Releasesby GlyphTailscale Kubernetes Operator v1.102.2
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: PeerRelays are deployable in-cluster via a custom resource . New: Annotations can now be applied to the operator's deployment resource via Helm.
Also shipped Aug 11, 2026Tailscale in August 2026 →
Query templates for data clean rooms are generally available (GA)
Query templates for data clean rooms are generally available (GA). Query templates allow data clean room owners and publishers to share predefined queries without exposing the underlying tables and views. Additionally, table parameters in table-valued functions (TVFs) are generally available (GA).
Databricks SQL version 2026.32 is now available in Preview
Databricks SQL version 2026.32 is now available in the Preview channel. Review the following section to learn about new features and improvements. Validate VARIANT values with is_valid_variant The is_valid_variant function returns true when its input is a well-formed VARIANT value and false otherwise.
ABAC GRANT policies now cover Unity Gateway resource types (Beta)
Attribute-based access control (ABAC) GRANT policies dynamically grant Unity Catalog privileges to securables whose governed tags match a condition. They now support model services, model provider services, Model Context Protocol (MCP) services, and agent services, which are the resource types Unity Gateway governs.
REPLACE USING flows for standalone streaming tables (Beta)
REPLACE USING flows are now available for standalone streaming tables in Beta . Use a REPLACE USING flow when your source is a series of partial snapshots keyed by column. On each update, the flow replaces all rows that match the specified key columns and leaves all other rows unchanged.
Unity Catalog ABAC GRANT policies support more securable types in Beta
ABAC GRANT policies dynamically grant Unity Catalog privileges to securables whose governed tags match a condition. These policies were previously only available for models, but now also support model services, model provider services, Model Context Protocol (MCP) services, and agent services. All supported types are in Beta.
Gemini Enterprise: New data stores and support for new actions (Public Preview)
The following data stores are available in Public Preview in Gemini Enterprise: Cisco Workspaces Fibery Gong Guru Hex LegalZoom Mercury Miro Ramp Solve Intelligence Vanta Webex Meetings You can search and read data from these data stores using natural language.
More from TailscaleEvery Tailscale release →
Tailscale container image v1.102.2
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.
Tailscale tsrecorder v1.102.2
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Fixed: Recorder does not attempt to index empty recording placeholder files on startup.
Tailnet list API pagination
- Changed: The list tailnets endpoint paginates results. By default, organizations with more than 100 tailnets now receive only the first 100 results, with totalCount and cursor parameters to retrieve additional results. New: limit and cursor query parameters are supported on the list tailnets endpoint.
Tailscale v1.102.2
All Platforms Fixed: A regression causing incoming Tailscale Funnel connections to fail is resolved.
Tailscale 1.102.2
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.102.3
All Platforms Changed: Go is updated to version 1.26.6. Fixed: Tailscale refuses host-scoped IPv4 destinations at every point that acts on an unmapped 4via6 address. This fix addresses a security vulnerability described in TS-2026-011 . Fixed: When MagicDNS is disabled, unqualified hostnames are correctly forwarded to the configured nameservers.
Tailscale container image v1.102.3
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: The container waits longer for its initial connection to the coordination server when you set the new TS_BOOT_TIMEOUT environment variable. It accepts a duration, such as 90s or 3m , and defaults to 60s .
Tailscale Kubernetes Operator v1.102.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in. Pinning Elastic IPs also requires pinning the pods to the same zone using a ProxyClass .