Releasesby GlyphNested group support for synced groups
- New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.
Also shipped Jul 8, 2026Tailscale in July 2026 →
Object metadata column is now in Public Preview
The _object_metadata column is now in Public Preview. The _object_metadata column is a hidden metadata column that exposes object-level properties for objects in cloud storage, including MIME type, ETag, user-defined key-value metadata, system-defined metadata, and object tags. It is available starting from Databricks Runtime 18.1.
Genie products now use pay-as-you-go pricing
Starting July 8, 2026 at 00:00 UTC, Genie products, including Genie Agents , Genie Code , and Genie One , are billed following a pay-as-you-go pricing model that includes 150 Databricks units (DBUs) of free large language model (LLM) usage every month, equivalent to about $10.50 in the US East region.
Google Gemini 2.5 Flash and Pro are scheduled for retirement
Google Gemini 2.5 Flash and Gemini 2.5 Pro will be retired on October 2, 2026. The recommended replacement models are Gemini 3.1 Pro or Gemini 3.5 Flash. See Deprecated and retired models for migration guidance.
Anthropic Claude Sonnet 4 is scheduled for retirement
Anthropic Claude Sonnet 4 will be retired on October 9, 2026. Claude Sonnet 4.6 is the recommended replacement. See Deprecated and retired models for migration guidance.
Restrict access to AI Functions with Unity Catalog permissions (Public Preview)
You can now use Unity Catalog permissions to restrict which task-specific AI Functions your organization can access, independent of foundation model access. Contact your account team to enable this feature. See AI Functions Unity Catalog permissions .
Genie Agents now uses pay-as-you-go pricing
Starting July 8, 2026 at 00:00 UTC, Genie Agents is billed following a pay-as-you-go pricing model that includes 150 DBUs of free large language model (LLM) usage every month, equivalent to about $10.50 in the US East region. Usage beyond the free amount is billed in DBUs, reflecting the underlying LLM models and agents that power each Genie Agents session.
More from TailscaleEvery Tailscale release →
Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
Tailscale v1.98.9
All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not allow the use of UIDs or numeric-only usernames. This fix addresses a security vulnerability described in TS-2026-006 .
Device Provisioning with OAuth Apps
- New: Create and manage OAuth Apps for Device Provisoning with the Tailscale API (alpha) .
Tailscale 1.98.8
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.98.8
Note : 1.98.6 and 1.98.7 were release candidates intended for testing only. All Platforms Fixed: An issue causing connectivity disruptions when the operating system wakes from sleep in wireguard-go is resolved. Fixed: An issue causing excessive handshake initiation retries in wireguard-go is resolved.
Public IP address device posture attribute
- New: ip:publicAddress device posture attribute is available for use in postures and viewable on the Machines page of the admin console. To test, go to the Settings page of the admin console and toggle Public IP addresses for device posture (beta) .
Tailscale 1.98.9
Please refer to the changelog available at https://tailscale.com/changelog
Tailnet system policy values
- Changed: The Tailnet system policy accepts a comma-separated list of tailnet IDs or organization IDs.