dependabot[bot]
6c97422203
Bump github.com/moby/go-archive from 0.2.0 to 0.3.0 ( #349 )
...
Export-Source-Commit: be3b71f4caf974119f2c26836ba5d45f37434f9c
2026-08-25 11:35:10 -05:00
dependabot[bot] and Tiago Silva
2f95040936
Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 ( #69474 )
...
* Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.19.1 to 5.19.2.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.19.1...v5.19.2 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-08-10 17:44:42 +00:00
Dan Share
2fa7acb6b3
Add ARM Network dependency ( #69093 )
...
* Add ARM Network dependency
* Deduplicate scale set names
* make go-mod-tidy-all
* Add ListAll and address feedback
* Limit resource group for scale sets
* Add RG check
* case-insensitive sub id check
2026-08-03 07:31:17 +00:00
dependabot[bot] and Tiago Silva
5bd35c2294
Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 ( #69249 )
...
* Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/sigstore/sigstore-go/releases )
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
dependency-version: 1.2.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-08-01 15:48:12 +00:00
Alan Parra
5dacf73a10
chore: Bump github.com/klauspost/compress to v1.18.7 ( #69146 )
...
* chore: Bump github.com/klauspost/compress to v1.18.7
* tidy
2026-07-29 17:08:53 +00:00
dependabot[bot] and Alan Parra
7357ae3f0c
Bump github.com/google/cel-go from 0.27.0 to 0.29.0 ( #69023 )
...
* Bump github.com/google/cel-go from 0.27.0 to 0.29.0
Bumps [github.com/google/cel-go](https://github.com/google/cel-go ) from 0.27.0 to 0.29.0.
- [Release notes](https://github.com/google/cel-go/releases )
- [Commits](https://github.com/google/cel-go/compare/v0.27.0...v0.29.0 )
---
updated-dependencies:
- dependency-name: github.com/google/cel-go
dependency-version: 0.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-27 17:46:28 +00:00
Alan Parra
0e69d15b4c
chore: Bump oras.land/oras-go/v2 to v2.6.2 ( #69060 )
2026-07-27 17:16:08 +00:00
Pavel
bf32ab65d9
[vnet] Reduce netstack data-path allocations ( #67950 )
...
* allow RunTestBackgroundTask to be used from benchmarks
* reuse fakeTUN packet buffers via sync.Pool to avoid benchmark alloc noise
* add network stack throughput benchmark
* bump gvisor version
* use AsViewList to drop the [][]byte alloc per outbound packet
* do go mod tidy
* fix some nits
* add 512 B chunk case to netstack throughput benchmark
2026-07-24 19:21:57 +00:00
dependabot[bot] and Alan Parra
0951ef75ad
Bump google.golang.org/grpc from 1.81.1 to 1.82.1 ( #68926 )
...
* Bump google.golang.org/grpc from 1.81.1 to 1.82.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.81.1 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.1...v1.82.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.82.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-24 16:36:05 +00:00
Alan Parra
97dd0829dc
chore: Bump /x/net and /x/text ( #68893 )
...
* chore: Bump golang.org/x/net to v0.57.0
* chore: Bump golang.org/x/text to v0.40.0
* tidy
* Fix TestSSHKeysEqual
2026-07-22 20:29:28 +00:00
Zac Bergquist and Ryan Clark
02629106a4
Reintroduce tsh recordings export for RemoteFX ( #63126 )
...
The tsh recordings export command exports a Windows desktop session
recording to a video file that can be played outside Teleport. It
was built prior to our RemoteFX support, and to this day only works
on legacy PNG recordings.
This commit allows us to export RemoteFX recordings by leveraging the
Rust RDP decoder library in tsh. This will be the first time tsh links
to Rust libraries.
In addition to restoring the previous functionality, this adds two
new capabilities:
1. We now support recordings that change size. (The original
implementation was completed prior to desktop sessions
supporting resize)
2. We try to encode an MP4 video with ffmpeg (the system-installed
version, not by linking ffmpeg code) if available, and fall
back to the slower AVI encoder if ffmpeg is not available.
