- Added DERP Return Path Optimization and an in‑memory state mode, plus a TS_PERMIT_CERT_UID env var for TLS certificate fetching
- Extended tailscale status JSON (Tags, PrimaryRoutes, TailnetName) and Prometheus exporter with Go runtime metrics; Windows MSI installer and authkey support added
- Implemented numerous platform fixes: reduced heartbeat frequency, improved SID handling, robust systemd‑resolved detection, large route parsing, DNS config detection, and Synology permission restoration