diff --git a/tailscale/docker-compose.yml b/tailscale/docker-compose.yml
index 959308c..8b08d9b 100644
--- a/tailscale/docker-compose.yml
+++ b/tailscale/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3.7"
 services:
   web:
     network_mode: "host" # TODO: We can remove this later with some iptables magic
-    image: tailscale/tailscale:v1.26.2@sha256:9a0949bbb4c2c02766e1b5fa396da010fb8cb0b9018cb5e43545d1fe9bfac2b7
+    image: tailscale/tailscale:v1.30.1@sha256:5599c407b0e87a2df262a32d3d1ca1cfd88271e3134cbd74d3a4454bf6d28bbe
     restart: on-failure
     stop_grace_period: 1m
     command: "sh -c 'tailscale web --listen 0.0.0.0:${APP_TAILSCALE_PORT} & exec tailscaled --tun=userspace-networking'"
diff --git a/tailscale/umbrel-app.yml b/tailscale/umbrel-app.yml
index 1a0e7ed..5f662c3 100644
--- a/tailscale/umbrel-app.yml
+++ b/tailscale/umbrel-app.yml
@@ -2,7 +2,7 @@ manifestVersion: 1
 id: tailscale
 category: Networking
 name: Tailscale
-version: "1.26.2-build-2"
+version: "1.30.1"
 tagline: Zero config VPN to access your Umbrel from anywhere
 description: >-
   Tailscale is zero config VPN that creates a secure network between
@@ -27,3 +27,7 @@ gallery:
 path: ""
 deterministicPassword: false
 torOnly: false
+releaseNotes: >
+  - Fix exit-nodes in --tun=userspace-networking mode with no IPv6 connectivity to not break Chrome 104+
+
+  - Fix SIGINT when running in a container without job control