Chris Thach
a65328827a
Update golang.org/x/crypto to v0.53.0. ( #67637 )
...
* Update x/crypto to v0.53.0.
Signed-off-by: Chris Thach <[email protected] [email protected] [email protected]
2026-06-11 17:31:49 +00:00
dependabot[bot] and Tiago Silva
f997e37f41
Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ( #67453 )
...
* Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-06-09 14:13:02 +00:00
teleport-renovate[bot] and Chris Thach
04471ea746
Update Go version to v1.26.4 ( #67476 )
...
* Update Go version to v1.26.4
* Rm GO_VERSION from Makefile/Dockerfile and rely on go.mod to inform Go version. Update code to adhere to 1.26 deprecation/changes.
Signed-off-by: Chris Thach <[email protected] [email protected] [email protected] [email protected]
2026-06-08 14:28:40 +00:00
teleport-renovate[bot] and Chris Thach
887960a4dc
Update Go version to v1.25.11 ( #67420 )
...
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
Co-authored-by: Chris Thach <[email protected]
2026-06-04 15:31:22 +00:00
Ryan Clark
5b6ff5bf86
Protect recording metadata/thumbnail generation from panics ( #66078 )
...
* Protect recording metadata/thumbnail generation from panics
* Fix test
2026-06-03 10:54:39 +00:00
Ryan Clark
2405c6e786
Add property-based testing for RDPState ( #67317 )
...
* Add property-based testing for RDPState
* Move max screen size to separate test to avoid 8192x8192 framebuffer allocation
* Be consistent with avoiding IronRDP OOB
* Move rapid draws to outside of the run
* Fix bug in test util WrapFastPathPDU
* Reduce allocations in CI, fix row byte calculatino
2026-06-03 07:05:25 +00:00
dependabot[bot]
12daaf29b8
Bump the go group in /api with 12 updates ( #67353 )
...
Bumps the go group in /api with 12 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go ) | `2.5.0` | `2.6.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto ) | `0.0.0-20260406210006-6f92a3bedf2d` | `0.0.0-20260526163538-3dc84a4a5aaa` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go ) | `1.80.0` | `1.81.1` |
Updates `github.com/go-piv/piv-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/go-piv/piv-go/releases )
- [Commits](https://github.com/go-piv/piv-go/compare/v2.5.0...v2.6.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260406210006-6f92a3bedf2d to 0.0.0-20260526163538-3dc84a4a5aaa
- [Commits](https://github.com/googleapis/go-genproto/commits )
Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1 )
---
updated-dependencies:
- dependency-name: github.com/go-piv/piv-go/v2
dependency-version: 2.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-version: 0.0.0-20260526163538-3dc84a4a5aaa
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-version: 1.81.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-02 14:43:23 +00:00
Noah Stride
d79bff946e
Revert x/crypto ssh update ( #67111 )
2026-05-27 12:36:00 +00:00
Alan Parra
a6b9e2fd49
chore: Bump golang.org/x/ dependencies ( #67011 )
...
* chore: Bump golang.org/x/ dependencies
* tidy
* Fix TestTCPIPForward (close resources in the correct order)
2026-05-25 14:27:42 +00:00
dependabot[bot] and Tiago Silva
d9fd110fd7
Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 ( #66984 )
...
* Bump github.com/containerd/containerd from 1.7.30 to 1.7.32
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.30 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.30...v1.7.32 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.32
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-22 13:54:17 +00:00
dependabot[bot] and Alan Parra
195e80421c
build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 ( #66864 )
...
* build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 17:26:50 +00:00
dependabot[bot] and Alan Parra
3b1455c6a7
Bump github.com/apache/thrift from 0.22.0 to 0.23.0 ( #66511 )
...
* Bump github.com/apache/thrift from 0.22.0 to 0.23.0
Bumps [github.com/apache/thrift](https://github.com/apache/thrift ) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/apache/thrift/releases )
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md )
- [Commits](https://github.com/apache/thrift/compare/v0.22.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: github.com/apache/thrift
dependency-version: 0.23.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-19 14:10:12 +00:00
Edoardo Spadolini
737bda9b31
Optimize contains(split()) in resource expression parser ( #66645 )
...
