipn/ipnlocal: move vipServiceHash etc to serve.go, out of local.go | Brad Fitzpatrick | 3 | -51/+75 |
| 2025-11-10 | feature, ipn/ipnlocal: add, use feature.CanSystemdStatus for more DCE | Brad Fitzpatrick | 1 | -5/+7 |
| 2025-11-09 | ipn/ipnlocal: clean up some of the weird locking (#17802) | Andrew Lytvynov | 1 | -9/+5 |
| 2025-11-09 | tailcfg: kill off rest of HairPinning symbols | Brad Fitzpatrick | 1 | -1/+0 |
| 2025-10-31 | Revert "control/controlclient: back out HW key attestation (#17664)" (#17732) | Andrew Lytvynov | 5 | -1/+61 |
| 2025-10-29 | ipn: add support for HTTP Redirects (#17594) | Fernando Serboncini | 5 | -1/+168 |
| 2025-10-29 | ipn/ipnlocal: do not stall event processing for appc route updates (#17663) | M. J. Fromberger | 1 | -6/+11 |
| 2025-10-28 | wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper | Brad Fitzpatrick | 1 | -0/+10 |
| 2025-10-28 | ipn/ipnlocal/serve: error when PeerCaps serialisation fails | Gesa Stupperich | 1 | -18/+22 |
| 2025-10-28 | ipn/ipnlocal/serve: remove grant header truncation logic | Gesa Stupperich | 5 | -134/+23 |
| 2025-10-28 | ipn/ipnlocal/serve: add grant headers | Gesa Stupperich | 5 | -8/+326 |
| 2025-10-27 | control/controlclient: back out HW key attestation (#17664) | Patrick O'Doherty | 5 | -61/+1 |
| 2025-10-24 | ipn/ipnlocal: skip TKA bootstrap request if Tailnet Lock is unavailable | Alex Chan | 1 | -0/+4 |
| 2025-10-23 | feature/tpm: check TPM family data for compatibility (#17624) | Patrick O'Doherty | 1 | -0/+1 |
| 2025-10-21 | ipn, tka: improve the logging around TKA sync and AUM errors | Alex Chan | 1 | -5/+6 |
| 2025-10-20 | ipn/ipnlocal: use eventbus.SubscribeFunc in LocalBackend (#17524) | M. J. Fromberger | 1 | -75/+44 |
| 2025-10-16 | all: use a consistent capitalisation for "Tailnet Lock" | Alex Chan | 1 | -1/+1 |
| 2025-10-10 | ipn/ipnlocal: strip AttestationKey in redacted prefs view (#17527) | Patrick O'Doherty | 1 | -0/+1 |
| 2025-10-10 | types/persist: add AttestationKey (#17281) | Patrick O'Doherty | 7 | -9/+118 |
| 2025-10-10 | cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (#17... | Naman Sood | 1 | -0/+239 |
| 2025-10-08 | ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager | M. J. Fromberger | 1 | -23/+6 |