1.16.0

All Platforms

• Support storage of node state as a Kubernetes secret.
• tailscale up --authkey=file:/path/to/secret support
• tailscale up --qr for QR codes
• tailscaled in userspace-networking mode can now run an HTTP proxy server (in addition to the prior SOCKS5 proxy server support)
• no longer need the while tailscale up; do sleep 0.1; done loops in Docker startup scripts.
• CPU/memory profiling support in tailscale debug
• bake in LetsEncrypt's ISRG Root X1 root (also in 1.14.6)

Linux

• Support containers with !CAP_NET_RAW and !CAP_NET_ADMIN (like CircleCI runners)
• service (portlist) scanning optimized; uses much less CPU on busy servers

Windows

• Move state to C:\ProgramData (also in 1.14.4)

macOS

• Fix super rare Wireguard packet loop network flood when using a DNS server behind a subnet router, when a macOS device resumes from sleep and the network changes (also iOS, but triggers less there). Fixes #1526 (also in 1.14.6)

iOS

• Turn the radio on less often to improve battery performance

Android

• support Taildrop on older Android releases
• Turn the radio on less often to improve battery performance