v0.56.0

0.56.0 (2026-10-01)

Changes

• cli: accept a user name in preauthkeys create and apikeys create --user (6cb53b3)
• derp: list the embedded relay's connected clients on the debug server (6cb53b3)
• derp: read derp.paths and extra_records_path files as YAML, JSON or HuJSON by extension (6cb53b3)

Fixes

• derp: drop a region set to null in a derp.paths file (6cb53b3)
• mapper: send a removed peer in a response clients apply as a delta (6cb53b3)
• nix: write split DNS where slopscale reads it and drop the deprecated ephemeral key (6cb53b3)
• policy/v2: keep via exit steering when an unrelated rule matches the viewer (6cb53b3)
• policy/v2: leave the live policy in place when a recompile fails (6cb53b3)
• policy/v2: send machines their new autogroup:self rules when a user changes (6cb53b3)
• policy: send approved exit nodes every filter rule, as Tailscale does (6cb53b3)
• state: send a deleted node's removal on its own, apart from the policy refresh (6cb53b3)
• state: update a node's NextDNS device name when its hostname changes (6cb53b3)
• types: refuse a relay host name that clients behind a proxy would reject (6cb53b3)

Performance

• state: build the peer map once per node write instead of twice (6cb53b3)

Dependencies

• update tailscale main, zitadel/oidc, maxminddb, the console and docs pins and nixpkgs (6cb53b3)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.55.0

0.55.0 (2026-10-01)

Changes

• state: let machines behind a connector's public address skip it (#52) (c878db0)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.54.2

0.54.2 (2026-09-29)

Fixes

• web: keep the machines table in place when rows are ticked (#50) (d2abe8f)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.54.1

0.54.1 (2026-09-28)

Performance

• web: compile the console with the React Compiler, so a change re-renders only what depends on it (002b846)

Dependencies

• update tailscale.com, miekg/dns, prometheus/common, zitadel/oidc and the console's router, linter and formatter (002b846)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.54.0

0.54.0 (2026-09-27)

Changes

• traffic: count internet and LAN traffic apart and show the internet by default (#46) (cbe0e0f)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.53.0

0.53.0 (2026-09-27)

Changes

• traffic: show the last day of traffic on the overview and set the gateways and collection under Settings (#44) (fa2bdcf)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.52.0

0.52.0 (2026-09-27)

Changes

• traffic: name the gateways each machine's traffic went through in the API, the CLI and the console's machine tables (89f8dca)
• web: see what each gateway carried on the traffic overview, and pick one to narrow the page to it (89f8dca)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.51.0

0.51.0 (2026-09-27)

Changes

• show every machine's owner wherever the console names it (#40) (311bf9f)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.50.1

0.50.1 (2026-09-27)

Fixes

• api/v2: carry a service's display name in the displayName field Tailscale's API uses (8d820df)
• derp/server: answer STUN from the address the client asked on multi-homed hosts (8d820df)
• refuse an oversized DERP map or ASN table instead of reading it cut short (8d820df)
• types: refuse DNS names from the config and records file that clients cannot parse (8d820df)
• web: keep the audit activity chart's axis on whole events (8d820df)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.

v0.50.0

0.50.0 (2026-09-26)

Changes

• api/v2: accept the tailnet ID in place of "-" and show it in the server info (59d2244)
• cmd/slopscale: suggest how to find the socket holding a port when serve cannot bind (59d2244)
• db: accept tskey-client- OAuth client secrets so the stock tailscale client and GitHub Action can mint auth keys (59d2244)
• mapper: tell clients their tailnet's stable ID, shown by tailscale status --json (59d2244)
• types: refuse to start when two listeners would bind the same socket (59d2244)
• types: report every configuration problem in one start, naming the key, its value and the fix (59d2244)
• web: show the tailnet ID, ready to copy, on Settings › Tailnet (59d2244)

Fixes

• cli: tell no matching user apart from several, list the matches, and refuse --identifier 0 (59d2244)
• db: hash pre-auth keys from before 0.28 instead of storing them in plaintext (59d2244)
• db: keep a revoked pre-auth key while a node still uses it, so an ephemeral node does not turn permanent (59d2244)
• db: name the nodes that block a user deletion (59d2244)
• db: refuse a database from headscale 0.24 or earlier instead of half-migrating it (59d2244)
• hscontrol: keep renewing Let's Encrypt certificates after a badNonce reply (59d2244)
• hscontrol: name the listener that cannot bind, and stop a taken ACME port from exiting the process (59d2244)
• mapper: stop dropping healthy connections under load and sending empty map frames (59d2244)
• policy/v2: accept '#' metadata fields in grants, ssh, nodeAttrs and at the top level (59d2244)
• state: leave the previous policy in force when a policy write is refused or cannot be stored (59d2244)
• state: refuse advertise-tags a pre-auth key lacks when a node re-registers, not only on first join (59d2244)
• state: show a node offline once its key expires, and back online when the expiry is lifted (59d2244)
• state: show the gateway to the nodes its DNS log resolver grant admits (59d2244)

Performance

• db: verify API keys, auth keys and OAuth credentials with SHA-256 instead of bcrypt and Argon2id, upgrading each stored hash on its next use (59d2244)
• mapper: cut the policy work of online, offline and endpoint updates from quadratic to linear (59d2244)

Dependencies

• update tailscale.com to capability version 148 and refresh the Go modules (59d2244)
• web: update the console dependencies to Kumo 2.14, oxlint 1.85 and oxfmt 0.70 (59d2244)

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Slopscale installation.