v1.102.5 v3.8.51

high risk

msitarzewski/agency-agentsSep 29, 2026 → Sep 30, 20260 days between releases

What's New

Massive release featuring 2,022 changes, new gateways, and security hardening.

Breaking Changes

  • Billing class logic now requires a curated per-connection catalog; uncurated connections are metered.
  • Traversal is refused in the Codex /v1/responses subpath for security.
  • Pre-request hooks now run in an isolated realm (GHSA-9p9m).

New Features

  • Proxy native ElevenLabs voices, text-to-speech, and speech-to-text HTTP routes.
  • Google AI Studio Gemini batch text-to-speech support via POST /v1/audio/speech.
  • Subscription-first auto groupings with plan-included connections and hard-stop overage logic.
  • Management-authenticated versioned web-session credential contract.
  • Hardened drill-down cache substrate for Video Bridge with exact-path broker policy.

Improvements

  • Enhanced routing resilience with hierarchical concurrency admission and adaptive reasoning effort.
  • Security hardening including traversal refusal in Codex and pre-request hooks in an isolated realm.
  • Proxy improvements including egress-IP visibility and selector steering away from refused members.
  • Video/Audio bridge enhancements including hardened drill-down cache and bounded transcript contracts.
  • Significant dependency updates and maintenance entries from 301 external contributors.

Bug Fixes

  • 1,454 documented fixes

Upgrade Notes

Update billing logic to ensure per-connection catalogs are curated to avoid metered billing. Review Codex API usage as traversal is now refused on /v1/responses. Ensure pre-request hook configurations are compatible with the new isolated realm execution environment.

The Two Releases

v1.102.5

v1.102.5

Sep 29, 2026· 24 days ago

Minimal release notes: "Please refer to the changelog available at https://tailscale.com/changelog"

Full release notes
v3.8.51

v3.8.51

Sep 30, 2026· 24 days ago

A massive release featuring 2,022 documented changes (1,973 commits, 301 external contributors). Key updates include enhanced providers and catalogs (new gateways, GPT-6 models), improved routing resilience with hierarchical concurrency, and significant security hardening. The release also introduces new proxy features, video/audio bridge improvements, and dashboard observability enhancements.

Full release notes