8fcede3c3e
Temporarily disable DBSC ( #68357 )
2026-07-03 01:02:54 +00:00
e976b750af
teleport-discovery skill combined azure and aws version ( #68029 )
2026-07-02 23:16:05 +00:00
32bbec3c73
iOS: Revise EnrollDeviceView ( #68225 )
...
* Rename LandingViewModel's deviceEnrollment destination to enrollDevice
This naming matches the destination view's name
* Add EnrollDeviceView preview
* Add Icon.swift
* Add a PrimaryButtonStyle that looks correct in both light and dark mode
* Update LandingView to use the new Icon type
* Restructure EnrollDeviceView to support large dynamic type sizes
* Refactor EnrollDeviceView for overall structure/readability
* Rename EnrollDeviceViewModel.attempt -> loadingState
* Commit Verify.xcscheme (which for some reason wasn't already present)
* Incorporate Dependencies into EnrollDeviceViewModel
2026-07-02 20:24:35 +00:00
52fbf7296d
Discovery - Separate EKS fetch from access management ( #67563 )
...
* Separate EKS fetch from access provisioning.
Fix access status overwrite
Fix dangling access policy association
* Use cluster region to ensure sts call is from the correct partition.
* Remove DisassociateAccessPolicy patch.
2026-07-02 17:34:16 +00:00
1638d179d5
reversetunnel: fix smoothed round trip time test flakiness ( #67928 )
...
* reversetunnel: fix flakey agent srtt test
In order to ensure we don't advance the clock until after the srtt
measurement is taken we must not reset the timer until after the
measurement is taken.
This ensures BlockUntilContext does not return until after the
measurement is taken.
* refactor srtt calculation into separate func for testing
* add comment on srtt calculation
* make srtt calculation more readable
* bump keepAlive interval to avoid 0 srtt
* add back 0 check in srtt calculation
2026-07-02 17:30:29 +00:00
944ddac746
Bump @typescript/native-preview from 7.0.0-dev.20260527.1 to 7.0.0-dev.20260629.1 ( #68296 )
...
* Bump @typescript/native-preview
Bumps [@typescript/native-preview](https://github.com/microsoft/typescript-go ) from 7.0.0-dev.20260527.1 to 7.0.0-dev.20260629.1.
- [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md )
- [Commits](https://github.com/microsoft/typescript-go/commits )
---
updated-dependencies:
- dependency-name: "@typescript/native-preview"
dependency-version: 7.0.0-dev.20260629.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* Revert unnecessary updates
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Grzegorz Zdunek <grzegorz.zdunek@goteleport.com >
Co-authored-by: Maja Cieślak <maja.cieslak@goteleport.com >
2026-07-02 15:46:30 +00:00
f08b36fbac
iOS: QR Code Scanner ( #68181 )
...
* Add initial implementation of QRScannerView
* Wire up QRScannerView to navigate to device enrollment
* Consolidate validateScan and onScan API calls
* Add handling for various camera permission states
2026-07-02 15:43:12 +00:00
fed6d6ddbc
Make helm linting support helm4 ( #68315 )
2026-07-02 15:15:58 +00:00
62adf315b5
Add initial protos for public Device Trust service ( #68254 )
...
* Add initial protos for public Device Trust service
* Store a subset of `DeviceCollectedData` on `EnrollPairing`
* Regenerate protos
* Fix typo
2026-07-02 14:09:42 +00:00
8a8916d436
Remove unused CertAuthorityOverride event codes ( #68319 )
2026-07-02 13:35:07 +00:00
6619a58699
Atempt to reduce flakiness of TestMigrationCheckpoint ( #68218 )
...
The test was made more deterministic by using a single worker, removing
a shared context with a 10 second timeout for all subtests, using a
unique and per-subtest directory to avoid file collisions, simplifying
checkpoint assertions.
2026-07-02 12:59:50 +00:00
db894153cc
Supress IronRDP's decode tracing logs ( #68324 )
2026-07-02 12:58:04 +00:00
756a2f1d6d
Bump the rust group with 7 updates ( #68289 )
...
