Commit Graph
1066 Commits
Author SHA1 Message Date
Chris Thach 72716be5ac Bump Go to 1.25.3 ⬆️ (#60094)
* chore: Bump Go to 1.25.2 ⬆️

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* fix: Bump to Go 1.25.3. Revert handling of breaking changes.

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

---------

Signed-off-by: Chris Thach <chris.thach@goteleport.com>
2025-10-14 14:57:41 +00:00
Noah Stride fb96852127 MWI: Add support for PodSecurityContext to tbot helm chart (#60089)
* Add support for configuring podSecurityPolicy to tbot helm chart

* whitespace

* Update documentation with now field
2025-10-14 09:39:49 +00:00
Marco Dinis 70e3e83e48 Docs: add Amazon ECS installation mode (#58159)
* add installation mode for ecs

* add terraform code

* review pt1

* review pt n

* Teleport upper case

* add eks example

* after review
2025-10-02 16:43:52 +00:00
Edoardo Spadolini 19cb4f5515 Add chart for the Relay service (#59454)
* Chart yaml, values and helpers

* address comments

* autogenerated reference docs

* add missing extra labels and annotations for the service

* admonition formatting

* version and image helpers

* join secret name helper

* resources

* update reference

* add linting

* Add helm unittests

* Allow custom key for the trusted CA bundle secret

* Remove check for negative replicaCount value

* Clean up .lint/full.yaml and fill it in a bit more

* Fix selector labels indentation in PDB

* Redo tests avoiding snapshots

* Update exercise-configmap to render the whole chart for linting
2025-10-02 16:17:46 +00:00
teleport-post-release-automation[bot] ddc0d10ca7 [auto] Update AMI IDs for 18.2.4 (#59853)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-10-02 09:30:01 +00:00
teleport-post-release-automation[bot] b260fb084a [auto] Update AMI IDs for 18.2.3 (#59729)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-10-01 00:02:43 +00:00
Zac Bergquist 0d8b707eac event-hander: skip desktop recording events by default (#59651)
The desktop.recording audit event is the analogous to the session
"print" event - it is emitted to session recordings but not to
the audit log, and contains the recorded session data.

The event handler was configured to skip SSH/Kube recording events
by default, but not desktop events. Desktop recording events are
even less useful for forwarding since they are mostly binary data.
2025-09-27 17:03:32 +00:00
Dan Upton e8400418c8 MWI: Customizable Argo CD cluster name template (#59541)
* MWI: Customizable Argo CD cluster name template

Resolves #58551, by reproducing `tsh`'s `--set-context-name` flag's behavior.

changelog: MWI: The `kubernetes/argocd` output now supports customizing cluster names with a template

* Fix linting issue
2025-09-25 09:01:22 +00:00
Zac Bergquist 80bbf6fa8f Pin tool versions using Go tool deps (#59540)
* Pin tool versions using Go tool deps

Use versioned tools rather than installing @latest on every run.
This ensures consistency across developer machines and can also
help protect against supply chain attacks.

Updates usages of gci, goda, and gotestsum.

* make go-generate
2025-09-24 19:18:56 +00:00
Steven Martin 14a493bce8 docs: update urls that do not resolve (#59532) 2025-09-24 12:22:43 +00:00
Paul Gottschling 6b6f57fdf1 Clarify configs in self-hosted Event Handler guides (#56937)
* Edit self-hosted Event Handler guides

Closes #38184

Prevent users from using example Event Handler configurations without
modifying the placeholder values. Remove placeholder values from example
Event Handler configs and add them to the comments accompanying the
modified fields.

Exceptions are if the accompanying guide does not explain the
placeholder, e.g., `serviceType` and the `log` section. In these cases,
we expect users to copy the placeholders and use them as they are.

Skip purely hosted Event Handler guides, which don't include
instructions for configuring the Event Handler.

Note that in the MS Teams guide, the TOML example includes clear
placeholders to indicate format, and this change leaves these in.

Also note that some guides, like the PagerDuty guide, include an example
of the final config files after providing lists of instructions. This
change does not touch the example configs in this case.

* Respond to kopiczko feedback

- Fill in missing examples.
- Consistently place comments above configuration fields.
- Use Cloud domain in the email Helm example.
2025-09-22 16:24:41 +00:00
teleport-post-release-automation[bot] 867faaf4fb [auto] Update AMI IDs for 18.2.2 (#59407)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-09-20 13:36:56 +00:00
rosstimothy ad08e94b4c chore: Bump Go to 1.25.1 (#58875)
* chore: Bump Go to 1.25.1

Update all Go modules to use Go 1.25.1.

* Use stable synctest API introduced in Go 1.25

All existing tests that used synctest have had their build
constraints removed and have been updated to use synctest.Test
instead of synctest.Run. There are still tests in teleport.e that
needs to be updated before we can remove GOEXPERIMENT=synctest
and retire the synctest build tag.

* Remove coverage from go test invocations

This is a temporary workaround to https://github.com/golang/go/issues/75031.
When the buildboxes have Go 1.25 installed globally this should no
longer be an issue and coverage can be restored.

* Lazily unmount cgroups

Adds the MNT_DETACH flag to the cgroups unmount call to workaround
issues stemming from a behavior chagne in Go 1.25 to support
automatically setting GOMAXPROCS. In doing so the Go runtime
interacts with cgroups to determine what limits should be applied
which interferes with our ability to clean up.

