Releasesby GlyphTailscale v1.96.2
Note : 1.96.0 and 1.96.1 were release candidates intended for testing only. All Platforms New: tailscale dns query|status command supports --json flag to return JSON output. New: tailscale wait [flags] command waits for Tailscale resources to become available for binding.
Also shipped Mar 18, 2026Tailscale in March 2026 →
Cloudflare Fundamentals - SCIM provisioning for Authentik is now Generally Available
Cloudflare dashboard SCIM provisioning now supports Authentik ↗ as an identity provider, joining Okta and Microsoft Entra ID as explicitly supported providers. Customers can now sync users and group information from Authentik to Cloudflare, apply Permission Policies to those groups, and manage the lifecycle of users & groups directly from your Authentik...
Security Center - Real-time logo match preview
We are introducing Logo Match Preview , bringing the same pre-save visibility to visual assets that was previously only available for string-based queries. This update allows you to fine-tune your brand detection strategy before committing to a live monitor.
Google Domain parameter no longer available
Web Scraper API domain parameter for google sources is no longer available. To localize your searches, use the geo_location parameter. For more details, check our geo_location parameter structures here.
Cloudflare Fundamentals - SCIM audit logging Support
Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2 , giving you visibility into user and group changes made by your identity provider.
Rules - Worker execution timing field now available in Rules
The cf.timings.worker_msec field is now available in the Ruleset Engine. This field reports the wall-clock time that a Cloudflare Worker spent handling a request, measured in milliseconds.
Stream - Media Transformations binding for Workers
You can now use a Workers binding to transform videos with Media Transformations. This allows you to resize, crop, extract frames, and extract audio from videos stored anywhere, even in private locations like R2 buckets.
More from TailscaleEvery Tailscale release →
Tailscale 1.96.2
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.96.3
Windows Fixed: DNS resolution issue caused by NRPT rule formatting is resolved.
Tailscale 1.96.3
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.96.4
Linux Fixed: An issue on forks of Linux caused by fallback-on-ENOSYS logic is resolved. Fixed: An issue that could cause a segmentation violation during startup on MIPS devices is resolved. Android Fixed: An issue causing a deadlock when disconnecting from a tailnet is resolved.
Tailscale 1.96.4
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.96.5
iOS Fixed: An issue that could cause the network extension to encounter an out of memory condition on large tailnets is resolved. tvOS Fixed: An issue that could cause the network extension to encounter an out of memory condition on large tailnets is resolved.
Tailscale container image v1.96.5
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: Services are now automatically advertised on startup. This can be disabled by setting the new environment variable, TS_EXPERIMENTAL_SERVICE_AUTO_ADVERTISEMENT , to false .
Tailscale Kubernetes Operator v1.96.5
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: Ingress and Egress ProxyGroup pods are able to request a new authkey when required. New: Multiple tailnet access can be enabled with the use of the new Tailnet custom resource.