* Bump gravitational/predicate to WIP commit
* Remove some allocations in predicate expressions
* Optimize contains(split()) in resource expression parser
* Do a type-safe assert on the result of astutil.Apply
* Keep the full value argument in the early exit of optimizeSplitContains
* Handle degenerate cases in splitContains
* Expand on the benchmark
* Rename LazyStringSlice to StringSlice
* Document StringSlice
* Fix test
* Fix handling of split on empty string
* Bump gravitational/predicate to 1.4.0
* Optimize multibyte delimiters too
* Update godoc for optimizeSplitContains
* Clarify the logic in splitContainsAffix
* Actually use multi-byte delimiters in BenchmarkSplitContains
* Revert "Actually use multi-byte delimiters in BenchmarkSplitContains"
This reverts commit 595bb85ba9f285928e99
2026-05-14 21:34:38 +00:00
dependabot[bot] and Alan Parra
64fb9e61f3
Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 ( #66622 )
...
* Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md )
- [Commits](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.19.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 22:04:53 +00:00
dependabot[bot] and Tiago Silva
04b753ee0c
Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 ( #66594 )
...
* Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0
Bumps [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang ) from 0.9.0 to 0.11.0.
- [Release notes](https://github.com/in-toto/in-toto-golang/releases )
- [Changelog](https://github.com/in-toto/in-toto-golang/blob/master/CHANGELOG.md )
- [Commits](https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0 )
---
updated-dependencies:
- dependency-name: github.com/in-toto/in-toto-golang
dependency-version: 0.11.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-05-11 11:55:52 +00:00
teleport-renovate[bot]
42a4eaafee
Update Go toolchain version to v1.25.10 ( #66568 )
...
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
2026-05-08 22:48:49 +00:00
Tiago Silva
fb98c980ec
Add enum value rendering to CLI docs and remove duplicate descriptions ( #66466 )
...
This commit enhances the CLI reference documentation by automatically
displaying valid enum values in the "Default" column of flag tables,
eliminating the need to manually list these values in flag descriptions.
It also adds a CI step to verify that CLI reference docs stay in sync
with source code changes.
The core implementation uses reflection to extract enum values from
kingpin flags and formats them as "(valid: `value1`, `value2`, ...)".
All CLI source files have been updated to remove duplicate enum value
lists from flag help text, as these are now automatically rendered.
A new 'cli-docs-up-to-date' Makefile target and corresponding GitHub
Actions workflow job ensure that any changes to CLI flags are reflected
in the generated documentation.
Example output:
Before: |`--format`|`yaml`|Output format, 'yaml', 'json', or 'text'|
After: |`--format`|`yaml` (valid: `yaml`, `json`, `text`)|Output format.|
Signed-off-by: Tiago Silva <[email protected]
2026-05-08 13:53:15 +00:00
rhammonds-teleport and Przemko Robakowski
02bb78f584
Desktop Access: Multi-Domain Sign-on ( #64964 )
...
* Multi-domain logins for Windows Desktop
* Re-work LDAP referral chasing. Attempt an SRV lookup on referrals so that we can resolve 'domain referrals' to a list of hosts for a given domain.
* Fix leaked LDAP client handles and update tests to catch them going forward
* fix potential nil pointer deref from malformed LDAP referrals
* fix comment
* Fix incorrect early return when attempting multiple SID queries.
* Fix import name
* Fix potential hostname verification failure when dialing a referred LDAP server
* Try to clean up the search function's awkward return value semantics
* Clean up comment
* Case insensitive comparison of configured domain vs target user's domain
* Check for both context cancellation and deadline errors
* Ensure audit reflects NLA configuration
* Update ldap tests after refactor.
* Fix case sensitive comparison of user's domain suffix when determining whether or not NLA can be enabled.
* Add more robust LDAP referral parsing. Modify the search request based on the parameters parsed from each referral URL.
* Increase log severity of errors that occur while chasing LDAP referrals.
* Use go-ldaps to help parse DNs for conversion to a FQDN
* Ignore port number on SRV lookups for ldap servers
* Clean up LDAP URL parsing
* Add comment explaining 'newRequestFromReferral'.
* Strip port from host string before setting 'ServerName' in our TLS config.
