From fef80f3eb08236ccba5f8681a5d486741fda6706 Mon Sep 17 00:00:00 2001
From: Kristoffer Dalby <kristoffer@dalby.cc>
Date: Wed, 1 Jul 2026 08:40:47 +0000
Subject: [PATCH] CHANGELOG: note /ts2021 WebSocket GET fix

Updates #3357
---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f841378d..8cfa2d02 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -52,6 +52,7 @@ keys remain all-access.
 ### Changes
 
 - Fix map generation serializing on the policy lock, so a mass reconnect on `autogroup:self`, via or relay policies no longer stalls clients into `unexpected EOF` retry loops [#3358](https://github.com/juanfont/headscale/pull/3358)
+- Fix `/ts2021` rejecting the WebSocket `GET` upgrade with 405, which prevented Tailscale JS/WASM control clients from connecting [#3359](https://github.com/juanfont/headscale/pull/3359)
 
 A node whose stored name could not be turned into a valid FQDN — empty, or long
 enough that the full hostname exceeded 255 characters once the base domain was