Tailscale Release Notes
Last updated: Feb 19, 2026
- Feb 18, 2026
- Date parsed from source:Feb 18, 2026
- First seen by Releasebot:Feb 19, 2026
Feb 18, 2026
Fleet device posture integration
Use Fleet Device Management to collect device posture signals from devices in your tailnet.
Huntress device posture integration
Use Huntress Managed EDR to collect device posture signals from devices in your tailnet.
Tailscale Peer Relays GA
Use Tailscale Peer Relays to set up self-hosted high-throughput relay servers when direct connections aren't possible (generally available).
Original source Report a problem - Feb 17, 2026
- Date parsed from source:Feb 17, 2026
- First seen by Releasebot:Feb 17, 2026
Feb 17, 2026
Aperture by Tailscale
Use Aperture by Tailscale to secure and monitor LLM sessions and AI agents (alpha).
Original source Report a problem All of your release notes in one place
Join Releasebot and get updates from Tailscale and hundreds of other software products.
- Feb 13, 2026
- Date parsed from source:Feb 13, 2026
- First seen by Releasebot:Feb 14, 2026
Feb 13, 2026
Tailscale Kubernetes Operator v1.94.2
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions.
- Configuring a single invalid Tailscale FQDN for an egress will no longer cause the egress to crash. It will instead log the error and continuing serving traffic.
- Feb 12, 2026
- Date parsed from source:Feb 12, 2026
- First seen by Releasebot:Feb 14, 2026
Feb 12, 2026
Tailscale v1.94.2
Update instructions
All Platforms
- Memory leak caused by high network map response rates is resolved.
- Feb 5, 2026
- Date parsed from source:Feb 5, 2026
- First seen by Releasebot:Feb 5, 2026
Feb 5, 2026
New Tailscale container image v1.94.1 released with OAuth and workload identity federation for containers. Kubernetes Operator v1.94.1 adds egress proxy to service VIPs, beta audit logging for the API proxy, and a sizing fix. Tsrecorder v1.94.1 includes library updates.
Tailscale container image v1.94.1
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository.
- OAuth and workload identity federation support has been added for containers.
Tailscale Kubernetes Operator v1.94.1
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions.
- The Egress proxy can now send traffic to Tailscale service VIPs.
- Use Kubenetes API server proxy audit logging (beta) to record Kubernetes API events on your cluster, in addition to or instead of entire recordings, that pass through your Kubernetes Operator API server proxy.
- Setting container resources for the Tailscale container will no longer result in an invalid value error for “1Mi.”
Tailscale tsrecorder v1.94.1
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub.
- Note: This version contains no changes except for library updates.
- Feb 4, 2026
- Date parsed from source:Feb 4, 2026
- First seen by Releasebot:Feb 5, 2026
Feb 4, 2026
Log streaming integration with Google Cloud Storage
- Tailscale network flow logs and configuration audit logs can be streamed to Google Cloud Storage (GCS).
- Jan 30, 2026
- Date parsed from source:Jan 30, 2026
- First seen by Releasebot:Jan 31, 2026
Jan 30, 2026
Workload identity federation updates
- Workload identity federation supports provider-native identity token authentication for GitOps for Tailscale with GitHub Actions and GitOps for Tailscale with GitLab CI.
- Token exchange error details for a federated identity can be found in the Trust credentials page of the admin console.
- Jan 27, 2026
- Date parsed from source:Jan 27, 2026
- First seen by Releasebot:Jan 28, 2026
Jan 27, 2026
Tailscale Services GA
Use Tailscale Services to decouple applications and services from the devices that host them (generally available).
tsnet integration for Tailscale Services
- tsnet application support for Tailscale Services hosts.
- Jan 26, 2026
- Date parsed from source:Jan 26, 2026
- First seen by Releasebot:Jan 26, 2026
Jan 26, 2026
Tailscale 1.94.1 introduces new metrics, workload identity tokens, and an audience flag for auto ID token generation. It boosts DERP and Peer Relay throughput, adds SSH audit improvements, and rolls out platform updates across Linux, macOS, iOS, tvOS, and Android.
Tailscale v1.94.1
Linux
Note: 1.94.0 was a release candidate intended for testing only.
All Platforms
- tailscaled_home_derp_region_id client metrics are available.
- tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays.
- Identity tokens are automatically generated for workload identities.
- --audience flag added to tailscale up command to support auto generation of ID tokens for workload identity.
- tsnet nodes can host Tailscale Services.
- The tailscale lock status -json command returns tailnet key authority (TKA) data in a stable format.
- Tailscale Peer Relays deliver improved throughput through monotonic time comparison optimizations and reduced lock contention.
Linux
- Custom DERP servers support Google Cloud Platform (GCP) Certificate Manager.
- Tailscale SSH authentication, when successful, results in LOGIN audit messages being sent to the kernel audit subsystem.
- Tailscale Peer Relay throughput is improved when the SO_REUSEPORT socket option is supported on multi-core systems.
- Tailscale Peer Relay server handshake transmission is guarded against routing loops over Tailscale.
- MagicDNS always resolves when using resolve.conf without a DNS manager.
macOS
- AuthBrowser.macos system policy sets a preferred browser for opening automatic authentication URLs.
- HideDockIcon system policy determines if the Tailscale Dock icon persists after all Tailscale windows close.
- Install and automatically update to release candidate versions of the client in the About section, Release Channel drop-down.
- DNS related health warnings no longer display when Tailscale DNS is disabled.
- tssentinelId command injection vulnerability has been removed. This fix addresses a security vulnerability described in TS-2026-001.
- Ping view is Tailscale Peer Relay aware.
iOS
- Ping view is Tailscale Peer Relay aware.
tvOS
- Use Tailscale Subnets toggle is added in Subnet Routing Settings.
- Ping view is Tailscale Peer Relay aware.
Android
- Ping view is Tailscale Peer Relay aware.
- Jan 22, 2026
- Date parsed from source:Jan 22, 2026
- First seen by Releasebot:Jan 23, 2026
Jan 22, 2026
IS SET and NOT SET device posture operators
IS SET and NOT SET have been added as device posture operators.
Original source Report a problem