Commit Graph
510 Commits
Author SHA1 Message Date
Erik Tate da008f23b3 adding immutable labels to scoped token, inventory, server, joinservice, (#62939)
and decisionprotos
2026-01-27 21:59:19 +00:00
Przemko Robakowski 1d16fbac8a Add LinuxDesktop protos and generated code (#62971) 2026-01-21 07:56:10 +00:00
Kevin e657d736d9 Add Operator custom resources opt-in support for Event Handler helm chart (#62791)
* Add Operator custom resources opt-in support for Event Handler helm chart

* Rename field and clean docs

* Add newline

* Address feedback

* Update chart ref

* Refactor current -> release

* Add labels

* Update docs
2026-01-20 21:49:48 +00:00
Paul Gottschling 1942d2002b Generate docs reference for the db_server resource (#62716)
Add the resource to the generator config and run the generator.

A bug in the generator causes it to split `ElastiCache` despite the
string being in the list of permitted camel-case exceptions. This change
fixes by bug by checking each word in an H2 section against the
exception list before potentially splitting it.

Also fix minor style/grammar and product naming issues in protobuf
messages related to the db_server resource reference.
2026-01-20 17:30:58 +00:00
Hugo Shaka 4bdb3029ae helm: extract teleport-kube-agent-updater into a teleport-kube-updater library chart (#62846) 2026-01-16 17:53:37 +00:00
Hugo Shaka e9d688803d helm: add jobResources value to teleport-cluster (#62809)
* helm: add `jobResources` value to teleport-cluster

* apply zac's feedback
2026-01-14 21:38:02 +00:00
Dan UptonandCyril Gaudin d398156437 [buddy] tbot: Support templating annotations in kubernetes/argo-cd output (#62668)
* tbot: Support templating annotations in kubernetes/argo-cd output

like it's done for labels (cf https://github.com/gravitational/teleport/pull/61804)

Our use case:
We need to set some of the Teleport cluster labels in the Kubernetes
secret's annotations (instead of secret labels) because the label's
value contains unsupported character (cf https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set)

For example we store some cluster URLs (e.g. Docker registry URL) but
secret's labels cannot contain a `/` in the value.

Signed-off-by: Dan Upton <daniel.upton@goteleport.com>

* Add annotation templating to Helm chart docs

---------

Signed-off-by: Dan Upton <daniel.upton@goteleport.com>
Co-authored-by: Cyril Gaudin <cyril.gaudin@camunda.com>
2026-01-08 16:00:50 +00:00
Paul Gottschling 6efd37a269 Generate an App V3 resource reference page (#62163)
* Generate an App V3 resource reference page

This change alters the configuration of the resource reference generator
to generate a page for the App V3 resource, and includes the new page.

* Correct spelling and grammar in proto comments
2026-01-06 15:09:37 +00:00
Marco Dinis e211d424d8 Allow IAM Joins to use an Organization ID with integration creds (#62395)
This PR adds a new field in the provision token, so that users can
define an integration whose credentials will be used to retreive the
organization id for a given account.

This will allow the Auth Server to call the AWS API
organizations:DescribeAccount using the integration credentials.
Previously, only self-hosted clusters could allow iam joins by
organization (by providing ambient credentials to the Auth Server)
2026-01-05 13:40:16 +00:00
Noah Stride ecb5d66c07 SPIFFE Daemon Set Helm Chart (#61424)
* Skeleton/README

* Update Makefile with new targets

* More makefile changes

* Add Chart.yaml

* Add _helpers.yaml

* Add supporting RBAC

* Add values file and tweak config

* Add ClusterRole/ClusterRoleBinding

* Fix docs on values

* Hack on daemonset definition

* templatize security contexts

* Fix up daemonset labels/matchers

* Add workload api listener to tbot config

* Fix bad service account name

* Support debug mode logs

* Add value for workloadIdentitySelector

* Update documentation

* Add snapshot testsAdd snapshot testsAdd snapshot testsAdd snapshot
testsAdd snapshot testsAdd snapshot testsAdd snapshot testsAdd snapshot
tests

* Add to the chart index

* Fix missing "?" in helm value

* Generate reference doucmentation

* Appease newline linting

* Add note regarding high level of privileges

* Update chart ref
2026-01-02 15:47:40 +00:00
Kevin dda56340b6 Add support for standard TLS secret key names for helm charts (#62222)
* Add support for standard TLS secret key names for Event Handler helm chart

* Add support for Teleport Cluster helm chart

* Add support for Teleport Operator and Kube Agent; update comments for Teleport Cluster

* Re-render/update docs

* Minor fix for Teleport Cluster chart docs

* Remove redundant default in templates

* Add newline

* Add required and error msgs; standardize teleport-relay chart

* Re-render docs
2025-12-22 18:13:49 +00:00
Kevin 7de003462d docs: Render Event Handler helm chart reference with render-helm-ref (#62282)
* docs: Render Event Handler helm chart reference with `render-helm-ref`

