Expanded `autogroup:self` compatibility
- Updated: Use autogroup:self as a destination for any grant, ACL, or SSH src that includes autogroup:<role> , groups, or individual users in the tailnet policy file.
Also shipped Oct 9, 2025Tailscale in October 2025 →
[Preview] DuckLake 0.3
As we announced earlier this year, MotherDuck now supports DuckLake , an integrated data lake and catalog format. DuckLake 0.3 makes working with DuckLake more robust, including CHECKPOINT for easy maintenance , new paths for Iceberg interoperability, spatial geometry types , and MERGE INTO support .
Modal 1.2.0
In this release, we're introducing the concept of "App tags", which are simple key-value metadata that can be included to provide additional organizational context.
Workers - You can now deploy full-stack apps on Workers using Terraform
You can now upload Workers with static assets (like HTML, CSS, JavaScript, images) with the Cloudflare Terraform provider v5.11.0 ↗ , making it even easier to deploy and manage full-stack apps with IaC.
Workers - You can now deploy and manage Workflows in Terraform
You can now create and manage Workflows using Terraform, now supported in the Cloudflare Terraform provider v5.11.0 ↗ . Workflows allow you to build durable, multi-step applications -- without needing to worry about retrying failed tasks or managing infrastructure.
Performance improvements
- Sorting is 2x+ faster: Complete rewrite of sorting uses less memory and scales better across threads for ORDER BY, window functions, and list sorting More efficient small writes: Appending small numbers of rows now writes far fewer bytes 5x faster checkpointing: Reuses table metadata when tables aren't altered during checkpoint Parallel connection...
SQL syntax updates
- MERGE INTO statement: Standard SQL upserts without requiring primary keys or indexes FILL() window function: Interpolate missing values in ordered data Python-style macro arguments: Macros accept positional or named arguments for any parameter STRUCT to MAP cast: Direct casting between struct and map types
More from TailscaleEvery Tailscale release →
Updated devices API
- Changed: The Read and List endpoint responses in the Devices API include a connectedToControl flag, which indicates whether the device has recently connected to the Tailscale control server. Changed: The lastSeen field is included only when connectedToControl is false.
Tailscale v1.88.4
macOS Fixed: The macOS Firewall system setting Block all incoming connections no longer causes intermittent connectivity disruptions when enabled.
Tailscale container image v1.88.4
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . Note: This version contains no changes except for library updates.
Tailscale GitHub Action v4.0.1
- Fixed: The Tailscale GitHub Action no longer logs the output of the tailscale status command to the runner's console.
Tailscale GitHub Action v4.0.0
- New: The Tailscale GitHub Action supports a ping parameter to verify connectivity to tailnet devices. New: The Tailscale GitHub Action logs out the Tailscale ephemeral node at the end of the CI run, removing it from the tailnet immediately.
Tailscale Kubernetes operator v1.88.4
A new release of the Tailscale Kubernetes operator is available. For guidance on installing and updating, refer to our installation instructions . Note: This version contains no changes except for library updates.
Preset app support for Amazon AWS, Salesforce (Hyperforce), and Microsoft 365
- New: Preset apps are available for Amazon AWS services such as Amazon CloudFront, Amazon EC2, and Amazon S3, Salesforce (Hyperforce) , and Microsoft 365 .
Tailscale tsrecorder v1.88.4
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Note: This version contains no changes except for library updates.