Releasesby GlyphTailscale Kubernetes Operator v1.98.4
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: The operator no longer fails to perform token exchanges when using workload identity Fixed: Ingress & Egress ProxyGroup pods now correctly clamp their MTU values
Also shipped May 29, 2026Tailscale in May 2026 →
Guardrails: Protect your Agents, Data, and Costs
OpenRouter has introduced configurable security and governance tools, including budget enforcement, zero data retention, and prompt injection defense.
What's new in Sigma
AI Support for Amazon Bedrock AI provider (Beta) Amazon Bedrock is now a supported AI provider, letting you use Anthropic foundation models with Sigma AI-powered features. For setup instructions, see Add Amazon Bedrock as an AI provider . Admin Connect to ClickHouse (Beta) Sigma now supports connections to ClickHouse.
Cloudflare One Client for macOS (version 2026.5.1155.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This release introduces the new Cloudflare One Client UI for macOS! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for Windows (version 2026.5.1155.1)
A new Beta release for the Windows Cloudflare One Client is now available on the beta releases downloads page . This release introduces the new Cloudflare One Client UI for Windows! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Agents - Share sandbox previews through Cloudflare Tunnel
Sandboxes can expose a service running inside the container on a public preview URL through the sandbox.tunnels namespace. The SDK uses cloudflared inside the sandbox so you can share a running service without configuring exposePort() or a custom domain.
🆕 Improved Nova-3 Medical Batch Model Released
We’ve released an upgraded Nova-3 Medical batch model with improved medical term recognition. Key Improvements: Expands the model’s medical vocabulary with new medical terms Boosts medical term recognition to 97.20% KRR Maintains WER parity with no observed regression on common or conversational terms
More from TailscaleEvery Tailscale release →
Preset app support for Oracle Cloud Infrastructure (OCI)
- New: Preset apps are available for Oracle Cloud Infrastructure (OCI) , including per-region compute and networking, per-region Object Storage, and a global preset for the Oracle Services Network (OSN).
Tailscale v1.98.4
All Platforms Fixed: An issue causing a deadlock when processing peer changes and disconnecting from the Tailscale control server is resolved.
Tailscale v1.98.5
All Apple Platforms Changed: macOS and iOS clients are now built using the Xcode 26.5 toolchain.
Tailscale Terraform Provider v0.29.2
v0.29.2 of the Tailscale Terraform Provider has been released with the following changes: Fixed: A regression in tailscale_tailnet_key has been resolved where recreate_if_invalid was not being checked before recreating the resource when the key is not found.
Tailscale 1.98.5
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale Kubernetes Operator v1.98.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: The DNSConfig custom resource supports specifying node affinity rules and node selectors for nameserver pods. New: The operator Helm chart supports priority class names for operator pods.
Tailscale tsrecorder v1.98.3
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Fixed: Recorder pods can request a new auth key when required.
Tailscale v1.98.3
Linux Fixed: An issue where netfilter rules could be applied inconsistently after a netfilter mode change failed has been resolved. Connmark and CGNAT rules are applied after the active netfilter mode is successfully updated, matching the behavior of other netfilter paths.