teleport

accesslists

chore: Bump golangci-lint to v2.10.1 (#63939 )

2026-02-19 13:04:57 +00:00

accessmonitoring

Access Requests: Add Resource-Scoped Constraints (#60123 )

2026-01-27 14:51:52 +00:00

agentless

Rename NewSoftwarePrivateKey to NewPrivateKey (#53598 )

2025-04-09 23:34:15 +00:00

asciitable

tsh request search, add support for --format flag (#62015 )

2025-12-09 14:49:29 +00:00

auditd

Convert more lib packages to slog. (#47787 )

2024-10-24 11:22:36 +00:00

auth

fix: instance rejoin against legacy join server (#64599 )

2026-03-13 16:54:53 +00:00

authz

Prevent panic in impersonation code path where user no longer exists (#63332 )

2026-01-31 02:30:06 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066 )

2025-12-09 17:59:21 +00:00

autoupdate

chore: Bump golangci-lint to v2.10.1 (#63939 )

2026-02-19 13:04:57 +00:00

aws

Add "tsh aws-profile" cmd to Generate AWS Profiles from AWS Identity Center Integration (#63032 )

2026-03-05 18:12:06 +00:00

backend

[dynamodb] fix incorrect error conversion for ItemCollectionLimitExceeded (#64314 )

2026-03-05 19:45:13 +00:00

benchmark

Apply remaining modernize changes. (#56037 )

2025-06-25 21:25:29 +00:00

boundkeypair

MWI: Default to creating bound keypair tokens for bots in tctl (#63422 )

2026-02-09 23:32:04 +00:00

bpf

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050 )

2026-02-19 18:20:18 +00:00

cache

Forbid semver.New in the forbidigo linter (#64307 )

2026-03-11 08:39:00 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050 )

2026-02-19 18:20:18 +00:00

client

Add scope aware profiles after tsh login (#64233 )

2026-03-12 19:20:53 +00:00

cloud

Disable http_proxy for IMDS/metadata services (#64158 )

2026-03-12 10:29:08 +00:00

componentfeatures

Access Requests: Add Resource-Scoped Constraints (#60123 )

2026-01-27 14:51:52 +00:00

config

Clean up unused symbols (#64445 )

2026-03-09 22:07:12 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967 )

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

cryptosuites

Create the WindowsCA on cluster startup (#62877 )

2026-01-16 18:18:14 +00:00

darwin

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

decision

rework scoped rbac for single-role eval model (#63219 )

2026-03-06 18:46:42 +00:00

defaults

Disable http_proxy for IMDS/metadata services (#64158 )

2026-03-12 10:29:08 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674 )

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294 )

2025-11-12 20:37:19 +00:00

devicetrust

Use the DeviceCollectedData.os_login_user field (#63389 )

2026-02-03 14:19:37 +00:00

events

Add Sub CA event codes (#64452 )

2026-03-13 16:50:09 +00:00

expression

implement filtering and sorting (#61089 )

2025-12-05 01:09:03 +00:00

fixtures

Reduce testing symbols in production binaries (#55360 )

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205 )

2025-11-18 00:46:04 +00:00

hardwarekey

Remove (auth.Server) SetClock (#60526 )

2025-10-29 15:19:44 +00:00

healthcheck

Refactor lib/srv/db/endpoints package (#61752 )

2025-11-25 18:02:24 +00:00

httplib

Remove unused argument from httplib.SetIndexContentSecurityPolicy (#63331 )

2026-01-30 17:48:09 +00:00

integrations

Inject insecure mode instead of relying on global variable (#63825 )

2026-03-05 16:31:10 +00:00

inventory

[ci] add differential benchmark workflows (#63100 )

2026-02-20 15:31:03 +00:00

itertools

Add DynamicBatchSizeIter util (#61157 )

2025-11-12 09:15:01 +00:00

join

Refactor bound keypair join client interface (#64235 )

2026-03-13 00:53:56 +00:00

jwt

Add support to sign MCP egress JWT with OIDC CA (#62043 )

2026-01-02 15:16:23 +00:00

kube

kube: validate impersonation principals against RFC 2616 (#64488 )

2026-03-12 16:29:30 +00:00

labels

Introduce logtest package (#56741 )

2025-07-15 18:11:10 +00:00

limiter

chore: add in-process bufconn transport for authtest.TLSServer (#63942 )

2026-02-21 00:08:35 +00:00

linux

Apply remaining modernize changes. (#56037 )

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598 )

2025-08-05 18:41:26 +00:00

loginuid

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050 )

2026-02-19 18:20:18 +00:00

loglimit

Fix bug in the log limiter (#63568 )

2026-02-06 14:35:13 +00:00

modules

Add access graph entitlement (#64340 )

2026-03-12 21:25:12 +00:00

msgraph

lib msgraph IterateGroupOwners (#62773 )

2026-01-16 16:07:52 +00:00

multiplexer

Lint to enforce using t.Context() instead of context.TODO() 👮🏾 (#63596 )