Fixes https://github.com/gravitational/teleport/issues/58879.

* Fix syntest bug with waitgroups

```
=== Failed
=== FAIL: lib/srv/discovery TestDiscoveryServerEKS (unknown)
fatal error: sync: WaitGroup.Add called from multiple synctest bubbles
```

The failure stems from a bug in Go 1.25 and is a result of loading
aws configs which internally use a sync.WaitGroup. This can be worked
around in the short term by mocking out the aws.Config since the test
is configured to use a mock eks client anyway. Other tests may still
run into this issue until Go 1.25.2 - though our relatively small number
of synctest usage at this point may limit our exposure to said bug.
2025-09-15 21:49:53 +00:00
teleport-post-release-automation[bot] 22acee9aa0 [auto] Update AMI IDs for 18.2.1 (#59109)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-09-15 10:30:39 +00:00
Paul Gottschling 0d1113f5de Consolidate Reference docs section contents (#58248)
* Consolidate Reference docs section contents

Closes #56206

Reduce the number of first-level children in the Reference section of
the docs from 23 to 9, not counting the index page available at
`/docs/reference/`. This makes the Reference section easier to navigate,
since a user can more readily form a mental model of the content
available in the section with fewer items and a more thematic
organization.

- Add a section for deployment references, consolidating reference
  guides for configuring and architecting a Teleport deployment.
- Move the Predicate Language and User Types references into the Access
  Controls section of References.
- Add a section for API reference guides, consolidating the Terraform,
  MWI Terraform, and Operator sections.
- Move Cloud FAQ to Quick Links. This places the guide next to the main
  FAQ in the sidebar to make it more discoverable, since the guide is
  currently rather hidden. This also helps pave the way to merge the two
  FAQs in the future.

* Add an MWI reference section

The MWI Terraform module reference does not belong with reference guides
for API clients. Add a section to the reference guide for Machine &
Workload Identity.

* Rename "API" to "Infrastructure as Code"

Teleport users expect tctl, Operator, and Terraform Provider docs to be
in an Infrastructure as Code reference section, rather than the more
vague "API" section.

Responds to **ravicious** feedback.
2025-09-12 14:42:13 +00:00
Steven Martin 848a73f802 docs: update link to fedramp auth service configuration (#58889) 2025-09-08 20:22:23 +00:00
Chris Thach a9869f7941 chore: Bump Go to 1.24.7 ⬆️ (#58806)
* chore: Bump Go to 1.24.7

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* refactor: remove toolchain directive

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* fix: revert aws go.mod

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* chore: update Go version to 1.24.7 for terraform-mwi

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* fix: Go lint issues

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

---------

Signed-off-by: Chris Thach <chris.thach@goteleport.com>
2025-09-05 20:25:41 +00:00
teleport-post-release-automation[bot] c5d5da5460 [auto] Update AMI IDs for 18.2.0 (#58809)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-09-05 19:06:22 +00:00
dependabot[bot]andTim Ross 168f329552 Bump the go group with 95 updates (#58547)
* Bump the go group with 95 updates

