teleport

accessgraph/apiclient

Add OpenAPI-generated access graph REST client for tctl (#65949 )

2026-05-11 22:50:05 +00:00

accesslists

refactor: return sentinel ErrDeniedAccessListDeletion for acl deletion error (#66692 )

2026-05-13 15:42:23 +00:00

accessmonitoring

Revise predicate language docs and add contains(set, item) (#64864 )

2026-04-01 19:11:15 +00:00

agentless

Add scope support to OpenSSH nodes (#64819 )

2026-05-19 18:41:29 +00:00

asciitable

tsh request search, add support for --format flag (#62015 )

2025-12-09 14:49:29 +00:00

auth

Add an optional unstable rate limit for ResolveSSHTarget (#66952 )

2026-05-22 23:03:52 +00:00

authz

Add disconnect expired cert and lock mode for scoped role (#66376 )

2026-05-14 21:51:48 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066 )

2025-12-09 17:59:21 +00:00

autoupdate

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346 )

2026-05-02 10:58:23 +00:00

aws

Write AWS config files with stricter permissions (#66825 )

2026-05-21 00:14:03 +00:00

backend

Fix sqlite backend KeepAlive revision mismatch (#66930 )

2026-05-21 13:52:38 +00:00

benchmark

pgx migration: all places outside engine + test server (#65596 )

2026-04-13 14:31:23 +00:00

boundkeypair

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366 )

2026-04-16 02:06:24 +00:00

bpf

Fix unreadable Enhanced Session Recording events (#64581 )

2026-05-04 12:25:25 +00:00

cache

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050 )

2026-02-19 18:20:18 +00:00

client

Add leaf cluster to MFA prompt and fix resource casing; Improve look of MFA modal in Connect (#66714 )

2026-05-14 07:27:11 +00:00

cloud

Add support for enrolling uniform Azure VM Scale Sets (#66631 )

2026-05-20 16:08:33 +00:00

componentfeatures

[Web] Account for interim private releases in appServerEffectiveFeatures (#66911 )

2026-05-21 19:32:26 +00:00

config

app: Consolidate app name and public_addr validation (#65728 )

2026-05-20 05:04:19 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967 )

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

cryptosuites

Add AppClient CA (#66273 )

2026-04-30 19:05:23 +00:00

darwin

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

decision

Fix headless login when in-band MFA is required (#66168 )

2026-05-08 17:25:55 +00:00

defaults

[refactoring] remove some deadcode (#66583 )

2026-05-11 13:36:46 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674 )

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294 )

2025-11-12 20:37:19 +00:00

devicetrust

Use the DeviceCollectedData.os_login_user field (#63389 )

2026-02-03 14:19:37 +00:00

events

Add web ui audit event for AccessGraphSettingsUpdateCode (#66530 )

2026-05-08 09:30:47 +00:00

expression

Revise predicate language docs and add contains(set, item) (#64864 )

2026-04-01 19:11:15 +00:00

fipscheck

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690 )

2026-05-20 00:42:41 +00:00

fixtures

Reduce testing symbols in production binaries (#55360 )

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205 )

2025-11-18 00:46:04 +00:00

hardwarekey

lib/tbot: Add identity/key-agent service (#66535 )

2026-05-13 10:04:29 +00:00

healthcheck

Support username in role templates and expressions (#64888 )

2026-04-15 16:29:41 +00:00

httplib

[refactoring] remove some deadcode (#66583 )

2026-05-11 13:36:46 +00:00

integrations

app: Consolidate app name and public_addr validation (#65728 )

2026-05-20 05:04:19 +00:00

inventory

app: Consolidate app name and public_addr validation (#65728 )

2026-05-20 05:04:19 +00:00

itertools

Add DynamicBatchSizeIter util (#61157 )

2025-11-12 09:15:01 +00:00

join

Fetching full intermediate chain during azure joins (#66727 )

2026-05-14 19:15:27 +00:00

jwt

Add Device Bound Session Credentials to App Access (#65431 )

2026-04-28 22:35:47 +00:00

kube

Extend kube mock server with a generic resource store (#66902 )

2026-05-22 14:21:44 +00:00

labels

Introduce logtest package (#56741 )

2025-07-15 18:11:10 +00:00

limiter

limiter: Short-circuit when no rates or connections are configured (#63751 )