* Add rendered doc

* Fix typos

* Fix spellings, change spammy to noisy
2025-12-16 17:36:37 +00:00
Kevin a4904e4193 docs: Fix typos in helm charts and Kubernetes Operator (#62284) 2025-12-16 14:36:38 +00:00
Kevin d668ae6856 Add full configuration file for Event Handler helm chart (#62049)
* Added full configuration file for Event Handler helm chart

* Fix snapshot

* Fix test

* Remove exitOnLastEvent, refresh options; refactoring

* Refactor, fix test
2025-12-15 22:11:38 +00:00
Kevin 1fe4156ee7 Update Event Handler helm chart with extra field patterns (#62183)
* Update Event Handler helm chart with `extra` field patterns

* Remove newline in test

* Remove extraVolumes and extraVolumeMounts (redundant)
2025-12-15 18:28:51 +00:00
deusxanima 7a79b7d5fb helm: disable SA token automount and mount token via STS pod spec in kube-agent chart (#61612) 2025-12-15 17:48:33 +00:00
Paul Gottschling 99c78eadac Clean up the Enroll Resources docs sidebar section (#62133)
Make it easier for readers to navigate this section by reducing noise in
the sidebar. This change modifies sidebar labels to reduce length,
remove repeated words, and add a more logical order.

This change also reorganizes some sections of the sidebar in order to
improve clarity and reduce the number of items in a given section:

- Move guides to enrolling specific databases to
  `enroll-resources/database-access/enrollment`, and shorten individual
  guide slugs since we don't need to include the substring `enroll-`.
- Move the Kubernetes application discovery reference to the Kubernetes
  application discovery section. The reference is specific to Kubernetes
  application discovery, and makes more sense in the Kubernetes
  application discovery subsection.
- Remove the Server Access introduction page, since it is redundant with
  the landing page.
- Replace the "Applications" section "Guides" with a "Configuration
  Guides" section, which is more thematically specific.
- Move the Ansible guide from "Servers" to "User Guides". This doesn't
  require tctl, and is for end-users who want to set up an Ansible
  playbook using Teleport credentials. Rephrase a Troubleshooting item
  that mentions `tctl` to indicate taht admins must complete the task.
2025-12-15 14:56:01 +00:00
Stephen LevineandHugo Shaka 5e76f1a95a Managed Updates: Kube Canaries (#61360)
* wip

* cleanup

* fix comment

* fix main

* fix chart

* add test

* missing test

* build with entitlements

* add configmap to role

* avoid oversharing configmaps

* linting

* fix cache init issue

* adjust role

* change default group

* fix test

* Apply suggestion from @hugoShaka

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>

* update values.yaml

* lint

* remove warning for kube

* improve ID configmap management

* fix bug

* add negative test

* info log

* set spec if different

---------

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
2025-12-12 04:47:21 +00:00
Kevin 05f13a77cc Add annotations support for Event Handler helm chart (#62081)
* Add configmap and deployment annotations for event handler helm chart

* Update documentation for podAnnotations
2025-12-12 00:00:55 +00:00
Kenneth b22d08f295 Implemented SAML Subject/NameID for identifier first login (#61460) 2025-12-11 04:10:48 +00:00
Marco Dinis bdb8e6dcf8 IAM Provision Token: allow joins by AWS Organization (proto) (#62022) 2025-12-09 10:49:04 +00:00
Paul Gottschling e1f9015a96 Update Helm values files (#62039)
Update links to accommodate the changes in #61889.
2025-12-08 13:09:39 +00:00
Hugo Shaka d34351c3e3 set GOMEMLIMIT by default in charts (#61853) 2025-12-02 23:40:45 +00:00
Hugo Shaka b30719bf9a Do not request resources in teleport-cluster config hooks (#61856)
Config check hooks don't run a full Teleport, they are only validate
that the config file is valid. Applying resoucre requests is not useful
and can block the rollout in smaller clusters.

Changelog: Prevented stuck `teleport-cluster` Helm chart rollouts in smaller clusters. Removed resource requests from configuration check hooks.
2025-12-02 23:34:24 +00:00
Travis Rodgers 0e2b493949 docs: updated enroll Applications docs homepage with new design (#61350)
This commit updates the enroll Applications docs homepage with the new design. The introduction.mdx page is also being deleted because it's largely a page of links, the diagram is overly complicated, and the new page covers all the features and links. A redirect is added in config as well as files using that link.
2025-12-01 21:58:38 +00:00
Dan Upton 65357a8056 Support templating labels in tbot's kubernetes/argo-cd output (#61804)
* Support templating labels in tbot's `kubernetes/argo-cd` output

This PR makes it possible to copy the Kubernetes Cluster resource labels into
the created Argo CD cluster secrets, by making the `secret_labels` map values
templates and adding the `{{.Labels}}` variable.