Bumps the go group with 95 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/cloudsqlconn](https://github.com/googlecloudplatform/cloud-sql-go-connector) | `1.17.3` | `1.18.1` |
| [cloud.google.com/go/compute](https://github.com/googleapis/google-cloud-go) | `1.41.0` | `1.44.0` |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.7.0` | `0.8.0` |
| [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.83.0` | `1.85.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.56.0` | `1.56.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.18.2` | `1.19.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.10.1` | `1.11.0` |
| [github.com/ClickHouse/ch-go](https://github.com/ClickHouse/ch-go) | `0.67.0` | `0.68.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.37.1` | `1.38.3` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.30.2` | `1.31.6` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.18.2` | `1.18.10` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.20.1` | `1.20.9` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.19.1` | `1.19.9` |
| [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) | `1.18.1` | `1.18.6` |
| [github.com/aws/aws-sdk-go-v2/feature/rds/auth](https://github.com/aws/aws-sdk-go-v2) | `1.6.1` | `1.6.6` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.18.2` | `1.19.4` |
| [github.com/aws/aws-sdk-go-v2/service/applicationautoscaling](https://github.com/aws/aws-sdk-go-v2) | `1.37.1` | `1.40.1` |
| [github.com/aws/aws-sdk-go-v2/service/athena](https://github.com/aws/aws-sdk-go-v2) | `1.52.1` | `1.55.2` |
| [github.com/aws/aws-sdk-go-v2/service/dax](https://github.com/aws/aws-sdk-go-v2) | `1.25.1` | `1.28.2` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.50.1` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodbstreams](https://github.com/aws/aws-sdk-go-v2) | `1.27.1` | `1.30.2` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.239.0` | `1.249.0` |
| [github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect](https://github.com/aws/aws-sdk-go-v2) | `1.29.1` | `1.32.1` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.61.1` | `1.63.4` |
| [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.67.1` | `1.73.1` |
| [github.com/aws/aws-sdk-go-v2/service/elasticache](https://github.com/aws/aws-sdk-go-v2) | `1.47.1` | `1.50.1` |
| [github.com/aws/aws-sdk-go-v2/service/glue](https://github.com/aws/aws-sdk-go-v2) | `1.121.0` | `1.128.1` |
| [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-sdk-go-v2) | `1.44.1` | `1.47.3` |
| [github.com/aws/aws-sdk-go-v2/service/identitystore](https://github.com/aws/aws-sdk-go-v2) | `1.29.1` | `1.32.2` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.42.1` | `1.45.1` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.74.1` | `1.77.2` |
| [github.com/aws/aws-sdk-go-v2/service/memorydb](https://github.com/aws/aws-sdk-go-v2) | `1.28.1` | `1.31.2` |
| [github.com/aws/aws-sdk-go-v2/service/opensearch](https://github.com/aws/aws-sdk-go-v2) | `1.49.0` | `1.52.1` |
| [github.com/aws/aws-sdk-go-v2/service/organizations](https://github.com/aws/aws-sdk-go-v2) | `1.40.1` | `1.44.2` |
| [github.com/aws/aws-sdk-go-v2/service/rds](https://github.com/aws/aws-sdk-go-v2) | `1.100.1` | `1.104.1` |
| [github.com/aws/aws-sdk-go-v2/service/redshift](https://github.com/aws/aws-sdk-go-v2) | `1.55.1` | `1.58.1` |
| [github.com/aws/aws-sdk-go-v2/service/redshiftserverless](https://github.com/aws/aws-sdk-go-v2) | `1.28.1` | `1.31.2` |
| [github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi](https://github.com/aws/aws-sdk-go-v2) | `1.27.1` | `1.30.2` |
| [github.com/aws/aws-sdk-go-v2/service/rolesanywhere](https://github.com/aws/aws-sdk-go-v2) | `1.18.1` | `1.21.2` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.85.1` | `1.87.3` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.36.1` | `1.39.2` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.35.1` | `1.38.1` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.39.1` | `1.42.3` |
| [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.61.1` | `1.64.2` |
| [github.com/aws/aws-sdk-go-v2/service/ssoadmin](https://github.com/aws/aws-sdk-go-v2) | `1.32.1` | `1.35.2` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.35.1` | `1.38.2` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.22.5` | `1.23.0` |
| [github.com/aws/smithy-go/tracing/smithyoteltracing](https://github.com/aws/smithy-go) | `1.0.6` | `1.0.7` |
| [github.com/beevik/etree](https://github.com/beevik/etree) | `1.5.1` | `1.6.0` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` |
| [github.com/fsouza/fake-gcs-server](https://github.com/fsouza/fake-gcs-server) | `1.52.2` | `1.52.3` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.1` | `4.1.2` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.3` | `5.3.0` |
| [github.com/grafana/pyroscope-go](https://github.com/grafana/pyroscope-go) | `1.2.4` | `1.2.7` |
| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.36.0` | `0.38.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.30` | `1.14.32` |
| [github.com/mdlayher/netlink](https://github.com/mdlayher/netlink) | `1.7.2` | `1.8.0` |
| [github.com/ohler55/ojg](https://github.com/ohler55/ojg) | `1.26.8` | `1.26.10` |
| [github.com/oracle/oci-go-sdk/v65](https://github.com/oracle/oci-go-sdk) | `65.97.0` | `65.99.1` |
| [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.1.0` | `1.1.1` |
| [github.com/snowflakedb/gosnowflake](https://github.com/snowflakedb/gosnowflake) | `1.15.0` | `1.16.0` |
| [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.5.0` | `2.6.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` |
| [github.com/testcontainers/testcontainers-go/modules/mysql](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` |
| [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.43.0` | `3.44.0` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `0.134.0` | `0.142.5` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.40.0` | `0.41.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.26.0` | `0.27.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.42.0` | `0.43.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.33.0` | `0.34.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.27.0` | `0.28.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.243.0` | `0.247.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250728155136-f173205681a0` | `0.0.0-20250825161204-c5933d9347a5` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.75.0` |
| google.golang.org/protobuf | `1.36.6` | `1.36.8` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.5` | `3.18.6` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.3` | `0.34.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.33.3` | `0.34.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.3` | `0.34.0` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.33.3` | `0.34.0` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.33.3` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.3` | `0.34.0` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.33.3` | `0.34.0` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.33.3` | `0.34.0` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20241210054802-24370beab758` | `0.0.0-20250604170112-4c0f3b243397` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.0` |


Updates `cloud.google.com/go/cloudsqlconn` from 1.17.3 to 1.18.1
- [Release notes](https://github.com/googlecloudplatform/cloud-sql-go-connector/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/cloud-sql-go-connector/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googlecloudplatform/cloud-sql-go-connector/compare/v1.17.3...v1.18.1)

Updates `cloud.google.com/go/compute` from 1.41.0 to 1.44.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.41.0...pubsub/v1.44.0)

Updates `cloud.google.com/go/compute/metadata` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/v0.7.0...v0.8.0)

Updates `cloud.google.com/go/spanner` from 1.83.0 to 1.85.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.83.0...spanner/v1.85.0)

Updates `cloud.google.com/go/storage` from 1.56.0 to 1.56.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.56.0...storage/v1.56.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.18.2...sdk/azcore/v1.19.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azidentity/v1.10.1...sdk/azcore/v1.11.0)

