Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
Also shipped Jul 6, 2026Tailscale in July 2026 →
Budgets are now generally available
Budgets, including budgets for Unity Gateway, are now generally available. Budgets let admins define spending thresholds. For requests managed through Unity Gateway, including Genie interactions, admins can set additional per-user thresholds and overrides, with configurable actions such as email alerting and usage blocking.
Private Link for account-level resources (Beta)
You can now use Private Link to privately connect to Databricks account-level resources, such as the account console, through a VPC interface endpoint instead of the public internet. See Configure inbound Private Link for account-level resources .
July 6, 2026
This serverless compute release includes updates from Databricks Runtime 18 . New features Spark Declarative Pipelines on Lakeflow streaming query ID : Spark Declarative Pipelines on Lakeflow can now set the streaming query ID on demand.
You can use Gemini in Spanner Studio to fix errors in your SQL queries
You can use Gemini in Spanner Studio to fix errors in your SQL queries. When you run a query that contains an error, you can click Fix to view a line-by-line comparison of your query and a recommended correction, along with an explanation of the change. This feature is available in Preview .
Modeling
- Added support for agent-specific AI context via the omni_agent Mustache namespace, allowing you to customize AI behavior on a per-agent basis. See Optimize models for Omni AI for more information.
AI_TRANSLATE now supports long-document translation
Snowflake Cortex AI_TRANSLATE now supports translation of up to 100,000 input tokens, enabling organizations to translate large documents and long-form text directly in Snowflake.
More from TailscaleEvery Tailscale release →
Nested group support for synced groups
- New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.
Device Provisioning with OAuth Apps
- New: Create and manage OAuth Apps for Device Provisoning with the Tailscale API (alpha) .
Tailscale 1.98.8
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.98.8
Note : 1.98.6 and 1.98.7 were release candidates intended for testing only. All Platforms Fixed: An issue causing connectivity disruptions when the operating system wakes from sleep in wireguard-go is resolved. Fixed: An issue causing excessive handshake initiation retries in wireguard-go is resolved.
Public IP address device posture attribute
- New: ip:publicAddress device posture attribute is available for use in postures and viewable on the Machines page of the admin console. To test, go to the Settings page of the admin console and toggle Public IP addresses for device posture (beta) .
Tailscale v1.98.9
All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not allow the use of UIDs or numeric-only usernames. This fix addresses a security vulnerability described in TS-2026-006 .
Tailnet system policy values
- Changed: The Tailnet system policy accepts a comma-separated list of tailnet IDs or organization IDs.
Tailscale 1.98.9
Please refer to the changelog available at https://tailscale.com/changelog