Workload identity federation updates
- New: Workload identity federation supports provider-native identity token authentication for GitOps for Tailscale with GitHub Actions and GitOps for Tailscale with GitLab CI . New: Token exchange error details for a federated identity can be found in the Trust credentials page of the admin console.
Also shipped Jan 30, 2026Tailscale in January 2026 →
What's new in Sigma
AI Documentation MCP server available (Beta) If you use AI tools to work with Sigma and want to enrich agent behavior or questions with context about officially supported Sigma functionality, the Sigma documentation can now be accessed using the model context protocol (MCP) server at https://help.sigmacomputing.com/mcp .
Cloudflare WAN, Magic Transit, Cloudflare One - BGP over GRE and IPsec tunnels
Magic WAN and Magic Transit customers can use the Cloudflare dashboard to configure and manage BGP peering between their networks and their Magic routing table when using IPsec and GRE tunnel on-ramps (beta). Using BGP peering allows customers to: Automate the process of adding or removing networks and subnets.
API Access Policies for Applications is now Generally Available
We are pleased to announce that __API Access Policies for Applications__ is now Generally Available (GA) for all Auth0 customers. This feature allows you to specifically control which applications can request access tokens for your APIs, covering __both user and machine-to-machine access__.
Google Workspace Inbound User Directory Sync is Now Generally Available!
We’re excited to announce that Google Workspace User Directory Sync is now generally available! This feature keeps Auth0 user profiles up to date by syncing users from your Google Workspace directory into Auth0 - so user profile updates don’t depend on login events.
API Key Management GA Release
API Key Management is now GA to all customers, regardless of plan. As before, only users with Manager or Admin roles will have access to these pages. A newly added Rotate function allows customers to self-serve legacy API key rotation. Secret Key support remains in closed beta, and its GA release will be announced at a future date.
Modal 1.3.2
- Modal objects now have a .get_dashboard_url() method. This method will return a URL for viewing that object on the Modal dashboard: python fc = f.spawn() print(fc.get_dashboard_url()) # Easy access to logs, etc.
More from TailscaleEvery Tailscale release →
Tailscale Services GA
- Changed: Use Tailscale Services to decouple applications and services from the devices that host them ( generally available ).
tsnet integration for Tailscale Services
- New: tsnet application support for Tailscale Services hosts.
Tailscale 1.94.1
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.94.1
Note : 1.94.0 was a release candidate intended for testing only. All Platforms New: tailscaled_home_derp_region_id client metrics are available. New: tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays .
Log streaming integration with Google Cloud Storage
- New: Tailscale network flow logs and configuration audit logs can be streamed to Google Cloud Storage (GCS).
Tailscale container image v1.94.1
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: OAuth and workload identity federation support has been added for containers.
Tailscale Kubernetes Operator v1.94.1
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: The Egress proxy can now send traffic to Tailscale service VIPs.
Tailscale tsrecorder v1.94.1
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Note : This version contains no changes except for library updates.