v1.102.3 v3.3.4

high risk

neuphonic/neuttsAug 20, 2026 → Aug 22, 20262 days between releases

What's New

Major release upgrading to Lego v5 and adding a modernized App Store UI.

New Features

  • Modern App Store UI
  • Forward Auth Ignored Paths
  • Bulk vdir for forward auth hosts
  • Custom ACME preferred CA
  • SSO redirect loop fix

Improvements

  • Upgraded to Lego v5 for better ACME support
  • Improvements to Forward Auth, SSO, and TLS handling
  • Improvements to ACME certificate management, HTTP routing, and rate limit settings
  • Docker hardening

Bug Fixes

  • Fix statistic bounded maps
  • Fix Plugin Manager UI (iframe height and Developer Settings accordion)
  • Fix port80 listener toggle and default site routing on HTTP
  • tlscert name-based fallback

Upgrade Notes

Upgrading from v1 to v3 requires verifying Forward Auth and SSO configurations due to behavior improvements. Ensure ACME settings are compatible with the new Lego v5 dependency. Review the new App Store UI and Plugin Manager settings.

The Two Releases

v1.102.3

v1.102.3

Aug 20, 2026· 2 months ago

Minimal release notes: "Please refer to the changelog available at https://tailscale.com/changelog"

Full release notes
v3.3.4

v3.3.4

Aug 22, 2026· 2 months ago

A major UX-focused release featuring a modernized App Store, improvements to Forward Auth and SSO, and an upgrade to Lego v5.

Full release notes