Updates `github.com/ClickHouse/ch-go` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/ClickHouse/ch-go/releases)
- [Commits](https://github.com/ClickHouse/ch-go/compare/v0.67.0...v0.68.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.37.1 to 1.38.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.37.1...v1.38.3)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.30.2 to 1.31.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.2...config/v1.31.6)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.2 to 1.18.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.2...config/v1.18.10)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.20.1 to 1.20.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.20.1...service/kms/v1.20.9)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue` from 1.19.1 to 1.19.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.19.1...service/m2/v1.19.9)

Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.1 to 1.18.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.6/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.18.1...config/v1.18.6)

Updates `github.com/aws/aws-sdk-go-v2/feature/rds/auth` from 1.6.1 to 1.6.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.6.1...service/tnb/v1.6.6)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.18.2 to 1.19.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.2...service/m2/v1.19.4)

Updates `github.com/aws/aws-sdk-go-v2/service/applicationautoscaling` from 1.37.1 to 1.40.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.37.1...service/s3/v1.40.1)

Updates `github.com/aws/aws-sdk-go-v2/service/athena` from 1.52.1 to 1.55.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.52.1...service/s3/v1.55.2)

Updates `github.com/aws/aws-sdk-go-v2/service/dax` from 1.25.1 to 1.28.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.25.1...config/v1.28.2)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.45.1 to 1.50.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.45.1...service/s3/v1.50.1)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodbstreams` from 1.27.1 to 1.30.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.27.1...v1.30.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.239.0 to 1.249.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.239.0...service/ec2/v1.249.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect` from 1.29.1 to 1.32.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.29.1...v1.32.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.61.1 to 1.63.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/ecs/v1.63.4)

Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.67.1 to 1.73.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.67.1...service/s3/v1.73.1)

Updates `github.com/aws/aws-sdk-go-v2/service/elasticache` from 1.47.1 to 1.50.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.47.1...service/s3/v1.50.1)

Updates `github.com/aws/aws-sdk-go-v2/service/glue` from 1.121.0 to 1.128.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.121.0...service/glue/v1.128.1)

Updates `github.com/aws/aws-sdk-go-v2/service/iam` from 1.44.1 to 1.47.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/iot/v1.44.1...service/s3/v1.47.3)

Updates `github.com/aws/aws-sdk-go-v2/service/identitystore` from 1.29.1 to 1.32.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.29.1...v1.32.2)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.42.1 to 1.45.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.42.1...service/s3/v1.45.1)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.74.1 to 1.77.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.74.1...service/rds/v1.77.2)

Updates `github.com/aws/aws-sdk-go-v2/service/memorydb` from 1.28.1 to 1.31.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.28.1...config/v1.31.2)

Updates `github.com/aws/aws-sdk-go-v2/service/opensearch` from 1.49.0 to 1.52.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.49.0...service/s3/v1.52.1)

Updates `github.com/aws/aws-sdk-go-v2/service/organizations` from 1.40.1 to 1.44.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.40.1...service/kms/v1.44.2)

Updates `github.com/aws/aws-sdk-go-v2/service/rds` from 1.100.1 to 1.104.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.100.1...service/rds/v1.104.1)

Updates `github.com/aws/aws-sdk-go-v2/service/redshift` from 1.55.1 to 1.58.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.55.1...service/s3/v1.58.1)

Updates `github.com/aws/aws-sdk-go-v2/service/redshiftserverless` from 1.28.1 to 1.31.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.28.1...config/v1.31.2)

Updates `github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi` from 1.27.1 to 1.30.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.27.1...v1.30.2)

Updates `github.com/aws/aws-sdk-go-v2/service/rolesanywhere` from 1.18.1 to 1.21.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.18.1...v1.21.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.85.1 to 1.87.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.85.1...service/s3/v1.87.3)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.36.1 to 1.39.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.36.1...service/amp/v1.39.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.35.1 to 1.38.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/pi/v1.35.1...v1.38.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.39.1 to 1.42.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ivs/v1.39.1...service/sqs/v1.42.3)

Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.61.1 to 1.64.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/iot/v1.64.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ssoadmin` from 1.32.1 to 1.35.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.1...service/iot/v1.35.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.35.1 to 1.38.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/pi/v1.35.1...v1.38.2)

Updates `github.com/aws/smithy-go` from 1.22.5 to 1.23.0
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/smithy-go/compare/v1.22.5...v1.23.0)

Updates `github.com/aws/smithy-go/tracing/smithyoteltracing` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/smithy-go/compare/metrics/smithyotelmetrics/v1.0.6...metrics/smithyotelmetrics/v1.0.7)

Updates `github.com/beevik/etree` from 1.5.1 to 1.6.0
- [Release notes](https://github.com/beevik/etree/releases)
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/beevik/etree/compare/v1.5.1...v1.6.0)

Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](https://github.com/coreos/go-systemd/compare/v22.5.0...v22.6.0)

Updates `github.com/fsouza/fake-gcs-server` from 1.52.2 to 1.52.3
- [Release notes](https://github.com/fsouza/fake-gcs-server/releases)
- [Commits](https://github.com/fsouza/fake-gcs-server/compare/v1.52.2...v1.52.3)

Updates `github.com/go-jose/go-jose/v4` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2)

Updates `github.com/golang-jwt/jwt/v5` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0)

Updates `github.com/grafana/pyroscope-go` from 1.2.4 to 1.2.7
- [Release notes](https://github.com/grafana/pyroscope-go/releases)
- [Commits](https://github.com/grafana/pyroscope-go/compare/v1.2.4...v1.2.7)

