From f708c5b0108ac2ba5ff384ae9b85bdef488e1ffc Mon Sep 17 00:00:00 2001
From: Kristoffer Dalby <kristoffer@dalby.cc>
Date: Wed, 1 Jul 2026 08:40:47 +0000
Subject: [PATCH] CHANGELOG: note /ts2021 WebSocket GET fix

Updates #3357

(cherry picked from commit fef80f3eb08236ccba5f8681a5d486741fda6706)
---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cc8622c2..f855557b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@
 ### Changes
 
 - Fix map generation serializing on the policy lock, so a mass reconnect on `autogroup:self`, via or relay policies no longer stalls clients into `unexpected EOF` retry loops [#3358](https://github.com/juanfont/headscale/pull/3358)
+- Fix `/ts2021` rejecting the WebSocket `GET` upgrade with 405, which prevented Tailscale JS/WASM control clients from connecting [#3359](https://github.com/juanfont/headscale/pull/3359)
 
 A node whose stored name could not be turned into a valid FQDN — empty, or long
 enough that the full hostname exceeded 255 characters once the base domain was