* lint fix
* Fix lint
* Report an error if we fail to extract referrals from an go-ldap error
* More improvements and hardening for LDAP URL parsing.
* Add a couple of guard clauses before attempting an SRV lookup on a hostname parsed from an LDAP URL. Avoid returning an empty hostname.
* Print full username (including optional domain suffix) in logs
* Use net.SplitHostPort to detect port number before SRV lookup
* rename string builder
* Add comment explaining that 'GetActiveDirectorySIDAndDN' may chase referrals
* newLDAPReferral -> parseLDAPReferral
* Remove outdated comment
* Return 'BadParameter' error when parsing empty referral
* Fix 'ldap url' casing
* Refactor 'searcher' interface to include io.Closer.
* Extra comments on LDAP URL parsing
* Prevent excessive warning logs that occurs when encountering a 'NotFound' error during a resursive LDAP search.
* Append domain of target desktop to username instead of WDS default domain
* Guard against referral URLs that do not have an ldaps scheme
---------
Co-authored-by: Przemko Robakowski <[email protected]
2026-05-06 14:01:42 +00:00
Edoardo Spadolini
ebc779b053
Upgrade gravitational/trace to v1.5.4 ( #66437 )
2026-05-05 15:31:35 +00:00
Brian Joerger
6e40940512
Capture reexec networking stderr for logging ( #65202 )
...
* Capture reexec networking stderr and propagate it to the client.
* Move process closure higher in the callstack when waitReady fails.
* Add test for waitReady.
* Add t.Context() select case.
* Address comments.
* Resolve comments.
* Have callers provide context.
* Address comments.
* Fix merge conflicts.
* Fix typo.
* Fix test.
* Fix merge conflicts.
* Fix edge case with unbounded stderr.
* Fix lint.
2026-04-29 20:04:39 +00:00
dependabot[bot]
b59ceaea8c
Bump github.com/Azure/go-ntlmssp ( #66105 )
...
Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp ) from 0.0.0-20221128193559-754e69321358 to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases )
- [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1 )
---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
dependency-version: 0.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-24 14:26:47 +00:00
rob-picard-teleport
fb01f0c989
Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 ( #66072 )
2026-04-23 16:57:54 +00:00
rosstimothy
5870768c88
Stop using text/template and html/template to enable DCE ( #65401 )
...
All existing template usage was converted to make use of
github.com/DataDog/datadog-agent/pkg/template. The DataDog package
is a fork of the stdlib template packages with method calling
removed so that reflect.MethodByName does not prevent DCE.
There were a handful of method calls in our templates that were trivially
changed to use custom functions defined via FuncMaps or specifying the
calculated value to the template instead of calling a function in the template.
A future change will add linter rules to prevent new text/template or
html/imports from landing. They have not been included here so as
to not to break enterprise code while it is migrated.
2026-04-22 15:54:43 +00:00
rosstimothy
88d82cf476
Configure kingpin to allow DCE ( #65897 )
...
* Update kingpin
* Convert CLI formatting to use kingpin UsageRenderers
Avoiding the legacy kingpin text/templates allows for DCE to be used
by the linker. The existing formatting has been matched with a
pure Go UsageRenderer.
2026-04-22 14:57:55 +00:00
dependabot[bot]
d8cde94137
Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 ( #65905 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.17.1 to 5.18.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-20 16:53:59 +00:00
rosstimothy
7691ff5a1c
Remove dependency on github.com/buger/jsonparser ( #65830 )
...
The library has had a number of CVEs recently and uses shady
dependencies. https://github.com/gravitational/teleport.e/pull/8513
removed the dependency pulled in via teleport.e. This updates the
e_imports.go to reflect that change which moved buger/jsonparser to
an indirect dependency.
To remove the dependency entirely, mark3labs/mcp-go was updated to
the latest version. In that version they have replaced
github.com/invopop/jsonschema, which brough in buger/jsonparser,
with github.com/google/jsonschema-go. As a result buger/jsonparser
is no longer in our dependency tree.
2026-04-20 15:55:16 +00:00
dependabot[bot]
b95a677f3c
Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 ( #65860 )
...
