Releasesby IbisMagicRoute
Beta5 days agoUnverifiedAdded Oct 21, 2026
- New: Use MagicRoute ( beta ) to choose between redundant subnet routers, app connectors, exit nodes, and Tailscale Service hosts. Changed: Configure how the tailnet performs Route selection , replacing the toggle that enabled Regional Routing in the admin console.
Topics: Data integration
More Tailscale releases
Every Tailscale releaseTailscale v1.104.2
All Platforms Changed: Go is updated to version 1.27.3, to explicitly distrust compromised TLS intermediate certificates as described in security bulletin TS-2026-013 . Windows Fixed: An issue where the Windows client could repeatedly disconnect on large tailnets while processing peer updates is resolved.
Self-serve identity provider changes GA
- Changed: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( generally available ).
Tailscale container image v1.104.1
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.
Tailscale Kubernetes Operator v1.104.1
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: Ingress ProxyGroups can share a single persistent Let's Encrypt account key per tailnet to ensure certificate renewals keep their exemption from Let's Encrypt rate limits .
Device Posture Monitoring and Alerts
Configure monitoring and alerts for device posture (beta) to help admins and end-users diagnose connectivity problems caused by failing posture. New: Badges can be shown on the Machines page of the admin console when a device is failing a posture (beta) . New: The Failing Posture filter on the Machines page shows devices that are failing selected postures.
Tailscale v1.104.1
All Platforms Changed: WireGuard packet buffering uses less memory while waiting for peer handshakes. Changed: WireGuard packet queue depth scales with CPU core count, reducing peak memory usage under heavy traffic. Linux New: Client-side netmap caching improves start up speed and connectivity when the Tailscale control plane is unreachable.
Tailscale 1.104.1
Please refer to the changelog available at https://tailscale.com/changelog
Declarative node sharing
- New: Declarative node sharing lets tailnet admins use policy to securely share resources between trusted tailnets ( alpha ).
Also shipped on Oct 19, 2026
Tailscale in October 2026Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4...
Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4 Flash (0731) will be removed from the shared Serverless Training pool. This change applies only to Serverless Training. If you train DeepSeek V4 Flash (0731) on Serverless Training, migrate to DeepSeek V4.1 Flash 1017 before November 2, 2026.
Cloud Workload Security is now available in Beta
Cloud Workload Security (CWS) is now available in Beta. Apply policy controls to cloud API requests before they reach your cloud provider. Define policies with request filters and Rego checks. For example, block requests that would make an R2 bucket public. Use workloads and policy sets to target your cloud environments.
Copilot model policy API for enterprise, orgs, and teams
You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations. What’s new GET and PATCH endpoints are now generally available for model policies at four levels: Enterprise: /enterprises/{enterprise}/copilot/model-policies Enterprise teams...
GitHub Copilot models deprecated on October 19, 2026
As of today, October 19, 2026, we have deprecated the following models across most GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions). These deprecations were announced on September 18, 2026 .
Postgres wait events, now in Query Insights
Query Insights for ClickHouse Managed Postgres now includes wait event breakdowns, blocked-session charts, and lock-wait charts. These metrics are also available in Prometheus.
Send OpenTelemetry traces to Agent Observability, no SDK required
You can now send OpenTelemetry traces straight to Agent Observability, without the SDK. If your agents already emit OpenTelemetry generative AI spans, from your framework, an instrumentation library, or spans you write yourself, keep your existing route through Grafana Alloy or an OpenTelemetry Collector and opt in your AI spans with a single attribute.