Bumps the rust group with 7 updates:
| Package | From | To |
| --- | --- | --- |
| [bitflags](https://github.com/bitflags/bitflags ) | `2.12.1` | `2.13.0` |
| [bytes](https://github.com/tokio-rs/bytes ) | `1.11.1` | `1.12.0` |
| [env_logger](https://github.com/rust-cli/env_logger ) | `0.11.10` | `0.11.11` |
| [log](https://github.com/rust-lang/log ) | `0.4.31` | `0.4.33` |
| [uuid](https://github.com/uuid-rs/uuid ) | `1.20.0` | `1.23.4` |
| [rustls](https://github.com/rustls/rustls ) | `0.23.40` | `0.23.41` |
| [cbindgen](https://github.com/mozilla/cbindgen ) | `0.29.3` | `0.29.4` |
Updates `bitflags` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/bitflags/bitflags/releases )
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md )
- [Commits](https://github.com/bitflags/bitflags/compare/2.12.1...2.13.0 )
Updates `bytes` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/tokio-rs/bytes/releases )
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/bytes/compare/v1.11.1...v1.12.0 )
Updates `env_logger` from 0.11.10 to 0.11.11
- [Release notes](https://github.com/rust-cli/env_logger/releases )
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rust-cli/env_logger/compare/v0.11.10...v0.11.11 )
Updates `log` from 0.4.31 to 0.4.33
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.31...0.4.33 )
Updates `uuid` from 1.20.0 to 1.23.4
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.20.0...v1.23.4 )
Updates `rustls` from 0.23.40 to 0.23.41
- [Release notes](https://github.com/rustls/rustls/releases )
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rustls/rustls/compare/v/0.23.40...v/0.23.41 )
Updates `cbindgen` from 0.29.3 to 0.29.4
- [Release notes](https://github.com/mozilla/cbindgen/releases )
- [Changelog](https://github.com/mozilla/cbindgen/blob/main/CHANGES )
- [Commits](https://github.com/mozilla/cbindgen/compare/0.29.3...0.29.4 )
---
updated-dependencies:
- dependency-name: bitflags
dependency-version: 2.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rust
- dependency-name: bytes
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rust
- dependency-name: env_logger
dependency-version: 0.11.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: rust
- dependency-name: log
dependency-version: 0.4.33
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: rust
- dependency-name: uuid
dependency-version: 1.23.4
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rust
- dependency-name: rustls
dependency-version: 0.23.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: rust
- dependency-name: cbindgen
dependency-version: 0.29.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: rust
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 12:44:28 +00:00
227987e6d9
Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 ( #68125 )
...
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor ) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/sigstore/rekor/releases )
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sigstore/rekor/compare/v1.5.0...v1.5.2 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
dependency-version: 1.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 12:18:43 +00:00
fb14940980
Fix bash autocomplete output ( #66821 )
2026-07-02 12:07:06 +00:00
3a321a1b55
Fix dynamodbbk's interactions with item expiry ( #68038 )
...
* Fix CRUD expiry behavior in dynamodbbk
* Fix AtomicWrite expiry behavior in dynamodbbk
* DynamoDB relies on server-side TTL expiry so it can't use a fake clock
* fixup! Fix CRUD expiry behavior in dynamodbbk
* Allow Delete to delete expired items
* Remove some unnecessary whitespace
* Take the time before the backend call in Get and Delete
2026-07-02 10:13:17 +00:00
9b3be35067
Bump the ui group with 25 updates ( #68290 )
...
