v3.8.27 v0.29.0
cheaper-inference/OmniRouteJun 17, 2026 → Jun 17, 20260 days between releases
What's New
New release adds Tailscale ACL compatibility, SSH checks, and policy testing; replaces wildcard matching.
Breaking Changes
- `autogroup:danger-all` replaces `*` for matching all IPs.
- `randomizeClientPort` moved from server config to top-level policy field.
- Hostname sanitisation rules updated to match Tailscale SaaS behavior.
New Features
- SSH Check action requiring OIDC approval before granting access.
- Beta support for `tests` and `sshTests` blocks in policy files.
- New `grants` syntax alongside ACLs for app-level features.
- New `nodeAttrs` block to assign Tailscale capabilities via policy.
- Taildrive configuration support via policy.
Improvements
- Hostname sanitisation using MagicDNS rules.
- Extensive test coverage for Tailscale ACL generation.
Upgrade Notes
Update wildcard `*` references to `autogroup:danger-all` in your ACLs. Move `randomizeClientPort` configuration from server config to the top-level policy file. Review hostname sanitization rules to align with Tailscale SaaS behavior.
The Two Releases
v3.8.27
Jun 17, 2026· 4 months ago
Highlights include advertising combo capabilities, delegated Anthropic Context Editing, the real LLMLingua-2 ONNX compression engine, and circuit-breaker state visibility in the dashboard. It also features significant security hardening, including a ReDoS fix.
Full release notesv0.29.0
Jun 17, 2026· 4 months ago
A major update focusing on Tailscale ACL/Policy compatibility, introducing SSH check actions, policy testing, grants, node attributes, and Taildrive configuration.
Full release notes