Download Latest Version
v0.29.3 source code.zip (44.3 MB)
Get an email when there's a new version of Headscale
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| checksums.txt | 2026-07-29 | 767 Bytes | |
| headscale_0.29.3_linux_amd64.deb | 2026-07-29 | 20.0 MB | |
| headscale_0.29.3.tar.gz | 2026-07-29 | 99.1 MB | |
| headscale_0.29.3_freebsd_amd64 | 2026-07-29 | 51.2 MB | |
| headscale_0.29.3_linux_arm64.deb | 2026-07-29 | 18.4 MB | |
| headscale_0.29.3_darwin_amd64 | 2026-07-29 | 52.8 MB | |
| headscale_0.29.3_darwin_arm64 | 2026-07-29 | 50.0 MB | |
| headscale_0.29.3_linux_amd64 | 2026-07-29 | 52.4 MB | |
| headscale_0.29.3_linux_arm64 | 2026-07-29 | 49.2 MB | |
| README.md | 2026-07-29 | 2.1 kB | |
| v0.29.3 source code.tar.gz | 2026-07-29 | 43.3 MB | |
| v0.29.3 source code.zip | 2026-07-29 | 44.3 MB | |
| Totals: 12 Items | 480.9 MB | 8 | |
Minimum supported Tailscale client version: v1.80.0
Changes
- Fix tagged node stuck expired after
tailscale logout, unable to re-authenticate #3394 - Re-registering a tagged node with a different pre-auth key now applies the new key's tags instead of silently keeping the old ones #3394
- Fix re-authenticating an already-tagged node with
--advertise-tagsbeing rejected when the authenticating user owns the tags #3394 - Fix ephemeral nodes lingering as disconnected after reconnect churn #3383
- Fix node registration falsely returning
401 registration timed outwhen auth completes as the request context expires #3392 - Check the machine key on the followup registration poll so a leaked auth ID cannot return the registering user's identity #3393
- Reject
/keyrequests below the supported capability version floor, matching/ts2021#3391
Upgrade
Please follow the steps outlined in the upgrade guide to update your existing Headscale installation.
Changelog
- [235a57] CHANGELOG: add 0.29.3
- [089d6c] Explicitly select lunr as search provider
- [fba84c] auth: check machine key on the followup registration path
- [129284] build: bump Go toolchain to 1.26.5
- [9609a0] hscontrol: gate /key on supported capability version
- [bdc3e9] hscontrol: prefer completed auth over expired ctx in followup wait
- [5aff68] mkdocs: bump version
- [4a1e77] policy,state: authorize reauth tags against the authenticating user
- [5fb514] poll: do not cancel ephemeral GC until Connect succeeds
- [1fccdb] state: apply a new pre-auth key's tags on re-registration
- [d20288] state: do not expire tagged nodes on logout