* Bump the ui group with 25 updates
Bumps the ui group with 25 updates:
| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete ) | `6.20.2` | `6.20.3` |
| [@codemirror/view](https://github.com/codemirror/view ) | `6.43.0` | `6.43.4` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.100.14` | `5.101.2` |
| [date-fns](https://github.com/date-fns/date-fns ) | `4.3.0` | `4.4.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react ) | `19.2.6` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ) | `19.2.15` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom ) | `19.2.6` | `19.2.7` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form ) | `7.76.1` | `7.80.0` |
| [react-is](https://github.com/facebook/react/tree/HEAD/packages/react-is ) | `19.2.6` | `19.2.7` |
| [styled-components](https://github.com/styled-components/styled-components ) | `6.4.2` | `6.4.3` |
| [@storybook/addon-vitest](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/vitest ) | `10.4.1` | `10.4.6` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite ) | `10.4.1` | `10.4.6` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell ) | `10.0.0` | `10.0.1` |
| [eslint](https://github.com/eslint/eslint ) | `10.4.1` | `10.6.0` |
| [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin ) | `10.4.1` | `10.4.6` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt ) | `0.52.0` | `0.56.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint ) | `1.67.0` | `1.71.0` |
| [playwright](https://github.com/microsoft/playwright ) | `1.60.0` | `1.61.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) | `8.0.16` | `8.1.0` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core ) | `1.15.40` | `1.15.43` |
| [globals](https://github.com/sindresorhus/globals ) | `17.6.0` | `17.7.0` |
| [semver](https://github.com/npm/node-semver ) | `7.8.1` | `7.8.5` |
| [tar-fs](https://github.com/mafintosh/tar-fs ) | `3.1.2` | `3.1.3` |
| [@playwright/test](https://github.com/microsoft/playwright ) | `1.60.0` | `1.61.1` |
| [tsx](https://github.com/privatenumber/tsx ) | `4.22.3` | `4.22.4` |
Updates `@codemirror/autocomplete` from 6.20.2 to 6.20.3
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codemirror/autocomplete/commits )
Updates `@codemirror/view` from 6.43.0 to 6.43.4
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codemirror/view/commits )
Updates `@tanstack/react-query` from 5.100.14 to 5.101.2
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query )
Updates `date-fns` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases )
- [Commits](https://github.com/date-fns/date-fns/compare/v4.3.0...v4.4.0 )
Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react )
Updates `@types/react` from 19.2.15 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom )
Updates `react-hook-form` from 7.76.1 to 7.80.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases )
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md )
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.76.1...v7.80.0 )
Updates `react-is` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-is )
Updates `styled-components` from 6.4.2 to 6.4.3
- [Release notes](https://github.com/styled-components/styled-components/releases )
- [Commits](https://github.com/styled-components/styled-components/compare/styled-components@6.4.2...styled-components@6.4.3 )
Updates `@storybook/addon-vitest` from 10.4.1 to 10.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/addons/vitest )
Updates `@storybook/react-vite` from 10.4.1 to 10.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/frameworks/react-vite )
Updates `@types/react` from 19.2.15 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
Updates `cspell` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/streetsidesoftware/cspell/releases )
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md )
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.0.1/packages/cspell )
Updates `eslint` from 10.4.1 to 10.6.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.4.1...v10.6.0 )
Updates `eslint-plugin-storybook` from 10.4.1 to 10.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/lib/eslint-plugin )
Updates `oxfmt` from 0.52.0 to 0.56.0
- [Release notes](https://github.com/oxc-project/oxc/releases )
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md )
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.56.0/npm/oxfmt )
Updates `oxlint` from 1.67.0 to 1.71.0
- [Release notes](https://github.com/oxc-project/oxc/releases )
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md )
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.71.0/npm/oxlint )
Updates `playwright` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1 )
Updates `vite` from 8.0.16 to 8.1.0
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.1.0/packages/vite )
Updates `@swc/core` from 1.15.40 to 1.15.43
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/commits/v1.15.43/packages/core )
Updates `globals` from 17.6.0 to 17.7.0
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0 )
Updates `semver` from 7.8.1 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v7.8.1...v7.8.5 )
Updates `tar-fs` from 3.1.2 to 3.1.3
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.1.2...v3.1.3 )
Updates `@playwright/test` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1 )
Updates `tsx` from 4.22.3 to 4.22.4
- [Release notes](https://github.com/privatenumber/tsx/releases )
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs )
- [Commits](https://github.com/privatenumber/tsx/compare/v4.22.3...v4.22.4 )