Updates `github.com/mark3labs/mcp-go` from 0.36.0 to 0.38.0
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](https://github.com/mark3labs/mcp-go/compare/v0.36.0...v0.38.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.30 to 1.14.32
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.30...v1.14.32)

Updates `github.com/mdlayher/netlink` from 1.7.2 to 1.8.0
- [Release notes](https://github.com/mdlayher/netlink/releases)
- [Changelog](https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mdlayher/netlink/compare/v1.7.2...v1.8.0)

Updates `github.com/ohler55/ojg` from 1.26.8 to 1.26.10
- [Release notes](https://github.com/ohler55/ojg/releases)
- [Changelog](https://github.com/ohler55/ojg/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/ohler55/ojg/compare/v1.26.8...v1.26.10)

Updates `github.com/oracle/oci-go-sdk/v65` from 65.97.0 to 65.99.1
- [Release notes](https://github.com/oracle/oci-go-sdk/releases)
- [Changelog](https://github.com/oracle/oci-go-sdk/blob/master/CHANGELOG.md)
- [Commits](https://github.com/oracle/oci-go-sdk/compare/v65.97.0...v65.99.1)

Updates `github.com/sigstore/sigstore-go` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.1.0...v1.1.1)

Updates `github.com/snowflakedb/gosnowflake` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/snowflakedb/gosnowflake/releases)
- [Changelog](https://github.com/snowflakedb/gosnowflake/blob/master/release.go)
- [Commits](https://github.com/snowflakedb/gosnowflake/compare/v1.15.0...v1.16.0)

Updates `github.com/spiffe/go-spiffe/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/spiffe/go-spiffe/releases)
- [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md)
- [Commits](https://github.com/spiffe/go-spiffe/compare/v2.5.0...v2.6.0)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.1)

Updates `github.com/testcontainers/testcontainers-go` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.37.0...v0.38.0)

Updates `github.com/testcontainers/testcontainers-go/modules/mysql` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.37.0...v0.38.0)

Updates `github.com/zitadel/oidc/v3` from 3.43.0 to 3.44.0
- [Release notes](https://github.com/zitadel/oidc/releases)
- [Changelog](https://github.com/zitadel/oidc/blob/main/.releaserc.js)
- [Commits](https://github.com/zitadel/oidc/compare/v3.43.0...v3.44.0)

Updates `gitlab.com/gitlab-org/api/client-go` from 0.134.0 to 0.142.5
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v0.134.0...v0.142.5)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0
- [Commits](https://github.com/golang/crypto/compare/v0.40.0...v0.41.0)

Updates `golang.org/x/mod` from 0.26.0 to 0.27.0
- [Commits](https://github.com/golang/mod/compare/v0.26.0...v0.27.0)

Updates `golang.org/x/net` from 0.42.0 to 0.43.0
- [Commits](https://github.com/golang/net/compare/v0.42.0...v0.43.0)

Updates `golang.org/x/term` from 0.33.0 to 0.34.0
- [Commits](https://github.com/golang/term/compare/v0.33.0...v0.34.0)

Updates `golang.org/x/text` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.27.0...v0.28.0)

Updates `google.golang.org/api` from 0.243.0 to 0.247.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.243.0...v0.247.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250728155136-f173205681a0 to 0.0.0-20250825161204-c5933d9347a5
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.74.2 to 1.75.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.74.2...v1.75.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8

Updates `helm.sh/helm/v3` from 3.18.5 to 3.18.6
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.18.5...v3.18.6)

Updates `k8s.io/api` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/api/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.3 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apiserver` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.33.3...v0.34.0)

Updates `k8s.io/cli-runtime` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.33.3...v0.34.0)

Updates `k8s.io/client-go` from 0.33.3 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.33.3...v0.34.0)

Updates `k8s.io/component-base` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/component-base/compare/v0.33.3...v0.34.0)

Updates `k8s.io/kubectl` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.33.3...v0.34.0)

Updates `k8s.io/utils` from 0.0.0-20241210054802-24370beab758 to 0.0.0-20250604170112-4c0f3b243397
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/cloudsqlconn
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/compute
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/spanner
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ClickHouse/ch-go
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-version: 1.20.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue
  dependency-version: 1.19.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/rds/auth
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/applicationautoscaling
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/athena
  dependency-version: 1.55.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dax
  dependency-version: 1.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodbstreams
  dependency-version: 1.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.249.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.63.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/elasticache
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/glue
  dependency-version: 1.128.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/iam
  dependency-version: 1.47.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/identitystore
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.77.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/memorydb
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/opensearch
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/organizations
  dependency-version: 1.44.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/rds
  dependency-version: 1.104.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/redshift
  dependency-version: 1.58.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/redshiftserverless
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi
  dependency-version: 1.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/rolesanywhere
  dependency-version: 1.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.87.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm
  dependency-version: 1.64.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssoadmin
  dependency-version: 1.35.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/smithy-go/tracing/smithyoteltracing
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/beevik/etree
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fsouza/fake-gcs-server
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grafana/pyroscope-go
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/mdlayher/netlink
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ohler55/ojg
  dependency-version: 1.26.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/oracle/oci-go-sdk/v65
  dependency-version: 65.99.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/snowflakedb/gosnowflake
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/spiffe/go-spiffe/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go/modules/mysql
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/zitadel/oidc/v3
  dependency-version: 3.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 0.142.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/mod
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.247.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250825161204-c5933d9347a5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/kubectl
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20250604170112-4c0f3b243397
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy all

