Releasesby Glyphtailscale 1.102.3
Please refer to the changelog available at https://tailscale.com/changelog
Also shipped Aug 20, 2026Tailscale in August 2026 →
BigQuery adds ML.TREND, ML.SEASONALITY and ML.DETECT_CHANGE_POINTS in preview
New table-valued functions in the query editor and conversational analytics identify trends, repeating seasonal patterns and structural change points in time series data.
BigQuery Graph core processing limited to Enterprise editions from April 26, 2027
Standard edition and on-demand billing support for BigQuery Graph core graph processing is deprecated, with processing restricted to Enterprise and Enterprise Plus from April 26, 2027. Graph measures remain available except in Standard edition.
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server. AI agents can now execute advanced BigQuery operations, such as job scheduling, job management, and reservation management, through a managed MCP endpoint. For more information, see Use the Cloud CLI remote MCP server . This feature is in Preview .
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)
AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:
Cortex Agent code execution tool (Preview)
The Cortex Agent code execution tool is now in public preview. When you enable the tool on an agent, the agent can generate and run Python in a secure, isolated sandbox to process data, perform calculations, and produce visualizations.
Salesforce connector mTLS authentication is now generally available
Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS.
More from TailscaleEvery Tailscale release →
Tailscale v1.102.3
All Platforms Changed: Go is updated to version 1.26.6. Fixed: Tailscale refuses host-scoped IPv4 destinations at every point that acts on an unmapped 4via6 address. This fix addresses a security vulnerability described in TS-2026-011 . Fixed: When MagicDNS is disabled, unqualified hostnames are correctly forwarded to the configured nameservers.
Tailscale container image v1.102.3
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: The container waits longer for its initial connection to the coordination server when you set the new TS_BOOT_TIMEOUT environment variable. It accepts a duration, such as 90s or 3m , and defaults to 60s .
Tailscale Kubernetes Operator v1.102.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in. Pinning Elastic IPs also requires pinning the pods to the same zone using a ProxyClass .
Tailnet list API pagination
- Changed: The list tailnets endpoint paginates results. By default, organizations with more than 100 tailnets now receive only the first 100 results, with totalCount and cursor parameters to retrieve additional results. New: limit and cursor query parameters are supported on the list tailnets endpoint.
Aperture by Tailscale GA
Use Aperture ( generally available ) to secure and manage AI agents and LLM sessions with cost controls, request and response hooks, guardrails, logging, MCP support, and API proxying. New: A promotional model token credit is included for use with new and existing Aperture gateways.
Tailscale PAM
Use Tailscale Privileged Access Management (PAM) ( beta ) to provide application-aware access to resources in your Tailscale network. New: Services can be defined for privileged access, including SSH , database , RDP , HTTPS , Kubernetes , and Amazon S3 types. New: Sessions can be recorded for SSH, database, HTTPS, and Kubernetes Service types.
Tailscale Kubernetes Operator v1.102.2
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: PeerRelays are deployable in-cluster via a custom resource . New: Annotations can now be applied to the operator's deployment resource via Helm.
Tailscale container image v1.102.2
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.