2026-04-01 06:05:53 +00:00

linux

Apply remaining modernize changes. (#56037 )

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598 )

2025-08-05 18:41:26 +00:00

loglimit

Fix bug in the log limiter (#63568 )

2026-02-06 14:35:13 +00:00

modules

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690 )

2026-05-20 00:42:41 +00:00

msgraph

add delta api and throttling error codes to /lib/msgraph (#66684 )

2026-05-20 19:35:38 +00:00

multiplexer

pgx migration: all places outside engine + test server (#65596 )

2026-04-13 14:31:23 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919 )

2026-03-24 14:17:20 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014 )

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420 )

2025-06-10 11:09:04 +00:00

openssh

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

player

chore: Bump Go to 1.25.1 (#58875 )

2025-09-15 21:49:53 +00:00

plugin

Initialize usage reporting via plugin registry after auth server setup (#64265 )

2026-03-26 11:46:12 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187 )

2025-12-19 06:27:17 +00:00

proxy

Add scope support to OpenSSH nodes (#64819 )

2026-05-19 18:41:29 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

relaypeer

Relay SSH routing logic and transport server (#58855 )

2025-09-25 15:18:03 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974 )

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423 )

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311 )

2024-12-17 13:30:33 +00:00

resumption

Set Teleport version in SSH clients (#65004 )

2026-04-07 18:06:00 +00:00

reversetunnel

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

reversetunnelclient

Add scope support to OpenSSH nodes (#64819 )

2026-05-19 18:41:29 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

scopes

Add scope support to OpenSSH nodes (#64819 )

2026-05-19 18:41:29 +00:00

secret

Fix log messages and tsh command description (#61037 )

2025-11-05 15:31:30 +00:00

secretsscanner

Extract gRPC bidi proxy to separate package and fix edge cases (#66143 )

2026-05-11 10:38:30 +00:00

service

Add an optional unstable rate limit for ResolveSSHTarget (#66952 )

2026-05-22 23:03:52 +00:00

services

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

session

Improve error message for terminal size unmarshalling (#62775 )

2026-01-13 11:35:05 +00:00

srv

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292 )

2025-09-18 19:43:20 +00:00

sshca

Always populate AllowedResourceIDs on decoded Identity (#66870 )

2026-05-21 18:13:15 +00:00

sshutils

Capture reexec networking stderr for logging (#65202 )

2026-04-29 20:04:39 +00:00

subca

Calculate CA overrides on GenerateDatabaseCert (#66770 )

2026-05-20 14:21:22 +00:00

system

Convert lib/system to use slog (#50300 )

2024-12-17 13:27:21 +00:00

systemd

Add join failure handling for ec2 using readyz health check (#64296 )

2026-04-20 14:59:21 +00:00

tbot

Add tsh workload-identity issue-jwt (#66963 )

2026-05-22 09:30:58 +00:00

teleterm

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266 )

2025-10-15 15:21:54 +00:00

tfgen

tfgen: add hash to sanitized resource name (#66227 )

2026-04-30 15:46:30 +00:00

tlsca

Always populate AllowedResourceIDs on decoded Identity (#66870 )

2026-05-21 18:13:15 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113 )

2026-03-02 16:29:45 +00:00

tpm

Fix ./lib/tpm tests using -tags=tpmsimulator (#65807 )

2026-04-16 15:07:00 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739 )

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086 )

2024-10-30 09:54:28 +00:00

usagereporter

fix: Use pointer types for generated protobuf messages (#66777 )

2026-05-20 18:28:42 +00:00

usertasks

Add support for enrolling uniform Azure VM Scale Sets (#66631 )

2026-05-20 16:08:33 +00:00

utils

app: Consolidate app name and public_addr validation (#65728 )

2026-05-20 05:04:19 +00:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

vnet

chore: gate db vnet access only to beams (#66814 )

2026-05-21 13:58:30 +00:00

watcher

Adjust log level on some noisy entries (#61076 )

2025-11-06 21:03:31 +00:00

web

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307 )

2024-12-17 04:47:52 +00:00

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438 )

2026-03-19 07:45:58 +00:00

winpki

Calculate CA overrides on GenerateDatabaseCert (#66770 )

2026-05-20 14:21:22 +00:00