* Bump github.com/sigstore/rekor to v1.4.1

* Add ap-southeast-6 AWS region

* make grpc

* make -C integrations/operator crd

* Update tbot golden files

* Revert cloud.google.com/go/spanner to 1.83.0

The update to 1.85.0 brought changes which were causing tests to
fail and should be remediated in a separate change.

```
 {"timestamp":"2025-09-04T14:10:31Z","level":"debug","caller":"spanner/interceptors.go:60","message":"failed to handle Spanner RPC","component":"db:service","id":"5a639394-c212-41b5-92e8-77e8e869a6dc","db":"my-spanner","full_method":"/google.spanner.v1.Spanner/CreateSession","error":"rpc error: code = Unimplemented desc = method CreateSession not implemented"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":":0","message":"Multiplexed session is not enabled on this project, continuing with regular sessions"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":"eventstest/channel.go:46","message":"EmitAuditEvent","component":"channel_emitter","event_type":"db.session.spanner.rpc","event_code":"TSPN001I"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":"db/auth_test.go:356","message":"Generating Cloud Spanner auth token source","component":"auth:test","database_user":"admin@project-id.iam.gserviceaccount.com"}
    spanner_test.go:307:
        	Error Trace:	/__w/teleport/teleport/lib/srv/db/spanner_test.go:307
        	Error:      	Not equal:
        	            	expected: "ExecuteStreamingSql"
        	            	actual  : "CreateSession"

        	            	Diff:
        	            	--- Expected
        	            	+++ Actual
        	            	@@ -1 +1 @@
        	            	-ExecuteStreamingSql
        	            	+CreateSession
        	Test:       	TestAuditSpanner/successful_flow
```

* fix kubeconfig tests

* revert rekor and testify updates

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <tim.ross@goteleport.com>
2025-09-05 13:33:30 +00:00
teleport-post-release-automation[bot] ac5c44e9b3 [auto] Update AMI IDs for 18.1.8 (#58522)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-09-03 18:22:18 +00:00
Sakshyam Shah 46014e3055 add entra_id_groups_provider field to oidc connector (#58098)
* add EntraIDGroupsProvider prorot

* use bool enabled state

* add EntraIDGroupsProvider getter and config validator

* make default checkandsetter private

* run make -C integrations/operator crd

* make -C integrations/terraform docs

* tuck entra groups provider checker under the same type and add test

* fix imports

* honour groups source link by default and make entra id groups provider config opt-in

* run crd and terraform gens

* elaborate graph_endopint comment

* rename force_disable -> disabled

* run terraform and crd docgens
2025-09-01 16:47:12 +00:00
milos-teleport 1beade1a45 Fix information in the tbot helm chart readme (#58450)
* Fix information in the tbot helm chart readme

* another correction

* also apply to lint

* also update the helm-reference
2025-08-28 15:13:28 +00:00
teleport-post-release-automation[bot] 5f9a1cefc8 [auto] Update AMI IDs for 18.1.7 (#58428)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-08-28 12:23:29 +00:00
Sakshyam Shah eb06a3429d terraform example to configure entra id for entra id integration (#58252)
* terraform module to configure entra id for teleport entra id integration

* terraform fmt

* update README

* review suggestions:
- add azure provider block and ask for tenant id input
- add client id and tenant id output
- update readme to set up azure cli
2025-08-27 17:52:21 +00:00
Leszek Charkiewicz 21a137589d Support tbot embedding in access plugins and event-handler charts (#57425)
* plugins: support tbot embedding in access plugins

* plugins: support tbot embedding in event-handler

* update docs

* fix ConfigMaps and Deployments

* remove <plugin>.teleportAddress helper

* fix comments

* fixes
2025-08-25 12:28:07 +00:00
Cam Hutchison 37e5a818dd teleport-usage: Bump golang docker image to 1.24 (#58191)
Bump the golang docker image for `examples/teleport-usage` from 1.22 to
1.24. Commit 477eb046f1 updated `go.mod` to 1.24 and now the
`build-usage-image.yaml` workflow fails with the error:

    go: go.mod requires go >= 1.24.6 (running go 1.22.12; GOTOOLCHAIN=local)
2025-08-25 01:50:43 +00:00
rhammonds-teleportandRyan Hammonds 7c41b86e6a OIDC: Enable Separate 'Request Object Mode' For MFA Flow (#58177)
* OIDC: Allow users to specify a separate 'request_object_mode' specifically for MFA. If 'request_object_mode' is omitted from MFA settings, then the base connector's configuration it used for both login and MFA flows.

* gen crds

* Add a word of caution about the default behavior of 'OIDCConnectorMFASettings.RequestObjectMode' if omitted.

---------

Co-authored-by: Ryan Hammonds <ryan.hammonds@Ryans-MacBook-Pro.local>
2025-08-22 17:27:25 +00:00
Ben ArentandTiago Silva 31143cca86 Update Helm chart guide reference link (#58188)
* Update Helm chart guide link and access_graph version

Changed the Helm chart guide URL in the example chart index.html to point to the reference documentation. Also updated the access_graph version in docs/config.json from 1.28.1 to 1.28.0.