(There's also a --encoder flag choosing one or the other, but
most users shouldn't need it).
Closes #45388
Also take the opportunity to remove the scholls/progressbar dependency
and unify a few different progress bar implementations.
Co-authored-by: Ryan Clark <[email protected]
2026-07-21 20:08:35 +00:00
rosstimothy
4651772587
Update charlievieth/strcase to v0.0.6 ( #68801 )
...
The new version is a prereq to be able to use Go 1.27. The
new version of Go makes changes to unicode which cause
charlievieth/strcase to panic.
2026-07-20 17:46:10 +00:00
Alan Parra
5b440e79d9
chore: Bump helm.sh/helm/v3 to v3.21.3 ( #68595 )
...
* chore: Bump helm.sh/helm/v3 to v3.21.3
* tidy
2026-07-16 20:12:35 +00:00
Alan Parra
500aed1dbf
chore: Update k8s modules to v0.36.2 ( #68645 )
...
* Bump k8s modules to v0.36.2
* Bumo sigs.k8s.io/controller-runtime and controller-tools
* make go-mod-tidy-all
* make grpc
* Address import deprecations
* Address scheme.Builder deprecation
* Fix integration/ build
* make fix-imports
2026-07-15 19:01:47 +00:00
Alan Parra
2727803f41
chore: Bump github.com/google/go-attestation to v0.6.1 ( #68596 )
...
* chore: Bump github.com/google/go-attestation to v0.6.1
* tidy
2026-07-13 22:05:08 +00:00
dependabot[bot] and Alan Parra
f12af1bd53
Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 ( #68539 )
...
* Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go ) from 1.1.4 to 1.2.0.
- [Release notes](https://github.com/sigstore/sigstore-go/releases )
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.1.4...v1.2.0 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
dependency-version: 1.2.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-13 20:40:56 +00:00
rosstimothy
b249a7349a
Address CVEs from dependencies ( #68509 )
...
Bumps golang/go.opentelemetry.io/otel to 1.44.0
Bumps oras.land/oras-go/v2 to 2.6.1
The updates were performed via socket fix --ecosystem=go --all --json
```
{
"ok": true,
"data": {
"fixedAll": true,
"ghsaDetails": [
{
"type": "applied-fixes",
"fixes": {
"GHSA-xf85-363p-868w": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-vh4v-2xq2-g5cg": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-fxhp-mv3v-67qp": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-8xwf-rjm4-xvhv": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-jxpm-75mh-9fp7": [
{
"purl": "pkg:golang/oras.land/oras-go/[email protected] ",
"fixedVersion": "2.6.1"
}
],
"GHSA-5wrp-cwcj-q835": [
{
"purl": "pkg:golang/go.opentelemetry.io/[email protected] .0",
"fixedVersion": "1.44.0"
}
]
}
}
]
}
}
```
2026-07-09 20:18:58 +00:00
Alan Parra
f4abeccdc0
chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.2 ( #68467 )
...
* chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.2
* tidy
2026-07-09 13:02:12 +00:00
cf91ada533
Add Linux desktop support ( #65841 )
...
* Implement support for TDPB in Desktop Agent.
* Add LinuxDesktop gRPC and backend
* Add LinuxDesktop resource to unified resources
* Add Linux desktop service
* Remove CloneResource
* Review comments
* Unifide fix
* routing
* Fix logins
* Fix logins
* Fix CA cache and write basic loop
* Review comment
* Fix components and handleConnection
* Review comment
* Add ClonableResourceWithLabels
* Fix missing CloneResource
* Add Xvfb handlers
* Add Xephyr
* Add Xvfb controller
* Add QOI encoder
* encoder + xsession
* reexec
* ChildLogConfig
* session
* add forceloginshell
* update frontend + fix session
* Review comments
* Fix code, update docs
* Fix TARGETS format, reuse waiting
* Remove direct mode
* Update lib/auth/linuxdesktop/linuxdesktopv1/service.go
Co-authored-by: Zac Bergquist <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-09 07:41:47 +00:00
Alan Parra
f82d5b4ed8
chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.0 ( #68446 )
...
