dependabot[bot]
6c97422203
Bump github.com/moby/go-archive from 0.2.0 to 0.3.0 ( #349 )
...
Export-Source-Commit: be3b71f4caf974119f2c26836ba5d45f37434f9c
2026-08-25 11:35:10 -05:00
teleport-renovate[bot]
a9b131d857
Update Go toolchain version to v1.26.7 ( #396 )
...
Export-Source-Commit: 8e4cdc517b988a352e7c40da1a09289384984f4d
2026-08-25 11:35:10 -05:00
teleport-renovate[bot]
490ebd42ac
Update Go toolchain version to v1.26.6 ( #206 )
...
Export-Source-Commit: ca738042bc0afb4eb77373c129093e817e4d280d
2026-08-25 11:35:10 -05:00
dependabot[bot] and Tiago Silva
2f95040936
Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 ( #69474 )
...
* Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.19.1 to 5.19.2.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.19.1...v5.19.2 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-08-10 17:44:42 +00:00
Dan Share
2fa7acb6b3
Add ARM Network dependency ( #69093 )
...
* Add ARM Network dependency
* Deduplicate scale set names
* make go-mod-tidy-all
* Add ListAll and address feedback
* Limit resource group for scale sets
* Add RG check
* case-insensitive sub id check
2026-08-03 07:31:17 +00:00
dependabot[bot] and Tiago Silva
5bd35c2294
Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 ( #69249 )
...
* Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/sigstore/sigstore-go/releases )
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
dependency-version: 1.2.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-08-01 15:48:12 +00:00
Alan Parra
5dacf73a10
chore: Bump github.com/klauspost/compress to v1.18.7 ( #69146 )
...
* chore: Bump github.com/klauspost/compress to v1.18.7
* tidy
2026-07-29 17:08:53 +00:00
dependabot[bot] and Alan Parra
7357ae3f0c
Bump github.com/google/cel-go from 0.27.0 to 0.29.0 ( #69023 )
...
* Bump github.com/google/cel-go from 0.27.0 to 0.29.0
Bumps [github.com/google/cel-go](https://github.com/google/cel-go ) from 0.27.0 to 0.29.0.
- [Release notes](https://github.com/google/cel-go/releases )
- [Commits](https://github.com/google/cel-go/compare/v0.27.0...v0.29.0 )
---
updated-dependencies:
- dependency-name: github.com/google/cel-go
dependency-version: 0.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-27 17:46:28 +00:00
Alan Parra
0e69d15b4c
chore: Bump oras.land/oras-go/v2 to v2.6.2 ( #69060 )
2026-07-27 17:16:08 +00:00
Pavel
bf32ab65d9
[vnet] Reduce netstack data-path allocations ( #67950 )
...
* allow RunTestBackgroundTask to be used from benchmarks
* reuse fakeTUN packet buffers via sync.Pool to avoid benchmark alloc noise
* add network stack throughput benchmark
* bump gvisor version
* use AsViewList to drop the [][]byte alloc per outbound packet
* do go mod tidy
* fix some nits
* add 512 B chunk case to netstack throughput benchmark
2026-07-24 19:21:57 +00:00
dependabot[bot] and Alan Parra
0951ef75ad
Bump google.golang.org/grpc from 1.81.1 to 1.82.1 ( #68926 )
...
* Bump google.golang.org/grpc from 1.81.1 to 1.82.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.81.1 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.1...v1.82.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.82.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-24 16:36:05 +00:00
Alan Parra
97dd0829dc
chore: Bump /x/net and /x/text ( #68893 )
...
* chore: Bump golang.org/x/net to v0.57.0
* chore: Bump golang.org/x/text to v0.40.0
* tidy
* Fix TestSSHKeysEqual
2026-07-22 20:29:28 +00:00
Zac Bergquist and Ryan Clark
02629106a4
Reintroduce tsh recordings export for RemoteFX ( #63126 )
...
The tsh recordings export command exports a Windows desktop session
recording to a video file that can be played outside Teleport. It
was built prior to our RemoteFX support, and to this day only works
on legacy PNG recordings.
This commit allows us to export RemoteFX recordings by leveraging the
Rust RDP decoder library in tsh. This will be the first time tsh links
to Rust libraries.