Bumps [github.com/moby/spdystream](https://github.com/moby/spdystream ) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/moby/spdystream/releases )
- [Commits](https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1 )
---
updated-dependencies:
- dependency-name: github.com/moby/spdystream
dependency-version: 0.5.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-17 15:37:03 +00:00
Edoardo Spadolini
3da0f44c80
session-helper: embeddable binary and embedding logic ( #65784 )
...
* Clean up unneeded forwarder for reexec.IsReexec
* Disallow reexec through common.Run
* Remove the checkhomedir SSH subsystem
* Add true reexec subcommand
* Assume /proc/self/exe is always usable
* Add sessionhelper embed logic
2026-04-17 14:16:53 +00:00
STeve (Xin) Huang
83377abb85
pgx migration: engine & bump to pgx 5.9.1 ( #65620 )
...
* pgx migration: engine
* fix tests - finger-crossed
* bumpt to pgx 5.9.1
2026-04-15 21:14:53 +00:00
Edoardo Spadolini
2f1a3eafbf
Bump gravitational/trace to 1.5.3 ( #65787 )
2026-04-15 15:37:42 +00:00
dependabot[bot]
957dbda6d5
Bump github.com/sigstore/timestamp-authority/v2 from 2.0.4 to 2.0.6 ( #65732 )
...
Bumps [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority ) from 2.0.4 to 2.0.6.
- [Release notes](https://github.com/sigstore/timestamp-authority/releases )
- [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.6 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/timestamp-authority/v2
dependency-version: 2.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-14 21:30:08 +00:00
dependabot[bot]
1b8721196d
Bump helm.sh/helm/v3 from 3.19.1 to 3.20.2 ( #65666 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.19.1 to 3.20.2.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.19.1...v3.20.2 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.20.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-14 13:13:06 +00:00
Noah Stride
3942b2216c
Update docker/docker to moby/moby ( #65643 )
...
* Update docker dependency to moby v1.29
* go mod tidy all
* Update go.mod
* Fix up linting issues
* Fix cosign test broken due to ssrf protections in patched go-containerregistry
2026-04-13 16:20:47 +00:00
STeve (Xin) Huang
8f8ca00ce7
pgx migration: all places outside engine + test server ( #65596 )
...
* pgx migration: all places outside engine
* tidy
* fix ut ...
* add test server
2026-04-13 14:31:23 +00:00
Tiago Silva
4d68ca8df1
Migrate S3 upload/download to feature/s3/transfermanager ( #65565 )
...
Replace deprecated github.com/aws/aws-sdk-go-v2/feature/s3/manager
(Uploader/Downloader) with the new transfermanager package across all
call sites. The old manager types were superceded per
https://github.com/aws/aws-sdk-go-v2/discussions/3306 .
Signed-off-by: Tiago Silva <[email protected]
2026-04-12 09:04:43 +00:00
Adam Pickering
e9d876e826
Remove use of github.com/lib/pq as direct dependency ( #64584 )
2026-04-08 23:03:54 +00:00
dependabot[bot] and Tim Ross
339a72cc66
Bump go.opentelemetry.io/otel/* to 1.43.0 ( #65555 )
...
* Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.43.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-04-08 21:24:47 +00:00
dependabot[bot] and Tiago Silva
000401a672
Bump github.com/aws/aws-sdk-go-v2/* modules ( #65497 )
...
* Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.93.1 to 1.97.3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.93.1 to 1.97.3.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.93.1...service/s3/v1.97.3 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.97.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-04-08 20:54:04 +00:00
Chris Thach and github-actions[bot]
6169b27132
Update Go toolchain version to v1.25.9 ( #65526 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 15:44:52 +00:00
STeve (Xin) Huang
f0efebb651
pgx migration: use pgx v5 for postgres.MakeTestClient ( #65476 )
...
* pgx migration: use pgx v5 for postgres.MakeTestClient
* update go.mod
* add a ping to pgx pool
* format files
2026-04-08 12:37:06 +00:00
rosstimothy
5c45ae789e
Bump golang.org/x/net from v0.50.0 to v0.52.0 ( #65408 )
...
This resolves https://pkg.go.dev/vuln/GO-2026-4559 .
2026-04-06 20:25:17 +00:00
dependabot[bot]
e29fbe2536
Bump the go group in /api with 15 updates ( #65307 )
...