* chore: Bump github.com/sigstore/timestamp-authority/v2 to v2.1.0
* tidy
2026-07-08 13:21:57 +00:00
dependabot[bot]
227987e6d9
Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 ( #68125 )
...
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor ) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/sigstore/rekor/releases )
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sigstore/rekor/compare/v1.5.0...v1.5.2 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
dependency-version: 1.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-02 12:18:43 +00:00
Edoardo Spadolini
dc815f972c
Add dsql and kinesis to go.mod ( #68169 )
2026-06-29 11:49:50 +00:00
Alan Parra
4727457dfb
chore: Address the latest govulncheck findings ( #68149 )
...
* chore: Bump /x/image and go-pkcs12
* chore: Bump github.com/sigstore/cosign/v3 to v3.0.6
* make go-mod-tidy-all
* make grpc
* Keep k8s.io/ modules in lockstep
* make go-mod-tidy-all
2026-06-26 16:18:34 +00:00
dependabot[bot] and Tiago Silva
dd9bf5111d
Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 ( #68011 )
...
* Bump github.com/containerd/containerd from 1.7.32 to 1.7.33
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.32 to 1.7.33.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.32...v1.7.33 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.33
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-06-23 21:56:53 +00:00
Tiago Silva
e927ba30cc
Bump go.mongodb.org/mongo-driver from 1.17.6 to 1.17.9 ( #67977 )
2026-06-22 16:31:35 +00:00
Maja Cieślak
813776fd7a
Add Xcode project for Teleport Verify; add gomobile as tool dep ( #67750 )
...
* Generate Xcode project for Verify
* Set Swift version to 6; remove macOS and Vision as destinations
* Handle `teleport://` links and add enrollment screen
* Avoid building macOS-specific stuff on iOS
This is needed for gomobile to build our stuff from lib/mobile from the
next commit.
* Add `lib/mobile/verify/enroll` compiled with gomobile
* `lib/mobile`: Temporarily use private Device Trust service
The public gRPC service exists on the demo branch but not on this
branch. In order to make it possible to compile
`lib/mobile/verify/enroll`, temporarily use the private service which
has similar RPCs.
* Run `make go-mod-tidy-all`
* Make Swift app connect to public DT service on "Request Now" tap
* mobile: Add sheet for enroll request status
* Revert go.mod changes
This reverts commit b9af7a76142c00ecd7fa9b2a6c4ea3a83c2959fa
2026-06-16 17:29:26 +00:00
rosstimothy
2a44d71345
Bump github.com/oracle/oci-go-sdk/v65 to v65.117.1 ( #67816 )
...
This pulls in the latest OCI SDK in order to interact
with recently introduced regions.
This includes the following regions:
- ap-kulai-2
- sa-riodejaneiro-1
- af-casablanca-1
- me-alrayyan-1
2026-06-16 15:51:30 +00:00
Ryan Clark
5b74af79d3
Update vt10x to v0.0.6-teleport.1 ( #67715 )
2026-06-12 07:58:32 +00:00
Chris Thach
a65328827a
Update golang.org/x/crypto to v0.53.0. ( #67637 )
...
* Update x/crypto to v0.53.0.
Signed-off-by: Chris Thach <[email protected] [email protected] [email protected]
2026-06-11 17:31:49 +00:00
dependabot[bot] and Tiago Silva
f997e37f41
Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ( #67453 )
...
* Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-06-09 14:13:02 +00:00
Ryan Clark
5b6ff5bf86
Protect recording metadata/thumbnail generation from panics ( #66078 )
...
* Protect recording metadata/thumbnail generation from panics
* Fix test
2026-06-03 10:54:39 +00:00
Ryan Clark
2405c6e786
Add property-based testing for RDPState ( #67317 )
...
