teleport

accessgraph/apiclient

Add OpenAPI-generated access graph REST client for tctl (#65949 )

2026-05-11 22:50:05 +00:00

accesslists

refactor: return sentinel ErrDeniedAccessListDeletion for acl deletion error (#66692 )

2026-05-13 15:42:23 +00:00

accessmonitoring

Revise predicate language docs and add contains(set, item) (#64864 )

2026-04-01 19:11:15 +00:00

agentless

Rename NewSoftwarePrivateKey to NewPrivateKey (#53598 )

2025-04-09 23:34:15 +00:00

asciitable

tsh request search, add support for --format flag (#62015 )

2025-12-09 14:49:29 +00:00

auth

Apply overrides to Windows certificates (#66411 )

2026-05-11 17:03:50 +00:00

authz

[refactoring] remove some deadcode (#66583 )

2026-05-11 13:36:46 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066 )

2025-12-09 17:59:21 +00:00

autoupdate

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346 )

2026-05-02 10:58:23 +00:00

aws

Add "tsh aws-profile" cmd to Generate AWS Profiles from AWS Identity Center Integration (#63032 )

2026-03-05 18:12:06 +00:00

backend

Add DeleteBatch scaffolding and tests (#66258 )

2026-05-04 11:39:25 +00:00

benchmark

pgx migration: all places outside engine + test server (#65596 )

2026-04-13 14:31:23 +00:00

boundkeypair

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366 )

2026-04-16 02:06:24 +00:00

bpf

Fix unreadable Enhanced Session Recording events (#64581 )

2026-05-04 12:25:25 +00:00

cache

cache: fix pagination test harness leaving cache in an unhealthy state (#66719 )

2026-05-13 20:13:57 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050 )

2026-02-19 18:20:18 +00:00

client

dbcmd: Default to sqlcmd for sqlserver (#66702 )

2026-05-13 15:02:41 +00:00

cloud

Stop loading host AWS config in mock provider (#66606 )

2026-05-11 15:21:18 +00:00

componentfeatures

[Access Requests] Support SSH node resource constraints (#64403 )

2026-04-01 21:31:16 +00:00

config

Add TLS options to app spec (#65995 )

2026-05-05 15:50:04 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967 )

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

cryptosuites

Add AppClient CA (#66273 )

2026-04-30 19:05:23 +00:00

darwin

Updated Teleport codebase to AGPL3 license (#35259 )

2023-12-01 17:48:14 +00:00

decision

Fix headless login when in-band MFA is required (#66168 )

2026-05-08 17:25:55 +00:00

defaults

[refactoring] remove some deadcode (#66583 )

2026-05-11 13:36:46 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674 )

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294 )

2025-11-12 20:37:19 +00:00

devicetrust

Use the DeviceCollectedData.os_login_user field (#63389 )

2026-02-03 14:19:37 +00:00

events

Add web ui audit event for AccessGraphSettingsUpdateCode (#66530 )

2026-05-08 09:30:47 +00:00

expression

Revise predicate language docs and add contains(set, item) (#64864 )

2026-04-01 19:11:15 +00:00

fixtures

Reduce testing symbols in production binaries (#55360 )

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205 )

2025-11-18 00:46:04 +00:00

hardwarekey

lib/tbot: Add identity/key-agent service (#66535 )

2026-05-13 10:04:29 +00:00

healthcheck

Support username in role templates and expressions (#64888 )

2026-04-15 16:29:41 +00:00

httplib

[refactoring] remove some deadcode (#66583 )

2026-05-11 13:36:46 +00:00

integrations

kube: consolidate duplicate EKS token generation (#65854 )

2026-05-13 21:05:41 +00:00

inventory

Fixing scope propagation and heartbeat enforcement for kube service (#65894 )

2026-04-24 00:36:08 +00:00

itertools

Add DynamicBatchSizeIter util (#61157 )

2025-11-12 09:15:01 +00:00

join

Wildcard support for kubernetes join method (#66520 )

2026-05-13 08:47:24 +00:00

jwt

Add Device Bound Session Credentials to App Access (#65431 )

2026-04-28 22:35:47 +00:00

kube

kube: consolidate duplicate EKS token generation (#65854 )

2026-05-13 21:05:41 +00:00

labels

Introduce logtest package (#56741 )

2025-07-15 18:11:10 +00:00

limiter

limiter: Short-circuit when no rates or connections are configured (#63751 )

2026-04-01 06:05:53 +00:00

linux

Apply remaining modernize changes. (#56037 )

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598 )