Bumps the go group in /api with 15 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go ) | `2.4.0` | `2.5.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.65.0` | `0.67.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.65.0` | `0.67.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go ) | `1.9.0` | `1.10.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto ) | `0.47.0` | `0.48.0` |
| [golang.org/x/net](https://github.com/golang/net ) | `0.49.0` | `0.51.0` |
| [golang.org/x/sync](https://github.com/golang/sync ) | `0.19.0` | `0.20.0` |
| [golang.org/x/term](https://github.com/golang/term ) | `0.39.0` | `0.40.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto ) | `0.0.0-20260128011058-8636f8732409` | `0.0.0-20260226221140-a57be14db171` |
Updates `github.com/go-piv/piv-go/v2` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/go-piv/piv-go/releases )
- [Commits](https://github.com/go-piv/piv-go/compare/v2.4.0...v2.5.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.65.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.67.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.65.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.67.0 )
Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/proto/otlp` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases )
- [Commits](https://github.com/open-telemetry/opentelemetry-proto-go/compare/v1.9.0...v1.10.0 )
Updates `golang.org/x/crypto` from 0.47.0 to 0.48.0
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.48.0 )
Updates `golang.org/x/net` from 0.49.0 to 0.51.0
- [Commits](https://github.com/golang/net/compare/v0.49.0...v0.51.0 )
Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](https://github.com/golang/sync/compare/v0.19.0...v0.20.0 )
Updates `golang.org/x/term` from 0.39.0 to 0.40.0
- [Commits](https://github.com/golang/term/compare/v0.39.0...v0.40.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260128011058-8636f8732409 to 0.0.0-20260226221140-a57be14db171
- [Commits](https://github.com/googleapis/go-genproto/commits )
---
updated-dependencies:
- dependency-name: github.com/go-piv/piv-go/v2
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
dependency-version: 0.67.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.67.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/proto/otlp
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/crypto
dependency-version: 0.48.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/net
dependency-version: 0.51.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/sync
dependency-version: 0.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/term
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-version: 0.0.0-20260226221140-a57be14db171
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-06 14:52:23 +00:00
dependabot[bot]
9d3165ecf0
Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 ( #65375 )
...
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.4...v3.0.5 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
dependency-version: 3.0.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-06 14:46:10 +00:00
dependabot[bot] and Tim Ross
9e5e6b2e6b
Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 ( #65371 )
...
* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-version: 4.1.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-04-06 13:36:24 +00:00
dependabot[bot] and Alan Parra
217f16823f
Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 ( #65184 )
...
* Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.16.5 to 5.17.1.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.16.5...v5.17.1 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.17.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-03-30 17:53:09 +00:00
dependabot[bot] and Alan Parra
27b02914e2
Bump golang.org/x/image from 0.33.0 to 0.38.0 ( #65182 )
...
* Bump golang.org/x/image from 0.33.0 to 0.38.0
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.33.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.33.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-03-30 17:17:56 +00:00
dependabot[bot] and Tiago Silva
da8bddca48
Bump github.com/russellhaering/gosaml2 from 0.10.0 to 0.11.0 ( #64801 )
...
* Bump github.com/russellhaering/gosaml2 from 0.10.0 to 0.11.0
Bumps [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2 ) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/russellhaering/gosaml2/releases )
- [Commits](https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0 )
---
updated-dependencies:
- dependency-name: github.com/russellhaering/gosaml2
dependency-version: 0.11.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-03-26 13:20:03 +00:00
rosstimothy
ceda3ad980
Bump github.com/buger/jsonparser to v1.1.2 ( #64915 )
...
This resolves GHSA-6g7g-w4f8-9c9x.
2026-03-25 15:16:43 +00:00
Pavel
ce2478a059
Support diag checks on Linux ( #64867 )
...
* support diag checks on linux
* add support for tsh vnet --diag
* remove isDiagSupported
* update go.mod for rtnetlink dependency
* skip routes with no output interface
2026-03-23 16:26:38 +00:00
dependabot[bot] and Tiago Silva
2bb262fd73
Bump google.golang.org/grpc from 1.78.0 to 1.79.3 ( #64811 )
...
* Bump google.golang.org/grpc from 1.78.0 to 1.79.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-03-19 13:01:57 +00:00
Chris Thach