* Add property-based testing for RDPState
* Move max screen size to separate test to avoid 8192x8192 framebuffer allocation
* Be consistent with avoiding IronRDP OOB
* Move rapid draws to outside of the run
* Fix bug in test util WrapFastPathPDU
* Reduce allocations in CI, fix row byte calculatino
2026-06-03 07:05:25 +00:00
dependabot[bot]
12daaf29b8
Bump the go group in /api with 12 updates ( #67353 )
...
Bumps the go group in /api with 12 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go ) | `2.5.0` | `2.6.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto ) | `0.0.0-20260406210006-6f92a3bedf2d` | `0.0.0-20260526163538-3dc84a4a5aaa` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go ) | `1.80.0` | `1.81.1` |
Updates `github.com/go-piv/piv-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/go-piv/piv-go/releases )
- [Commits](https://github.com/go-piv/piv-go/compare/v2.5.0...v2.6.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260406210006-6f92a3bedf2d to 0.0.0-20260526163538-3dc84a4a5aaa
- [Commits](https://github.com/googleapis/go-genproto/commits )
Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1 )
---
updated-dependencies:
- dependency-name: github.com/go-piv/piv-go/v2
dependency-version: 2.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-version: 0.0.0-20260526163538-3dc84a4a5aaa
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-version: 1.81.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-02 14:43:23 +00:00
Noah Stride
d79bff946e
Revert x/crypto ssh update ( #67111 )
2026-05-27 12:36:00 +00:00
Alan Parra
a6b9e2fd49
chore: Bump golang.org/x/ dependencies ( #67011 )
...
* chore: Bump golang.org/x/ dependencies
* tidy
* Fix TestTCPIPForward (close resources in the correct order)
2026-05-25 14:27:42 +00:00
dependabot[bot] and Tiago Silva
d9fd110fd7
Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 ( #66984 )
...
* Bump github.com/containerd/containerd from 1.7.30 to 1.7.32
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.30 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.30...v1.7.32 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.32
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-22 13:54:17 +00:00
dependabot[bot] and Alan Parra
195e80421c
build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 ( #66864 )
...
* build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 17:26:50 +00:00
dependabot[bot] and Alan Parra
3b1455c6a7
Bump github.com/apache/thrift from 0.22.0 to 0.23.0 ( #66511 )
...
* Bump github.com/apache/thrift from 0.22.0 to 0.23.0
Bumps [github.com/apache/thrift](https://github.com/apache/thrift ) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/apache/thrift/releases )
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md )
- [Commits](https://github.com/apache/thrift/compare/v0.22.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: github.com/apache/thrift
dependency-version: 0.23.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 14:10:12 +00:00
Edoardo Spadolini
737bda9b31
Optimize contains(split()) in resource expression parser ( #66645 )
...
* Bump gravitational/predicate to WIP commit
* Remove some allocations in predicate expressions
* Optimize contains(split()) in resource expression parser
* Do a type-safe assert on the result of astutil.Apply
* Keep the full value argument in the early exit of optimizeSplitContains
* Handle degenerate cases in splitContains
* Expand on the benchmark
* Rename LazyStringSlice to StringSlice
* Document StringSlice
* Fix test
* Fix handling of split on empty string
* Bump gravitational/predicate to 1.4.0
* Optimize multibyte delimiters too
* Update godoc for optimizeSplitContains
* Clarify the logic in splitContainsAffix
* Actually use multi-byte delimiters in BenchmarkSplitContains
* Revert "Actually use multi-byte delimiters in BenchmarkSplitContains"
This reverts commit 595bb85ba9f285928e99
2026-05-14 21:34:38 +00:00
dependabot[bot] and Alan Parra
64fb9e61f3
Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 ( #66622 )
...
* Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 22:04:53 +00:00
dependabot[bot] and Tiago Silva
04b753ee0c
Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 ( #66594 )
...
* Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0
Bumps [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang ) from 0.9.0 to 0.11.0.