If the label value template evaluates to an empty string, the label will not be
added to the secret.

Example tbot configuration:

    services:
        - type: kubernetes/argo-cd
          cluster_selectors:
            - labels:
                department: engineering
          secret_labels:
            cloud: |-
                {{index .Labels "cloud"}}
            region: |-
                {{index .Labels "region"}}

Example Helm values:

    argocd:
        enabled: true
        clusterSelectors:
            - labels:
                department: engineering
        secretLabels:
            cloud: |-
                {{index .Labels "cloud"}}
            region: |-
                {{index .Labels "region"}}

Closes #61347

* Fix wrong template package being used

* Make it clear that tbot is rendering the template, not Helm
2025-12-01 12:57:55 +00:00
Edoardo Spadolini 8f71f833a0 Add relayAddr value to the teleport-kube-agent chart (#61833) 2025-11-28 10:54:20 +00:00
Paul Gottschling c6e2487309 Bring the teleport-kube-agent reference up to date (#61633) 2025-11-21 13:33:01 +00:00
Kevin 36bbc6c9b9 Add support for role.spec.allow.request.reason.prompt to specify custom reason prompts for Access Requests (#60847)
* Added support for `role.spec.allow.request.reason.prompt` to specify custom reason prompts for requestable `roles`/`search_as_roles`

* Update terraform schema & docs

* Updated role-spec docs to include support for  and updated UI for prompt displays

* Fix lint

* Update reference docs

* Include prompt output for tctl, update reference docs, and fix UI

* Update docs

* Fix e ref
2025-11-06 21:00:48 +00:00
Nic Klaassen 8fae14bf42 feat: oracle join tokens scoped to specific instance IDs (#60888)
* feat: oracle join tokens scoped to specific instance IDs

* validate instance ID and cap at 100 per rule
2025-11-05 17:18:41 +00:00
Cam HutchisonandMarco Dinis 47323ebaf0 proto / docs: Update proto comments to match modified docs (#61032)
* proto / docs: Update proto comments to match modified docs

Update `autoupdate.proto` doc comments to match changes manually made to
the docs. The docs are auto-generated from the proto comments, so those
manual changes are being reverted when running the autogen tools, and
the lint job checking this is failing.

Also update the lint job to update the changed paths for the docs - this
would have prevented the manual change to the docs from being merged in
the first place, but the paths were out of date.

Update generated files running:

    make grpc/host
    make -C integrations/operator crd
    make -C integratios/terraform docs

* re-apply changes

---------

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>
2025-11-05 16:09:13 +00:00
Tim Buckley dfc545a62c Add Env0 join method (#60386)
* Add Env0 method

This adds a new `env0` join method to support joining from env0
workflows, and especially the embedded tbot in the Terraform provider
when running on env0.

This is the first OIDC join method on the new join service, and will
not support legacy joining. As such, it won't be backported beyond
v18.

Closes #53798

changelog: Add new `env0` join method to support joining within Env0 workflows

* Fix imports

* Fix failing test

* Add env0 token source

* Fix missing env0 join method in tbot

* Fix env0 validation

This fixes some issues in env0 token validation:
- azp check is disabled since it's set to a random (ish) value
- Use correct audience URL (their docs specified the wrong value)

* Fix incorrect date in new file copyright header

* Fix generated tfschema

* Fix failing test after adding the token source

* First round of code review

* Add example token claims in comment

* Move common OIDC handling logic into a separate handler

Specific validation logic is now separate and the validator is passed
as an argument to a generic `handleOIDCJoin()` handler.

* Fix imports

* Rename joinclient/join_env0.go to join_oidc.go
2025-10-27 23:02:20 +00:00
Jeff AndersonandHugo Shaka bde503b438 Add extraEnv extraArgs to teleport-operator chart. (#46488)
* Add extraEnv extraArgs to teleport-operator chart.

Fixes #46465

* Update examples/chart/teleport-cluster/charts/teleport-operator/values.yaml

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>

* Update examples/chart/teleport-cluster/charts/teleport-operator/templates/deployment.yaml

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>

* generated teleport-operator reference

---------

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
2025-10-16 15:54:43 +00:00
Krzysztof Skrzętnicki d84412e485 Multiple hostnames & retries support for Oracle (#59901)
* Multiple hostnames & retries support for Oracle

* update serialization test

* Update docstring
2025-10-16 07:07:05 +00:00
Noah Stride fb96852127 MWI: Add support for PodSecurityContext to tbot helm chart (#60089)
* Add support for configuring podSecurityPolicy to tbot helm chart

* whitespace

* Update documentation with now field
2025-10-14 09:39:49 +00:00
Edoardo Spadolini 19cb4f5515 Add chart for the Relay service (#59454)
* Chart yaml, values and helpers