2025-08-05 18:41:26 +00:00

loglimit

Fix bug in the log limiter (#63568 )

2026-02-06 14:35:13 +00:00

modules

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346 )

2026-05-02 10:58:23 +00:00

msgraph

feat: msgraph user and group delta iterators (#66283 )

2026-05-13 20:39:56 +00:00

multiplexer

pgx migration: all places outside engine + test server (#65596 )

2026-04-13 14:31:23 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919 )

2026-03-24 14:17:20 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014 )

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420 )

2025-06-10 11:09:04 +00:00

openssh

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

player

chore: Bump Go to 1.25.1 (#58875 )

2025-09-15 21:49:53 +00:00

plugin

Initialize usage reporting via plugin registry after auth server setup (#64265 )

2026-03-26 11:46:12 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187 )

2025-12-19 06:27:17 +00:00

proxy

rework scoped comparison helpers (#63359 )

2026-03-18 21:23:25 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

relaypeer

Relay SSH routing logic and transport server (#58855 )

2025-09-25 15:18:03 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974 )

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423 )

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311 )

2024-12-17 13:30:33 +00:00

resumption

Set Teleport version in SSH clients (#65004 )

2026-04-07 18:06:00 +00:00

reversetunnel

[reversetunnel] respect KeepAliveCountMax in agent pool (#66513 )

2026-05-07 12:33:09 +00:00

reversetunnelclient

Set Teleport version in SSH clients (#65004 )

2026-04-07 18:06:00 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

scopes

Wildcard support for kubernetes join method (#66520 )

2026-05-13 08:47:24 +00:00

secret

Fix log messages and tsh command description (#61037 )

2025-11-05 15:31:30 +00:00

secretsscanner

Extract gRPC bidi proxy to separate package and fix edge cases (#66143 )

2026-05-11 10:38:30 +00:00

service

app: Fix stale comment in initApps (#66610 )

2026-05-10 23:42:41 +00:00

services

refactor: return sentinel ErrDeniedAccessListDeletion for acl deletion error (#66692 )

2026-05-13 15:42:23 +00:00

session

Improve error message for terminal size unmarshalling (#62775 )

2026-01-13 11:35:05 +00:00

srv

kube: consolidate duplicate EKS token generation (#65854 )

2026-05-13 21:05:41 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292 )

2025-09-18 19:43:20 +00:00

sshca

Fix headless login when in-band MFA is required (#66168 )

2026-05-08 17:25:55 +00:00

sshutils

Capture reexec networking stderr for logging (#65202 )

2026-04-29 20:04:39 +00:00

subca

Apply overrides to Windows certificates (#66411 )

2026-05-11 17:03:50 +00:00

system

Convert lib/system to use slog (#50300 )

2024-12-17 13:27:21 +00:00

systemd

Add join failure handling for ec2 using readyz health check (#64296 )

2026-04-20 14:59:21 +00:00

tbot

lib/tbot: Add identity/key-agent service (#66535 )

2026-05-13 10:04:29 +00:00

teleterm

Restore TDP/TDPB Field Limits (#66223 )

2026-05-11 18:49:59 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266 )

2025-10-15 15:21:54 +00:00

tfgen

tfgen: add hash to sanitized resource name (#66227 )

2026-04-30 15:46:30 +00:00

tlsca

[Access Requests] Fix sentinel in legacy cert extension replacing actual resource IDs (#66556 )

2026-05-08 16:53:04 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113 )

2026-03-02 16:29:45 +00:00

tpm

Fix ./lib/tpm tests using -tags=tpmsimulator (#65807 )

2026-04-16 15:07:00 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739 )

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086 )

2024-10-30 09:54:28 +00:00

usagereporter

initial draft (#64972 )

2026-04-22 23:40:37 +00:00

usertasks

[web] add azure discovery rules, user tasks to integrations api (#65385 )

2026-04-21 20:30:58 +00:00

utils

app: Raise upstream response-header cap to 1h (#66647 )

2026-05-12 23:22:29 +00:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

vnet

feat: added db vnet access to be embedded in tbot (#66503 )

2026-05-08 16:15:08 +00:00

watcher

Adjust log level on some noisy entries (#61076 )

2025-11-06 21:03:31 +00:00

web

Set global websocket read deadline once to avoid test flakes. (#65358 )

2026-05-12 18:27:10 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307 )

2024-12-17 04:47:52 +00:00

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438 )

2026-03-19 07:45:58 +00:00

winpki

Apply overrides to Windows certificates (#66411 )

2026-05-11 17:03:50 +00:00