- [Release notes](https://github.com/in-toto/in-toto-golang/releases )
- [Changelog](https://github.com/in-toto/in-toto-golang/blob/master/CHANGELOG.md )
- [Commits](https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0 )
---
updated-dependencies:
- dependency-name: github.com/in-toto/in-toto-golang
dependency-version: 0.11.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 11:55:52 +00:00
Tiago Silva
fb98c980ec
Add enum value rendering to CLI docs and remove duplicate descriptions ( #66466 )
...
This commit enhances the CLI reference documentation by automatically
displaying valid enum values in the "Default" column of flag tables,
eliminating the need to manually list these values in flag descriptions.
It also adds a CI step to verify that CLI reference docs stay in sync
with source code changes.
The core implementation uses reflection to extract enum values from
kingpin flags and formats them as "(valid: `value1`, `value2`, ...)".
All CLI source files have been updated to remove duplicate enum value
lists from flag help text, as these are now automatically rendered.
A new 'cli-docs-up-to-date' Makefile target and corresponding GitHub
Actions workflow job ensure that any changes to CLI flags are reflected
in the generated documentation.
Example output:
Before: |`--format`|`yaml`|Output format, 'yaml', 'json', or 'text'|
After: |`--format`|`yaml` (valid: `yaml`, `json`, `text`)|Output format.|
Signed-off-by: Tiago Silva <[email protected]
2026-05-08 13:53:15 +00:00
Dan Upton
daccc169a5
Fix untidy SPIFFE modules ( #66512 )
2026-05-07 10:35:16 +00:00
Edoardo Spadolini
ebc779b053
Upgrade gravitational/trace to v1.5.4 ( #66437 )
2026-05-05 15:31:35 +00:00
dependabot[bot]
b59ceaea8c
Bump github.com/Azure/go-ntlmssp ( #66105 )
...
Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp ) from 0.0.0-20221128193559-754e69321358 to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases )
- [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1 )
---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
dependency-version: 0.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-24 14:26:47 +00:00
rob-picard-teleport
fb01f0c989
Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 ( #66072 )
2026-04-23 16:57:54 +00:00
rosstimothy
5870768c88
Stop using text/template and html/template to enable DCE ( #65401 )
...
All existing template usage was converted to make use of
github.com/DataDog/datadog-agent/pkg/template. The DataDog package
is a fork of the stdlib template packages with method calling
removed so that reflect.MethodByName does not prevent DCE.
There were a handful of method calls in our templates that were trivially
changed to use custom functions defined via FuncMaps or specifying the
calculated value to the template instead of calling a function in the template.
A future change will add linter rules to prevent new text/template or
html/imports from landing. They have not been included here so as
to not to break enterprise code while it is migrated.
2026-04-22 15:54:43 +00:00
rosstimothy
88d82cf476
Configure kingpin to allow DCE ( #65897 )
...
* Update kingpin
* Convert CLI formatting to use kingpin UsageRenderers
Avoiding the legacy kingpin text/templates allows for DCE to be used
by the linker. The existing formatting has been matched with a
pure Go UsageRenderer.
2026-04-22 14:57:55 +00:00
dependabot[bot]
d8cde94137
Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 ( #65905 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.17.1 to 5.18.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-20 16:53:59 +00:00
rosstimothy
7691ff5a1c
Remove dependency on github.com/buger/jsonparser ( #65830 )
...
The library has had a number of CVEs recently and uses shady
dependencies. https://github.com/gravitational/teleport.e/pull/8513
removed the dependency pulled in via teleport.e. This updates the
e_imports.go to reflect that change which moved buger/jsonparser to
an indirect dependency.
To remove the dependency entirely, mark3labs/mcp-go was updated to
the latest version. In that version they have replaced
github.com/invopop/jsonschema, which brough in buger/jsonparser,
with github.com/google/jsonschema-go. As a result buger/jsonparser
is no longer in our dependency tree.
2026-04-20 15:55:16 +00:00
dependabot[bot]