headscale

v0.28.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 3mo VPN & Tunnels

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

tailscale tailscale-control-server tailscale-server vpn

Summary

AI summary

Major release implementing tags-based identity per Tailscale model, smarter map updates reducing bandwidth, bcrypt pre-auth key security, but introduces breaking API and CLI changes.

Breaking Changes

Node API message simplified: ForcedTags, InvalidTags, ValidTags replaced with Tags field
PreAuthKey CLI now uses ID-based operations instead of user+key combinations

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track headscale

Get notified when new releases ship.

About headscale

An open source, self-hosted implementation of the Tailscale control server

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]