2026-02-06 19:42:33 +00:00

observability

chore: Bump opentelemetry to v1.40.0 (#64014 )

2026-02-20 18:45:30 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014 )

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420 )

2025-06-10 11:09:04 +00:00

openssh

Fix bug when checking validity of OpenSSH configs (#63567 )

2026-02-06 12:57:25 +00:00

pam

Introduce logtest package (#56741 )

2025-07-15 18:11:10 +00:00

player

chore: Bump Go to 1.25.1 (#58875 )

2025-09-15 21:49:53 +00:00

plugin

Add Okta plugin setting for time between imports (#59594 )

2025-10-13 09:42:28 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187 )

2025-12-19 06:27:17 +00:00

proxy

Fix a resource leak in the proxy-node connection (#64337 )

2026-03-06 17:07:42 +00:00

puttyhosts

Fix outdated docs URLs (#50923 )

2025-01-16 18:17:35 +00:00

relaypeer

Relay SSH routing logic and transport server (#58855 )

2025-09-25 15:18:03 +00:00

relaytransport

Kubernetes forwarding in the Relay Service (#60974 )

2025-11-14 22:25:00 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974 )

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423 )

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311 )

2024-12-17 13:30:33 +00:00

resumption

Apply remaining modernize changes. (#56037 )

2025-06-25 21:25:29 +00:00

reversetunnel

fix: set listener before starting node heartbeats in Serve (#64326 )

2026-03-05 20:33:57 +00:00

reversetunnelclient

Database authorization resource consumption enhancements (#63878 )

2026-03-05 00:35:22 +00:00

saml

support saml http-post binding request (#54605 )

2025-05-22 16:26:21 +00:00

scopes

scope pin pruning (#63944 )

2026-03-12 20:39:37 +00:00

secret

Fix log messages and tsh command description (#61037 )

2025-11-05 15:31:30 +00:00

secretsscanner

Avoid race conditions in getHostUsers (#61218 )

2025-11-11 23:29:35 +00:00

selinux

[teleport-update] Fix SELinux warning and error breaking teleport-update remove (#59977 )

2025-10-06 22:35:19 +00:00

service

fix: instance rejoin against legacy join server (#64599 )

2026-03-13 16:54:53 +00:00

services

Add event stream support for SAML connector (#64564 )

2026-03-13 17:16:45 +00:00

session

Improve error message for terminal size unmarshalling (#62775 )

2026-01-13 11:35:05 +00:00

shell

fix: use Go 1.18+ build tag syntax (#53746 )

2025-04-07 12:35:51 +00:00

srv

MWI: Add certificate expiry check leeway for tbot (#64293 )

2026-03-13 00:47:15 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292 )

2025-09-18 19:43:20 +00:00

sshca

rework scoped rbac for single-role eval model (#63219 )

2026-03-06 18:46:42 +00:00

sshutils

fix: set listener before starting node heartbeats in Serve (#64326 )

2026-03-05 20:33:57 +00:00

subca

Refactor subca validation to lib/subca (#64563 )

2026-03-13 16:45:22 +00:00

system

Convert lib/system to use slog (#50300 )

2024-12-17 13:27:21 +00:00

tbot

Refactor bound keypair join client interface (#64235 )

2026-03-13 00:53:56 +00:00

teleterm

Connect: support MOTD (#64310 )

2026-03-12 09:27:35 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266 )

2025-10-15 15:21:54 +00:00

tfgen

Allow IAM Joins to use an Organization ID with integration creds (#62395 )

2026-01-05 13:40:16 +00:00

tlsca

rework scoped rbac for single-role eval model (#63219 )

2026-03-06 18:46:42 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113 )

2026-03-02 16:29:45 +00:00

tpm

TPM method support in new join service (#61075 )

2025-11-19 21:46:19 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739 )

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086 )

2024-10-30 09:54:28 +00:00

usagereporter

add summaries_generated count to SessionSummariesGeneratedRecord (#64278 )

2026-03-04 21:27:47 +00:00

usertasks

EC2 auto-discovery: add IAM permission issue types and descriptions (#63909 )

2026-02-19 18:39:34 +00:00

utils

MWI: Add certificate expiry check leeway for tbot (#64293 )

2026-03-13 00:47:15 +00:00

versioncontrol

core scope pinning logic (#58377 )

2025-10-01 20:30:50 +00:00

vnet

Connect: install updates via privileged service, add signature verification (#63573 )

2026-03-06 13:52:51 +00:00

watcher

Adjust log level on some noisy entries (#61076 )

2025-11-06 21:03:31 +00:00

web

Add access graph entitlement (#64340 )

2026-03-12 21:25:12 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307 )

2024-12-17 04:47:52 +00:00

windowsservice

Connect: install updates via privileged service, add signature verification (#63573 )

2026-03-06 13:52:51 +00:00

winpki

Fix WindowsCA fallback scenarios in agents and tctl (#63542 )

2026-02-05 21:21:15 +00:00