headscale v0.29.4 released on 23-09-2026
headscale v0.29.4 is out now. Administrators and users get OIDC hardening, mapper and peer‑map fixes, and a range of reliability and metrics improvements.
Users should follow the headscale upgrade guide to update installations and consult the GitHub release notes for the full changelog: https://headscale.net/stable/setup/upgrade/
What’s in this release
- Minimum supported Tailscale client version raised to v1.80.0.
- OIDC interactive login and callback hardening: the confirmation page is served from a reloadable URL to avoid single‑use code reuse, and callback handling secures state/nonce cookies, enforces single‑use state, and fails startup on invalid OIDC config.
- Mapper, peer map and node lifecycle fixes: prevent a node appearing in its own peer list (fixes Android crashes), avoid resending full node payloads for trivial updates, key the peer map by node ID, and add metrics to observe mapper behaviour and snapshot builds.
Upgrade notes
- Ensure all Tailscale clients are upgraded to at least v1.80.0 before upgrading headscale; follow the official upgrade guide: https://headscale.net/stable/setup/upgrade/.
- OIDC misconfiguration (invalid or missing issuer, client_id or client_secret) now causes startup to fail — verify OIDC settings before upgrading.
Share comments or report any issues on the project’s GitHub so others can learn from your upgrade experience.