---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
dependency-version: 6.20.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@codemirror/view"
dependency-version: 6.43.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@tanstack/react-query"
dependency-version: 5.101.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: date-fns
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: react
dependency-version: 19.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@types/react"
dependency-version: 19.2.17
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: react-dom
dependency-version: 19.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: react-hook-form
dependency-version: 7.80.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: react-is
dependency-version: 19.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: styled-components
dependency-version: 6.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@storybook/addon-vitest"
dependency-version: 10.4.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@storybook/react-vite"
dependency-version: 10.4.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@types/react"
dependency-version: 19.2.17
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: cspell
dependency-version: 10.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: eslint
dependency-version: 10.6.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: eslint-plugin-storybook
dependency-version: 10.4.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: oxfmt
dependency-version: 0.56.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: oxlint
dependency-version: 1.71.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: playwright
dependency-version: 1.61.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: vite
dependency-version: 8.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: "@swc/core"
dependency-version: 1.15.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: globals
dependency-version: 17.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: semver
dependency-version: 7.8.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: tar-fs
dependency-version: 3.1.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ui
- dependency-name: "@playwright/test"
dependency-version: 1.61.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: ui
- dependency-name: tsx
dependency-version: 4.22.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: ui
...
Signed-off-by: dependabot[bot] <support@github.com >
* Dedupe packages
* Bump @types/node
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Maja Cieślak <maja.cieslak@goteleport.com >
Co-authored-by: Grzegorz Zdunek <grzegorz.zdunek@goteleport.com >
2026-07-02 09:15:37 +00:00
c33da95ee3
Fix Auth Connectors UI UX papercuts related to MFA ( #67593 )
...
* improve auth connector mfa UX
* CR
* fix e2e
* add more tests
* CR
2026-07-02 07:45:35 +00:00
044a714228
docs: Add docs-review guidelines AGENTS.md ( #67631 )
...
* docs: Add docs-review guidelines AGENTS.md
* Address review feedback - backport-awareness guidance, check for internal inconsistency within pages, point agents to the docs-website remark-lint config, normalize list markers and nesting in both files
* feedback entries: claude.md addition (rodgtr1) and documentation-style-guide.md (ptgott)
* re-theme AGENTS-STYLE.md as a review guide; dedupe with style guide
* post-feedback from Codex: correcting relative path to contributing file
2026-07-02 01:25:28 +00:00
aa59f5172f
Exempt tbot from client-side join version check ( #68134 )
...
* Exempt tbot from client-side join version check
The version check added in #67627 was unintentionally applied to tbot,
which deliberately lacks client-side version compatibility checks at this time.
Rather than introducing a skip flag or other special handling for tbot,
the version policy now lives with the caller. The join client only fetches
the cluster's version info and the agent decides what to do with it. tbot
leaves the OnVersionCallback nil and is therefore exempt from client-side
version compatibility checks.
* Improve error messages for version compatibility checks
2026-07-01 20:23:35 +00:00
2cf918b555
iOS: Landing View ( #68067 )
...
* Add Icon.swift file as a resuable icon in a rounded rect
* Spruce up the UI for the landing page
* Improve code organization and indentation in LandingView.swift
* Remove stray space in LandingView copy
* Remove Icon.swift since we didn't end up using it
* Address comment/copy PR comments
2026-07-01 17:13:57 +00:00
73e301770e
Bump renovatebot/github-action in /.github/workflows ( #67239 )
...
Bumps [renovatebot/github-action](https://github.com/renovatebot/github-action ) from 46.1.7 to 46.1.14.
- [Release notes](https://github.com/renovatebot/github-action/releases )
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/renovatebot/github-action/compare/3633cede7d4d4598438e654eac4a695e46004420...693b9ef15eec82123529a37c782242f091365961 )
---
updated-dependencies:
- dependency-name: renovatebot/github-action
dependency-version: 46.1.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 14:56:13 +00:00
af850d50e5
Bump docker/build-push-action from 7.0.0 to 7.2.0 in /.github/workflows ( #67240 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.0.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...f9f3042f7e2789586610d6e8b85c8f03e5195baf )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 14:56:04 +00:00
8a67cffc31
feat: Add tctl integrations test command ( #68086 )
...