* Update docs/config.json

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>

---------

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
2025-08-22 16:00:07 +00:00
teleport-post-release-automation[bot] ebc322fec9 [auto] Update AMI IDs for 18.1.6 (#58190)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-08-21 11:29:45 +00:00
86852353ed GCP AlloyDB support (#56078)
* Proto changes

* Types changes

* Configuration changes

* Cloud client, `go.mod`

* Add method to fetch AlloyDB token

* Engine changes

* `make -C integrations/operator crd`

* lint fix

* `make -C integrations/terraform docs`

* change GCPCloudSQL comment in proto

* Update lib/srv/db/postgres/alloydb.go

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>

* Update lib/srv/db/common/auth.go

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>

* address review comments

* lint fix

* Rename `is_alloy_db` to `is_alloydb`

* Clarify comments for AlloyDB database fields in DatabaseGCP struct

* Nudge user towards proper permissions

* Update lib/srv/db/postgres/alloydb.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* remove todo in favor of longer comment

* reduce indentation

* suggest custom IAM role with minimal required scope

* Major implementation update:
- new URI format `alloydb://<connection uri>`
- removed some configuration fields; added `gcp.alloydb.endpoint` instead
- added connection URI resolution against configured endpoint type
- made query cancellation and health checks aware of AlloyDB needs
- unified query cancellation logic to use the `connector` type

* Revert description changes for flags; these are redundant for AlloyDB

* Enhance error handling in ParseAlloyDBConnectionURI function and add comprehensive test cases for invalid URIs

* split `endpoint` into `endpoint_type` and `endpoint_override`

* Remove indentation from custom error messages

* Log resolved database address

* fix serialization test

* explain the logic in `getGCPType`

* use string instead of enum for endpoint type

* add missing cast

---------

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>
Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
2025-08-20 15:04:12 +00:00
Dan Upton 715aeb9db1 MWI: kubernetes/argo-cd service (#58000)
* K8S client supports `Apply` operations now

* MWI: Add `kubernetes/argo-cd` service type

* Add argocd to the tbot Helm chart

* Fix broken service builder calls in terraform integration

* Fix linting errors

* Make test assertions easier to read

* Use `t.Context` in test helper

* Support for user-defined secret annotations
2025-08-20 10:02:07 +00:00
Gavin Frazar 36a386bfae Add ElastiCache Serverless metadata protobuf (#58014) 2025-08-19 22:10:04 +00:00
rosstimothy 477eb046f1 Update examples dependencies (#57856)
* Update service-discovery-api example

- Bumps the go version to a supported version of Go - Go 1.25
  was just announced which means Go 1.23 is EOL
- Updates github.com/docker/docker to a version > v28.0.0 to
  address https://pkg.go.dev/vuln/GO-2025-3829

* Update access-plugin-minimal

- Bumps the Go version to 1.24.6
- Updates dependencies to the latest versions

* Update api-sync-roles

- Bumps the Go version to 1.24.6
- Updates all dependencies. The Kubernetes dependencies are not
  at latest versions to avoid build issues caused by
  https://github.com/kubernetes/apimachinery/issues/190

* Update desktop-registration

- Bumps Go to 1.24.6
- Update github.com/gravitational/teleport/api to the latest commit

* Update go-client

- Bumps Go to 1.24.6
- Updates github.com/gravitational/teleport/api to the latest commit

* Update teleport-usage

- Bumps Go to 1.24.6
- Updates all dependencies to latest versions
2025-08-19 17:08:36 +00:00
Gus Rivera e498280258 Manual AMI updates for 18.1.5 (#58023) 2025-08-19 16:50:49 +00:00
Paul Gottschling d10e51c000 Restructure Teleport RBAC guidance (#57921)
Closes #21313
Closes #15016
Closes #39241

Beginner-level Teleport RBAC guidance is currently in Access Controls,
where it is difficult to find within more advanced guides on RBAC
topics. This change restructures the RBAC documentation so
beginner-level information is more visible:

**Change the Access Controls section to a section on authentication:**
The guides in this section are mostly about configuring authentication,
not about access controls in general. Meanwhile, there are guides
throughout the docs on access controls in general, leaving the Access
Controls section with an ambiguous purpose.

**Remove the Dual Authorization guide:** Use the Access Requests landing
page to describe the connection to Dual Authorization. This lets us
avoid repeating Access Request plugin content in the Access Controls
section and makes it easier to organize the Access Controls guides.

**Add a beginner-level section on RBAC:** Add the guides to labeling and
role templates here, along with a getting started guide with a
step-by-step demo example of setting up RBAC, aimed at beginners.
2025-08-19 12:32:47 +00:00
Brian Joerger c71b3f9300 Dynamo-Athena migration - handle empty checkpoint file gracefully (#57730)
* Handle empty checkpoint file gracefully.

* Add prompt with checkpoint error and restart option.

* Add info log.

* Add todo.
2025-08-15 18:58:14 +00:00
rhammonds-teleportandjoerger 3df242da2a Add Support For JWT-Secured Authorization Requests in OIDC Connector (#56990)
* POC make signer usable with jwt signing.

* Add SignOAuthRequest method.

* Update TODO; Add e ref.

