Tailscale v1.96.2
Tailscale v1.96.2 adds new CLI commands for DNS queries with JSON output, resource waiting, and IP assertion, introduces generally available windowed UI mode on macOS, and fixes multiple bugs across platforms including firewall rule marking on Linux, empty file transmission on macOS and iOS, and UPnP routing issues. Go has been updated to 1.26.
Note: 1.96.0 and 1.96.1 were release candidates intended for testing only.
All Platforms- New:
tailscale dns query|statuscommand supports--jsonflag to return JSON output. - New:
tailscale wait [flags]command waits for Tailscale resources to become available for binding. - New:
tailscale ipcommand supports--assert=<specific-ip-address>flag to assert that one or more of the node's IP addresses matches the specified IP address. - New:
tailscale version --trackandtailscale update --tracksupportrelease-candidateflag to check for and update to release candidate builds. - Changed: For 1.96.x, Go is updated from version 1.25 to 1.26.
- Changed: Tailscale Peer Relays advertise addresses discovered via Amazon EC2 Instance Metadata Service.
- Changed:
tailscaled_peer_relay_endpoints gaugeuser metrics are available for Tailscale Peer Relays. - Fixed: The
AuthKeysystem policy applies only when a user is not in a logged in state. - Fixed: UPnP routes as expected during long lived port mapping sessions scenarios, including hard NAT.
- New: Launch the
systrayapplication on startup using autostart file with thetailscale configure systray --enable-startup=freedesktopcommand. - Changed: Scaling of Tailscale Peer Relays UDP sockets is gated by container-aware GOMAXPROCS defaults.
- Fixed: Firewall rules created on Linux platforms correctly mark their traffic, avoiding reverse path filtering dropping connections and producing health warnings and risk prompts.
- Fixed: OpenWrt versions 25.12.0 or later using
apkas a package manager supports Tailscale updates.
- New: Windowed UI mode for macOS is generally available.
- New: Double-click an account in the Accounts section to switch to that account.
- New: A progress dialog indicates Tailscale is waiting on the browser to complete reauthentication.
- Fixed: The open source variant of Tailscale on macOS sets the
node:osVersionattribute. - Fixed: The Taildrop Send File action and shortcut do not transmit empty files on macOS Tahoe (version 26) or later.
- Fixed: Tailscale data directories for the macOS standalone version are excluded from Time Machine backups.
- Fixed: An issue that required a machine reboot after installing a Tailscale update is resolved.
- Changed: iOS bug report ID displays in its entirety instead of being truncated.
- Fixed: The Taildrop Send File action and shortcut do not transmit empty files on iOS version 26 or later.
Source: original entry ↗
More from Tailscale
Follow Tailscale to get its new changes in your feed and email digest.
Tailscale Kubernetes Operator v1.104.1
The Tailscale Kubernetes Operator v1.104.1 introduces shared Let's Encrypt account keys for ingress ProxyGroups, custom UDP ports for PeerRelay, image pull secrets support in DNSConfig, improved rolling updates for egress ProxyGroups, and fixes for coordination server URL configuration and HA Service cleanup. New Helm chart customization options and security improvements are also included.
Tailscale container image v1.104.1
A new release of the Tailscale container image is available on Docker Hub and GitHub packages repository. This version includes library updates only.
Device Posture Monitoring and Alerts
Admins can now configure monitoring and alerts for device posture to help diagnose connectivity problems. New capabilities include badges on the Machines page, filtering by failing postures, custom error messages on clients, and push notifications for posture failures.