* Extract bold util
* Add `tctl aws test-oidc` command
* Update docs
* Drop `FPrint` errors
* Move to `tctl integrations test` command
* Fix lint
* Move integration name to arg
* Replace explicit `testIntegrationOutput` interface
* Change "operational" to "healthy"
* Update cli docs
* Use snapshots
2026-07-01 14:33:36 +00:00
add085f832
Refactor LLM requests recorder into a dedicated package ( #68202 )
...
* refactor(llm): extract common recorder
* chore(llm): code review suggestions
2026-07-01 14:27:45 +00:00
1841352380
gha: include kvstore action in workflows ( #68046 )
...
* gha: include kvstore action in workflows
* review comments
* Add back docs-amplify
* Final update
* Missing token permissions
2026-07-01 14:14:09 +00:00
5a1875faac
mcp: use QueryExecModeExec for redshift access ( #68250 )
2026-07-01 13:30:35 +00:00
dd25fca541
Fix potential race in agentpool ( #68243 )
...
This fix addresses a potential race when a new agent is closed
after connection but before being registered in the active set.
This should not be possible under normal operation but can happen
in a synctest bubble when forcing disconnects for testing purposes.
A guard is added for this condition to ensure the pool can shutdown
safely on the very unlikely event this occurs.
Fixes: gravitational/teleport/issues/67734
2026-07-01 08:59:38 +00:00
350e791faa
Add stderr Message for SSH Agent Forwarding Failure ( #66772 )
...
* Add stderr message for agent forwarding failure
Co-authored-by: Copilot <copilot@github.com >
* Add audit event for ssh agent forwarding
* Add ServerMetadata to X11 forwarding audit events and removed unused variables
---------
Co-authored-by: Copilot <copilot@github.com >
2026-06-30 23:25:51 +00:00
77ea171d8b
Update e ( #68278 )
2026-06-30 22:06:37 +00:00
6945bf9ae7
Update e ref ( #68269 )
2026-06-30 19:59:47 +00:00
7bb773c330
Azure Server Discovery: fix User Tasks classification ( #68088 )
...
We were always creating generic failure errors (ie, enrollment-error).
Now, we correctly identify the error and map to a proper issue type.
2026-06-30 18:54:44 +00:00
e31ae30864
Fix copy-paste error in app access test ( #68259 )
...
We were registering cleanup actions to close the same
streamableHTTPServer twice, and never closing streamableHTTPTLSServer.
2026-06-30 18:27:55 +00:00
1beba9bb45
Desktop Access: Drop Shared Directory Removal ( #68260 )
...
* Mark directory removal as unsupported for now
* Get rid of the remove/eject button from the multi-directory sharing menu. We're omitting support for removal for now.
2026-06-30 18:23:25 +00:00
e97acb335e
Porting kube cluster APIs to scoped authZ ( #67881 )
...
* porting kube CRUD APIs to scoped authZ
* adding RO perms for KubeClusters to the scoped RoleKube definition and updating tests
* adding allowed scoped rule verbs for kube cluster resource
* fixing typos
2026-06-30 17:57:39 +00:00
489f155761
Skip flaky firefox e2e test ( #68257 )
...
* Skip flaky firefox e2e test
* skip only on firefox
---------
Co-authored-by: Yassine Bounekhla <yassine@goteleport.com >
2026-06-30 17:45:12 +00:00
15c29cf57f
iOS: Add Test Target ( #68062 )
...
* Add VerifyTests target with an initial deep link test
* Add more comprehensive tests for the DeepLink initializer
2026-06-30 17:30:30 +00:00
2653c5ba12
Make spiffe role deny rules greedy ( #67020 )
...
* Make spiffe role deny rules greedy
Fixes a bug in spiffe deny rule processing which causes requests
to be approved when they have multiple DNS or IP SANs and only one
of them matches the deny rule.
