Releasesby GlyphTailscale Terraform Provider v0.29.2
v0.29.2 of the Tailscale Terraform Provider has been released with the following changes: Fixed: A regression in tailscale_tailnet_key has been resolved where recreate_if_invalid was not being checked before recreating the resource when the key is not found.
Also shipped May 26, 2026Tailscale in May 2026 →
Cloudflare One Client for macOS (version 2026.4.1390.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for macOS! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for Windows (version 2026.4.1390.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for Windows! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for Linux (version 2026.4.1390.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for Linux! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Flagship now in public beta
Flagship is now in public beta. Evaluate feature flags directly from Cloudflare Workers with no outbound HTTP calls, using globally distributed flag configuration backed by Workers KV and Durable Objects. Flagship supports typed flag values, targeting rules, percentage rollouts, audit history, and OpenFeature-compatible SDKs.
General availability of DPoP sender constraining for Enterprise Connections
Demonstrating Proof of Possession (DPoP) sender constraining for Enterprise Connections is now generally available. Customers can now establish Okta and OIDC Enterprise Connections with DPoP enabled on those connections. This is available on all plans with Enterprise Connections.
Federated Logout for OIDC and Okta enterprise connections is now generally available
Federated Logout is now generally available for OIDC and Okta enterprise connections. When a user logs out with `?federated` appended to the logout URL, Auth0 calls the upstream identity provider's `end_session_endpoint` to terminate the IdP session, closing the gap where a lingering IdP session could silently re-authenticate the user on their next login...
More from TailscaleEvery Tailscale release →
Tailscale v1.98.4
All Platforms Fixed: An issue causing a deadlock when processing peer changes and disconnecting from the Tailscale control server is resolved.
Tailscale Kubernetes Operator v1.98.4
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: The operator no longer fails to perform token exchanges when using workload identity Fixed: Ingress & Egress ProxyGroup pods now correctly clamp their MTU values
Preset app support for Oracle Cloud Infrastructure (OCI)
- New: Preset apps are available for Oracle Cloud Infrastructure (OCI) , including per-region compute and networking, per-region Object Storage, and a global preset for the Oracle Services Network (OSN).
Tailscale Kubernetes Operator v1.98.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: The DNSConfig custom resource supports specifying node affinity rules and node selectors for nameserver pods. New: The operator Helm chart supports priority class names for operator pods.
Tailscale tsrecorder v1.98.3
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Fixed: Recorder pods can request a new auth key when required.
Tailscale v1.98.3
Linux Fixed: An issue where netfilter rules could be applied inconsistently after a netfilter mode change failed has been resolved. Connmark and CGNAT rules are applied after the active netfilter mode is successfully updated, matching the behavior of other netfilter paths.
Tailscale container image v1.98.3
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.
Tailscale 1.98.3
Please refer to the changelog available at https://tailscale.com/changelog