Workload identity federation API
- New: The Tailscale API supports creating, reading, updating, and deleting federated identities . New: tailscale-client-go-v2 can configure federated identities . New: The Tailscale Terraform provider can configure federated identities .
Also shipped Jan 5, 2026Tailscale in January 2026 →
Containers - Custom container instance types now available for all users
Custom instance types are now enabled for all Cloudflare Containers users. You can now specify specific vCPU, memory, and disk amounts, rather than being limited to pre-defined instance types . Previously, only select Enterprise customers were able to customize their instance type.
Attribute Breakdowns and Automated Comparisons for Spans
See a breakdown of values across several attributes without manual querying. You can also compare breakdowns between any spike on your span based metric chart and the rest of the time range.
Enhanced display for OpenTelemetry log lines
Grafana now provides smarter defaults for browsing OpenTelemetry log lines, optimized for the way OpenTelemetry structures log data. What changed OpenTelemetry log producers send less information in the log body and more data as structured metadata, or key–value pairs for resource attributes, log fields, and log attributes.
truss 0.12.1
- Set ownership correctly for trtllm directory perf client things only: trusted publishing nodejs + headers Fix baseten-performance-client :rusted nodejs publishing fix error classifcation Performance client: request processing config fix(truss): validate docker_server.start_command is single line truss: encoder-bert backend Mf/logging-as-error Watch...
unstructured 0.18.26
0.18.26 Fixes - Pin deltalake<1.3.0 to fix ARM64 Docker builds (1.3.0 missing Linux ARM64 wheels) 0.18.25 Fixes - Security update: Removed pdfminer.six version constraint and bumped pdfminer.six and urllib3 to address high severity CVEs
More from TailscaleEvery Tailscale release →
Tailscale v1.92.5
Linux Changed: State file encryption and hardware attestation keys are no longer enabled by default. Fixed: Failure to load hardware attestation keys no longer prevents the client from starting. This could happen when the TPM device is reset or replaced. Windows Changed: State file encryption and hardware attestation keys are no longer enabled by default.
Tailscale container image v1.92.5
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . Fixed: Hardware attestation keys are no longer added to Kubernetes state Secrets , making it possible to change the Kubernetes node the Tailscale containers are deployed on.
Tailscale Kubernetes Operator v1.92.5
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Changed: Certificate renewal is no longer done as an ARI order by default to avoid renewal failure if ACME account keys are recreated.
Tailscale tsrecorder v1.92.5
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Note : This version contains no changes except for library updates.
Tailscale 1.92.5
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale GitHub Action v4.1.1
- Fixed: The Tailscale GitHub Action uses the correct architecture for storing and retrieving caches on macOS-based GitHub runners.
India DERP Region City Name updated
- Changed: The city name for the DERP server hosted in India has been updated to reflect the official name of Bengaluru. The hosting provider and IP addresses remain unchanged.
IS SET and NOT SET device posture operators
- New: IS SET and NOT SET have been added as device posture operators.