diff --git a/tailscale/docker-compose.yml b/tailscale/docker-compose.yml
index 124dcbc..38dbcc7 100644
--- a/tailscale/docker-compose.yml
+++ b/tailscale/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3.7"
 services:
   web:
     network_mode: "host" # TODO: We can remove this later with some iptables magic
-    image: tailscale/tailscale:v1.34.2@sha256:e8589ddd8e7175e4ac0e2bd16a8ed2c17ae77e8c97dab95f22d13139600694f7
+    image: tailscale/tailscale:v1.40.1@sha256:08dd1f465d6e96192b36c10f4366b3988bc6ad29f7b264bd020c1762ee325305
     restart: on-failure
     stop_grace_period: 1m
     command: "sh -c 'tailscale web --listen 0.0.0.0:8240 & exec tailscaled --tun=userspace-networking'"
diff --git a/tailscale/umbrel-app.yml b/tailscale/umbrel-app.yml
index 96b1426..a7700a0 100644
--- a/tailscale/umbrel-app.yml
+++ b/tailscale/umbrel-app.yml
@@ -2,7 +2,7 @@ manifestVersion: 1
 id: tailscale
 category: Networking
 name: Tailscale
-version: "v1.34.2"
+version: "v1.40.1"
 tagline: Zero config VPN to access your Umbrel from anywhere
 description: >-
   Tailscale is zero config VPN that creates a secure network between
@@ -28,8 +28,9 @@ path: ""
 deterministicPassword: false
 torOnly: false
 releaseNotes: >
-  - Fixed: Handling of a very large number of SplitDNS domains with an exit node
+  This release updates Tailscale from v1.34.2 to v1.40.1.
 
-  - Fixed: Regression handling TS_STATE_DIR in containerboot
+
+  Full release notes and detailed information is available at https://github.com/tailscale/tailscale/releases
 submitter: Umbrel
 submission: https://github.com/getumbrel/umbrel/pull/1248