Splits the logic for denies from allow logic since the prior logic
is still correct for the allow side.
We want to deny the request if any one of the SANs specified is
denied.
Conversely, we want to approve requests only if every one of the
SANs is approved.
This logic is not used in master, so may be removed in a future PR.
Just doing this on master for simplicity of backporting.
Adds test cases for multiple IP and DNS SANs, only one of which is
denied.
* Fix variable shadowing bug, add test case
* update existing test to match cases with no sans requested
* fmt
2026-06-30 17:14:26 +00:00
82b6cca4d5
Enforce a max limit on the proxy jump address ( #68172 )
...
oss-fuzz observed a 60s timeout in fuzz_parse_proxy_jump.
There haven't been any recent changes to this code, but the reproducer
inputs from the fuzzer is a very large (> 500K) input, so I suspect
running a regex on such a large input in the shared infra that
the fuzzer runs on was enough to trigger the timeout.
2026-06-30 16:46:55 +00:00
26d04f9470
Add the new design system ( #61524 )
...
* Add the new design system
* pnpm format
* Fix session recordings not updating on theme changes
* Remove color assertions
2026-06-30 16:25:38 +00:00
453d872df9
docs: Update admonition about Deny Rules in Access Lists ( #67210 )
2026-06-30 16:22:49 +00:00
06e3ffcdf8
[Access Requests] Clarify why long-term approval is unavailable in review ( #68032 )
...
* fix: Clarify why long-term approval is unavailable in review
* test: Update Storybook coverage for RequestView states and error cases
2026-06-30 16:22:18 +00:00
a2bdc8c6b2
Allow for wasm-bindgen to be installed into target/ ( #68247 )
2026-06-30 15:31:53 +00:00
1bb4a82ec3
Implement app access managed client certificates ( #67701 )
...
* feat(app): issue client certificates for downstream connections
* chore(upstreamtls): code review suggestions
* chore(upstreamtls): use opaque grpc api
2026-06-30 14:52:18 +00:00
29307296c7
Atempt to reduce flakiness of Test_consumer_sqsMessagesCollector ( #68210 )
...
The tests were refactored to leverage synctest instead of a fake
clock, use a single worker for tests that aren't exercising scheduling,
and remove all require.Eventually uses.
2026-06-30 13:16:04 +00:00
9353c43264
Update js-yaml to 3.15.0 ( #68234 )
2026-06-30 12:42:13 +00:00
a0581abcf7
Remove deprecated scopes.AssertFeatureEnabled ( #68219 )
...
The function was left around until teleport.e used
scopes.Features. The last usage has since been converted
and is now safe for removal.
2026-06-30 12:12:52 +00:00
b828b2ae7f
oslog_darwin.go: Add blank line after build constraint ( #68231 )
2026-06-30 11:35:36 +00:00
ee49f86b2e
Bump electron, electron-updater, electron-builder, node-pty, Node.js, and pnpm ( #67542 )
...
* Bump Node.js to 24.18.0
* Bump pnpm to 11.9.0
* Bump `electron` to 42.5.0
* Bump `node-pty` to 1.2.0-beta.14
* Bump `electron-builder` to 26.15.6
* Bump `electron-updater` to 6.8.9
* Update `after-remove.sh.tmpl`
---------
Co-authored-by: Grzegorz Zdunek <grzegorz.zdunek@goteleport.com >
2026-06-30 09:02:27 +00:00
a482a1e889
Azure Server Discovery: ignore non-linux VMs ( #68082 )
...
* Azure Server Discovery: ignore non-linux VMs
Azure Server Discovery only supports installing teleport into Linux VMs.
Currently, when a Windows VM matches the criteria, the Discovery Service
tries to install teleport into it.
This produces ugly errors because the script we run in the VM is
interpreted by powershell and we get syntax errors all over.
This PR ensures that VMs that report their OS and their OS is not Linux,
are discarded.
* add debug log
2026-06-30 07:51:21 +00:00
Michael