In addition to restoring the previous functionality, this adds two
new capabilities:
1. We now support recordings that change size. (The original
implementation was completed prior to desktop sessions
supporting resize)
2. We try to encode an MP4 video with ffmpeg (the system-installed
version, not by linking ffmpeg code) if available, and fall
back to the slower AVI encoder if ffmpeg is not available.
(There's also a --encoder flag choosing one or the other, but
most users shouldn't need it).
Closes #45388
Also take the opportunity to remove the scholls/progressbar dependency
and unify a few different progress bar implementations.
Co-authored-by: Ryan Clark <[email protected]
2026-07-21 20:08:35 +00:00
rosstimothy
4651772587
Update charlievieth/strcase to v0.0.6 ( #68801 )
...
The new version is a prereq to be able to use Go 1.27. The
new version of Go makes changes to unicode which cause
charlievieth/strcase to panic.
2026-07-20 17:46:10 +00:00
Alan Parra
5b440e79d9
chore: Bump helm.sh/helm/v3 to v3.21.3 ( #68595 )
...
* chore: Bump helm.sh/helm/v3 to v3.21.3
* tidy
2026-07-16 20:12:35 +00:00
Alan Parra
500aed1dbf
chore: Update k8s modules to v0.36.2 ( #68645 )
...
* Bump k8s modules to v0.36.2
* Bumo sigs.k8s.io/controller-runtime and controller-tools
* make go-mod-tidy-all
* make grpc
* Address import deprecations
* Address scheme.Builder deprecation
* Fix integration/ build
* make fix-imports
2026-07-15 19:01:47 +00:00
Alan Parra
2727803f41
chore: Bump github.com/google/go-attestation to v0.6.1 ( #68596 )
...
* chore: Bump github.com/google/go-attestation to v0.6.1
* tidy
2026-07-13 22:05:08 +00:00
dependabot[bot] and Alan Parra
f12af1bd53
Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 ( #68539 )
...
* Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go ) from 1.1.4 to 1.2.0.
- [Release notes](https://github.com/sigstore/sigstore-go/releases )
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.1.4...v1.2.0 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
dependency-version: 1.2.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-13 20:40:56 +00:00
rosstimothy
b249a7349a
Address CVEs from dependencies ( #68509 )
...
Bumps golang/go.opentelemetry.io/otel to 1.44.0
Bumps oras.land/oras-go/v2 to 2.6.1
The updates were performed via socket fix --ecosystem=go --all --json
```
{
"ok": true,
"data": {
"fixedAll": true,
"ghsaDetails": [
{
"type": "applied-fixes",
"fixes": {
"GHSA-xf85-363p-868w": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-vh4v-2xq2-g5cg": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-fxhp-mv3v-67qp": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-8xwf-rjm4-xvhv": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-jxpm-75mh-9fp7": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-5wrp-cwcj-q835": [
{
"purl": "pkg:golang/go.opentelemetry.io/[email protected] .0",
"fixedVersion": "1.44.0"
}
]
}
}
]
}
}
```
2026-07-09 20:18:58 +00:00
Alan Parra
f4abeccdc0
chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.2 ( #68467 )
...
* chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.2
* tidy
2026-07-09 13:02:12 +00:00
cf91ada533
Add Linux desktop support ( #65841 )
...
* Implement support for TDPB in Desktop Agent.
* Add LinuxDesktop gRPC and backend
* Add LinuxDesktop resource to unified resources
* Add Linux desktop service
* Remove CloneResource
* Review comments
* Unifide fix
* routing
* Fix logins
* Fix logins
* Fix CA cache and write basic loop
* Review comment
* Fix components and handleConnection
* Review comment
* Add ClonableResourceWithLabels
* Fix missing CloneResource
* Add Xvfb handlers
* Add Xephyr
* Add Xvfb controller
* Add QOI encoder
* encoder + xsession
* reexec
* ChildLogConfig
* session
* add forceloginshell
* update frontend + fix session
* Review comments
* Fix code, update docs
* Fix TARGETS format, reuse waiting
* Remove direct mode
* Update lib/auth/linuxdesktop/linuxdesktopv1/service.go
Co-authored-by: Zac Bergquist <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-09 07:41:47 +00:00
teleport-renovate[bot]
03b5603e9a
Update Go toolchain version to v1.26.5 ( #68439 )
...
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
2026-07-08 17:25:52 +00:00
Alan Parra
f82d5b4ed8
chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.0 ( #68446 )
...
* chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.0
* tidy
2026-07-08 13:21:57 +00:00
dependabot[bot]
227987e6d9
Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 ( #68125 )
...
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor ) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/sigstore/rekor/releases )
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sigstore/rekor/compare/v1.5.0...v1.5.2 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
dependency-version: 1.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-02 12:18:43 +00:00
Edoardo Spadolini
dc815f972c
Add dsql and kinesis to go.mod ( #68169 )
2026-06-29 11:49:50 +00:00
Alan Parra
4727457dfb
chore: Address the latest govulncheck findings ( #68149 )
...
* chore: Bump /x/image and go-pkcs12
* chore: Bump github.com/sigstore/cosign/v3 to v3.0.6
* make go-mod-tidy-all
* make grpc
* Keep k8s.io/ modules in lockstep
* make go-mod-tidy-all
2026-06-26 16:18:34 +00:00
Maja Cieślak
ed40e1c66d
Add mobile_device.create_enroll_token permission; make boombuler/barcode a direct dep ( #67863 )
...
* Add `mobile_device` kind for `mobile_device.create_enroll_token` permission
* Update preset-roles.json
* Add `mobile_device.create_enroll_token` to user ACL
* Make boombuler/barcode a direct dep
It's used in teleport.e to generate the QR code that's going to be
consumed by the mobile app.
* Enable defaultAllowRules to return roles which need `buildType`
* Backfill device-admin role
* Add `mobile_device.create_enroll_token` to admin role
2026-06-26 15:53:20 +00:00
dependabot[bot] and Tiago Silva
dd9bf5111d
Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 ( #68011 )
...
* Bump github.com/containerd/containerd from 1.7.32 to 1.7.33
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.32 to 1.7.33.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.32...v1.7.33 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.33
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-06-23 21:56:53 +00:00
Tiago Silva
e927ba30cc
Bump go.mongodb.org/mongo-driver from 1.17.6 to 1.17.9 ( #67977 )
2026-06-22 16:31:35 +00:00
Maja Cieślak
813776fd7a
Add Xcode project for Teleport Verify; add gomobile as tool dep ( #67750 )
...
* Generate Xcode project for Verify
* Set Swift version to 6; remove macOS and Vision as destinations
* Handle `teleport://` links and add enrollment screen
* Avoid building macOS-specific stuff on iOS
This is needed for gomobile to build our stuff from lib/mobile from the
next commit.
* Add `lib/mobile/verify/enroll` compiled with gomobile
* `lib/mobile`: Temporarily use private Device Trust service
The public gRPC service exists on the demo branch but not on this
branch. In order to make it possible to compile
`lib/mobile/verify/enroll`, temporarily use the private service which
has similar RPCs.
* Run `make go-mod-tidy-all`
* Make Swift app connect to public DT service on "Request Now" tap
* mobile: Add sheet for enroll request status
* Revert go.mod changes
This reverts commit b9af7a76142c00ecd7fa9b2a6c4ea3a83c2959fa
2026-06-16 17:29:26 +00:00
rosstimothy
2a44d71345
Bump github.com/oracle/oci-go-sdk/v65 to v65.117.1 ( #67816 )
...
This pulls in the latest OCI SDK in order to interact
with recently introduced regions.
This includes the following regions:
- ap-kulai-2
- sa-riodejaneiro-1
- af-casablanca-1
- me-alrayyan-1
2026-06-16 15:51:30 +00:00
Ryan Clark
5b74af79d3
Update vt10x to v0.0.6-teleport.1 ( #67715 )
2026-06-12 07:58:32 +00:00
Chris Thach
a65328827a
Update golang.org/x/crypto to v0.53.0. ( #67637 )
...
* Update x/crypto to v0.53.0.
Signed-off-by: Chris Thach <[email protected] [email protected] [email protected]
2026-06-11 17:31:49 +00:00
dependabot[bot] and Tiago Silva
f997e37f41
Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ( #67453 )
...
* Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-06-09 14:13:02 +00:00
teleport-renovate[bot] and Chris Thach
04471ea746
Update Go version to v1.26.4 ( #67476 )
...
* Update Go version to v1.26.4
* Rm GO_VERSION from Makefile/Dockerfile and rely on go.mod to inform Go version. Update code to adhere to 1.26 deprecation/changes.