* * Add new configuration parameter 'enable_request_objects' to oidc connector to enable the use of JWT-Secured Authorization Requests
* Include key id and algorithm in JWT header when signing JARs

* * Add setter for enabling/disabling JARs on an oidc connector
* Add a simple 'Validate' function to jwt.Key object allowing users to simply validate a signature and retrieve claims (registered and unregistered)

* Add comment on OIDCConnectorV3 setter

* * Rename 'SignOauthRequest' method to more generic 'SignAny'
* Remove inconsistent go-jose/jwt/v5 dependency
* Use consistent map type for input/output of 'SignAny' and 'ValidateAny' methods

* Remove generic JWT signing/verification methods and replace with opinionated OIDC SignOIDCAuthRequestToken and VerifyOIDCAuthRequestToken alternatives

* Replace 'EnableRequestObjects' setting on OIDCConnectorSpecV3 with a string 'RequestObjectMode' which gives us more flexibility to support additional request object settings in the future.

* Clean up tests, fix formatting, and pick (hopefully) better names for OIDC Auth Request related JWT methods.

* Periods at end of godoc comments

* Regenerate configuration docs/examples

* * Embed jwt.Claims within 'OIDCAuthRequestClaims', require that at least 'audience' and 'issuer' claims are set, and perform validation of claims during parsing/verification.
* Implement json.Marshaler and json.Unmarshaler interfaces on 'OIDCAuthRequestClaims' so that it can passed to go-jose utilities without pre/post transformation steps.`

* Remove OIDC Auth Request utilities from 'lib/jwt' package.

* Regenerate terraform docs

---------

Co-authored-by: joerger <bjoerger@goteleport.com>
2025-08-13 02:00:53 +00:00
Vadym PopovandStephen Levine 719e837825 Fix unlink package for every version w/ and w/o teleport-update (#57254)
* Unlink package only for older version w/o teleport-update

* Add comment with explanation when unlink is required during downgrade
Use `dpkg` for version comparison when it is available

* Update examples/systemd/before-remove

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>

---------

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>
2025-08-08 19:15:47 +00:00
teleport-post-release-automation[bot] d050b23614 [auto] Update AMI IDs for 18.1.4 (#57628)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-08-08 13:04:08 +00:00
Hugo Shaka aab010041d Helm: add kube joining support to teleport-kube-agent chart (#57603)
* Helm: add kube joining support to teleport-kubeagent chart

* re-redner docs
2025-08-07 12:53:45 +00:00
Tim Buckley 8a53c6d934 Add new oidc subtype for Kubernetes joining (#57538)
* MWI: Add `oidc` subtype for Kubernetes joining

This adds a new `oidc` subtype for Kubernetes joining, which allows
workloads to join using a Kubernetes service account token (JWT)
as usual, but verifies it using an OIDC flow rather than a static JWKS
keyset. This should better support platforms like EKS where the JWKS
keyset is rotated regularly.

* Validate OIDC subtype properly

* Initialize OIDC validator at startup

* Fix OIDC claims implementation

* Force use of cluster name as audience

* Remove authorized party workaround

* Reintroduce kubernetes claims check

* Remove unused constant

* Update generated operator resources

* Update generated TF docs

* Add validator tests

* Improve proto docs, enforce HTTP issuers, and add insecure override

* Update autogenerated docs
2025-08-07 01:11:16 +00:00
Paul Gottschling a604887ebf Move some Management content to ZTA (#57438)
* Move Access Controls to ZTA

The guides in Access Controls describe ZTA features, and we are
organizing the docs so that all pages fall under a product-focused
category.

* Move some Management content to ZTA

The guides in the `admin-guides/management` section describe ZTA
features, and we are organizing the docs so that all pages fall under a
product-focused category.
2025-08-06 15:30:45 +00:00
teleport-post-release-automation[bot] 9e65ef0c76 [auto] Update AMI IDs for 18.1.3 (#57592)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-08-06 14:27:15 +00:00
Paul Gottschling 9915a3bb50 Move Deploy a Cluster to ZTA (#57437)
* Move Access Controls to ZTA

The guides in Access Controls describe ZTA features, and we are
organizing the docs so that all pages fall under a product-focused
category.

* Move Deploy a Cluster to ZTA

The guides in Deploy a Clusterdescribe ZTA features, and we are
organizing the docs so that all pages fall under a product-focused
category.
2025-08-06 13:48:16 +00:00
teleport-post-release-automation[bot] 5519dee8d4 [auto] Update AMI IDs for 18.1.2 (#57573)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2025-08-05 21:55:48 +00:00
Gus Rivera d074074e75 Update AMI IDs for 18.1.1 (#57293) 2025-07-30 14:35:12 +00:00
Taras bafdc68028 dashboard: add example teleport dashboard (#55633) 2025-07-24 18:19:53 +00:00
Pawel Kopiczko a448f8ecf5 Update AccessList.Spec.Type docs (#57132) 2025-07-24 13:11:03 +00:00
Hugo Shaka 4cb60895b5 Lint Dockerfiles to stop build warnings (#57095) 2025-07-23 17:48:49 +00:00
Paul Gottschling 3b3af7e493 Fix 25 Vale warnings (#56953)
Fix capitalization and minor word usage, e.g., AWS product names.

Edit protos in order to fix Terraform and Kubernetes Operator reference
docs.
2025-07-23 16:28:40 +00:00