v3.41.2 v0.29.3
BITyia/DroneSplatJul 29, 2026 → Jul 29, 20260 days between releases
What's New
Notes suggest a different project (Headscale); v0.29.3 raises the minimum Tailscale client to v1.80.0
Breaking Changes
- Minimum supported Tailscale client version is now v1.80.0, so older clients will no longer be accepted.
- /key requests below the supported capability version floor are now rejected, matching the existing /ts2021 behavior.
- The newer tag (v0.29.3) is numerically lower than the older one (v3.41.2) and its notes describe Headscale/Tailscale functionality rather than the VPN/firewall/DNS stack in v3.41.2, indicating a likely mismatched or mis-tagged release.
New Features
- Re-registering a tagged node with a different pre-auth key now applies the new key's tags instead of silently retaining the old ones.
Improvements
- The follow-up registration poll now verifies the machine key, preventing a leaked auth ID from returning the registering user's identity.
- Capability-version enforcement was extended to the /key endpoint for consistency with /ts2021.
- Ephemeral node lifecycle handling was tightened to avoid stale disconnected entries during reconnect churn.
Bug Fixes
- Tagged nodes no longer remain stuck expired and unable to re-authenticate after `tailscale logout`.
- Re-authenticating an already-tagged node with `--advertise-tags` is no longer rejected when the user owns the tags.
- Node registration no longer falsely returns `401 registration timed out` when auth completes as the request context expires.
- Ephemeral nodes no longer linger as disconnected after repeated reconnects.
Upgrade Notes
Treat this as a high-risk comparison: the release notes for v0.29.3 describe Headscale/Tailscale behavior, not the VPN, firewall, and DNS components covered by v3.41.2, so confirm you are actually upgrading the intended artifact before proceeding. If you are on Headscale, ensure all Tailscale clients are at v1.80.0 or newer and follow the documented upgrade guide; if you are on the VPN stack, do not apply this tag as an upgrade.
The Two Releases
v3.41.2
Jul 29, 2026· 3 months ago
A comprehensive update fixing issues across Wireguard, OpenVPN, Firewall, Healthcheck, and DNS components. It includes provider-specific fixes for AirVPN, ExpressVPN, PIA, ProtonVPN, and Vyprvpn, as well as increased HTTP timeouts.
Full release notesv0.29.3
Jul 29, 2026· 3 months ago
Addresses authentication flows, specifically fixing issues with tagged nodes and ephemeral nodes during re-authentication and logout processes.
Full release notes