Signed-off-by: Chris Thach <[email protected] [email protected] [email protected] [email protected]
2026-06-08 14:28:40 +00:00
teleport-renovate[bot] and Chris Thach
887960a4dc
Update Go version to v1.25.11 ( #67420 )
...
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
Co-authored-by: Chris Thach <[email protected]
2026-06-04 15:31:22 +00:00
Ryan Clark
5b6ff5bf86
Protect recording metadata/thumbnail generation from panics ( #66078 )
...
* Protect recording metadata/thumbnail generation from panics
* Fix test
2026-06-03 10:54:39 +00:00
Ryan Clark
2405c6e786
Add property-based testing for RDPState ( #67317 )
...
* Add property-based testing for RDPState
* Move max screen size to separate test to avoid 8192x8192 framebuffer allocation
* Be consistent with avoiding IronRDP OOB
* Move rapid draws to outside of the run
* Fix bug in test util WrapFastPathPDU
* Reduce allocations in CI, fix row byte calculatino
2026-06-03 07:05:25 +00:00
dependabot[bot]
12daaf29b8
Bump the go group in /api with 12 updates ( #67353 )
...
Bumps the go group in /api with 12 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go ) | `2.5.0` | `2.6.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto ) | `0.0.0-20260406210006-6f92a3bedf2d` | `0.0.0-20260526163538-3dc84a4a5aaa` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go ) | `1.80.0` | `1.81.1` |
Updates `github.com/go-piv/piv-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/go-piv/piv-go/releases )
- [Commits](https://github.com/go-piv/piv-go/compare/v2.5.0...v2.6.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260406210006-6f92a3bedf2d to 0.0.0-20260526163538-3dc84a4a5aaa
- [Commits](https://github.com/googleapis/go-genproto/commits )
Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1 )
---
updated-dependencies:
- dependency-name: github.com/go-piv/piv-go/v2
dependency-version: 2.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-version: 0.0.0-20260526163538-3dc84a4a5aaa
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-version: 1.81.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-02 14:43:23 +00:00
Noah Stride
d79bff946e
Revert x/crypto ssh update ( #67111 )
2026-05-27 12:36:00 +00:00
Alan Parra
a6b9e2fd49
chore: Bump golang.org/x/ dependencies ( #67011 )
...
* chore: Bump golang.org/x/ dependencies
* tidy
* Fix TestTCPIPForward (close resources in the correct order)
2026-05-25 14:27:42 +00:00
dependabot[bot] and Tiago Silva
d9fd110fd7
Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 ( #66984 )
...
* Bump github.com/containerd/containerd from 1.7.30 to 1.7.32
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.30 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.30...v1.7.32 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.32
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-22 13:54:17 +00:00
dependabot[bot] and Alan Parra
195e80421c
build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 ( #66864 )
...
* build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 17:26:50 +00:00
dependabot[bot] and Alan Parra
3b1455c6a7
Bump github.com/apache/thrift from 0.22.0 to 0.23.0 ( #66511 )
...
* Bump github.com/apache/thrift from 0.22.0 to 0.23.0
Bumps [github.com/apache/thrift](https://github.com/apache/thrift ) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/apache/thrift/releases )
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md )
- [Commits](https://github.com/apache/thrift/compare/v0.22.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: github.com/apache/thrift
dependency-version: 0.23.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 14:10:12 +00:00
Edoardo Spadolini
737bda9b31
Optimize contains(split()) in resource expression parser ( #66645 )
...
* Bump gravitational/predicate to WIP commit
* Remove some allocations in predicate expressions
* Optimize contains(split()) in resource expression parser
* Do a type-safe assert on the result of astutil.Apply
* Keep the full value argument in the early exit of optimizeSplitContains
* Handle degenerate cases in splitContains
* Expand on the benchmark
* Rename LazyStringSlice to StringSlice
* Document StringSlice
* Fix test
* Fix handling of split on empty string
* Bump gravitational/predicate to 1.4.0
* Optimize multibyte delimiters too
* Update godoc for optimizeSplitContains
* Clarify the logic in splitContainsAffix
* Actually use multi-byte delimiters in BenchmarkSplitContains
* Revert "Actually use multi-byte delimiters in BenchmarkSplitContains"
This reverts commit 595bb85ba9f285928e99
2026-05-14 21:34:38 +00:00
dependabot[bot] and Alan Parra
64fb9e61f3
Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 ( #66622 )
...
* Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 22:04:53 +00:00
dependabot[bot] and Tiago Silva
04b753ee0c
Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 ( #66594 )
...
* Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0
Bumps [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang ) from 0.9.0 to 0.11.0.
- [Release notes](https://github.com/in-toto/in-toto-golang/releases )
- [Changelog](https://github.com/in-toto/in-toto-golang/blob/master/CHANGELOG.md )
- [Commits](https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0 )
---
updated-dependencies:
- dependency-name: github.com/in-toto/in-toto-golang
dependency-version: 0.11.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 11:55:52 +00:00
teleport-renovate[bot]
42a4eaafee
Update Go toolchain version to v1.25.10 ( #66568 )
...
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
2026-05-08 22:48:49 +00:00
Tiago Silva
fb98c980ec
Add enum value rendering to CLI docs and remove duplicate descriptions ( #66466 )
...
This commit enhances the CLI reference documentation by automatically
displaying valid enum values in the "Default" column of flag tables,
eliminating the need to manually list these values in flag descriptions.
It also adds a CI step to verify that CLI reference docs stay in sync
with source code changes.
The core implementation uses reflection to extract enum values from
kingpin flags and formats them as "(valid: `value1`, `value2`, ...)".
All CLI source files have been updated to remove duplicate enum value
lists from flag help text, as these are now automatically rendered.
A new 'cli-docs-up-to-date' Makefile target and corresponding GitHub
Actions workflow job ensure that any changes to CLI flags are reflected
in the generated documentation.
Example output:
Before: |`--format`|`yaml`|Output format, 'yaml', 'json', or 'text'|
After: |`--format`|`yaml` (valid: `yaml`, `json`, `text`)|Output format.|
Signed-off-by: Tiago Silva <[email protected]
2026-05-08 13:53:15 +00:00
rhammonds-teleport and Przemko Robakowski
02bb78f584
Desktop Access: Multi-Domain Sign-on ( #64964 )
...
* Multi-domain logins for Windows Desktop
* Re-work LDAP referral chasing. Attempt an SRV lookup on referrals so that we can resolve 'domain referrals' to a list of hosts for a given domain.
* Fix leaked LDAP client handles and update tests to catch them going forward
* fix potential nil pointer deref from malformed LDAP referrals
* fix comment
* Fix incorrect early return when attempting multiple SID queries.
* Fix import name
* Fix potential hostname verification failure when dialing a referred LDAP server
* Try to clean up the search function's awkward return value semantics
* Clean up comment
* Case insensitive comparison of configured domain vs target user's domain
* Check for both context cancellation and deadline errors
* Ensure audit reflects NLA configuration
* Update ldap tests after refactor.
* Fix case sensitive comparison of user's domain suffix when determining whether or not NLA can be enabled.
* Add more robust LDAP referral parsing. Modify the search request based on the parameters parsed from each referral URL.
* Increase log severity of errors that occur while chasing LDAP referrals.
* Use go-ldaps to help parse DNs for conversion to a FQDN
* Ignore port number on SRV lookups for ldap servers
* Clean up LDAP URL parsing
* Add comment explaining 'newRequestFromReferral'.
* Strip port from host string before setting 'ServerName' in our TLS config.
* lint fix
* Fix lint
* Report an error if we fail to extract referrals from an go-ldap error
* More improvements and hardening for LDAP URL parsing.
* Add a couple of guard clauses before attempting an SRV lookup on a hostname parsed from an LDAP URL. Avoid returning an empty hostname.
* Print full username (including optional domain suffix) in logs
* Use net.SplitHostPort to detect port number before SRV lookup
* rename string builder
* Add comment explaining that 'GetActiveDirectorySIDAndDN' may chase referrals
* newLDAPReferral -> parseLDAPReferral
* Remove outdated comment
* Return 'BadParameter' error when parsing empty referral
* Fix 'ldap url' casing
* Refactor 'searcher' interface to include io.Closer.
* Extra comments on LDAP URL parsing
* Prevent excessive warning logs that occurs when encountering a 'NotFound' error during a resursive LDAP search.
* Append domain of target desktop to username instead of WDS default domain
* Guard against referral URLs that do not have an ldaps scheme
---------
Co-authored-by: Przemko Robakowski <[email protected]
2026-05-06 14:01:42 +00:00
dependabot[bot]