* address comments

* autogenerated reference docs

* add missing extra labels and annotations for the service

* admonition formatting

* version and image helpers

* join secret name helper

* resources

* update reference

* add linting

* Add helm unittests

* Allow custom key for the trusted CA bundle secret

* Remove check for negative replicaCount value

* Clean up .lint/full.yaml and fill it in a bit more

* Fix selector labels indentation in PDB

* Redo tests avoiding snapshots

* Update exercise-configmap to render the whole chart for linting
2025-10-02 16:17:46 +00:00
Zac Bergquist 0d8b707eac event-hander: skip desktop recording events by default (#59651)
The desktop.recording audit event is the analogous to the session
"print" event - it is emitted to session recordings but not to
the audit log, and contains the recorded session data.

The event handler was configured to skip SSH/Kube recording events
by default, but not desktop events. Desktop recording events are
even less useful for forwarding since they are mostly binary data.
2025-09-27 17:03:32 +00:00
Dan Upton e8400418c8 MWI: Customizable Argo CD cluster name template (#59541)
* MWI: Customizable Argo CD cluster name template

Resolves #58551, by reproducing `tsh`'s `--set-context-name` flag's behavior.

changelog: MWI: The `kubernetes/argocd` output now supports customizing cluster names with a template

* Fix linting issue
2025-09-25 09:01:22 +00:00
Steven Martin 14a493bce8 docs: update urls that do not resolve (#59532) 2025-09-24 12:22:43 +00:00
Paul Gottschling 0d1113f5de Consolidate Reference docs section contents (#58248)
* Consolidate Reference docs section contents

Closes #56206

Reduce the number of first-level children in the Reference section of
the docs from 23 to 9, not counting the index page available at
`/docs/reference/`. This makes the Reference section easier to navigate,
since a user can more readily form a mental model of the content
available in the section with fewer items and a more thematic
organization.

- Add a section for deployment references, consolidating reference
  guides for configuring and architecting a Teleport deployment.
- Move the Predicate Language and User Types references into the Access
  Controls section of References.
- Add a section for API reference guides, consolidating the Terraform,
  MWI Terraform, and Operator sections.
- Move Cloud FAQ to Quick Links. This places the guide next to the main
  FAQ in the sidebar to make it more discoverable, since the guide is
  currently rather hidden. This also helps pave the way to merge the two
  FAQs in the future.

* Add an MWI reference section

The MWI Terraform module reference does not belong with reference guides
for API clients. Add a section to the reference guide for Machine &
Workload Identity.

* Rename "API" to "Infrastructure as Code"

Teleport users expect tctl, Operator, and Terraform Provider docs to be
in an Infrastructure as Code reference section, rather than the more
vague "API" section.

Responds to **ravicious** feedback.
2025-09-12 14:42:13 +00:00
Steven Martin 848a73f802 docs: update link to fedramp auth service configuration (#58889) 2025-09-08 20:22:23 +00:00
dependabot[bot]andTim Ross 168f329552 Bump the go group with 95 updates (#58547)
* Bump the go group with 95 updates

Bumps the go group with 95 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/cloudsqlconn](https://github.com/googlecloudplatform/cloud-sql-go-connector) | `1.17.3` | `1.18.1` |
| [cloud.google.com/go/compute](https://github.com/googleapis/google-cloud-go) | `1.41.0` | `1.44.0` |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.7.0` | `0.8.0` |
| [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.83.0` | `1.85.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.56.0` | `1.56.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.18.2` | `1.19.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.10.1` | `1.11.0` |
| [github.com/ClickHouse/ch-go](https://github.com/ClickHouse/ch-go) | `0.67.0` | `0.68.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.37.1` | `1.38.3` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.30.2` | `1.31.6` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.18.2` | `1.18.10` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.20.1` | `1.20.9` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.19.1` | `1.19.9` |
| [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) | `1.18.1` | `1.18.6` |
| [github.com/aws/aws-sdk-go-v2/feature/rds/auth](https://github.com/aws/aws-sdk-go-v2) | `1.6.1` | `1.6.6` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.18.2` | `1.19.4` |
| [github.com/aws/aws-sdk-go-v2/service/applicationautoscaling](https://github.com/aws/aws-sdk-go-v2) | `1.37.1` | `1.40.1` |
| [github.com/aws/aws-sdk-go-v2/service/athena](https://github.com/aws/aws-sdk-go-v2) | `1.52.1` | `1.55.2` |
| [github.com/aws/aws-sdk-go-v2/service/dax](https://github.com/aws/aws-sdk-go-v2) | `1.25.1` | `1.28.2` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.50.1` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodbstreams](https://github.com/aws/aws-sdk-go-v2) | `1.27.1` | `1.30.2` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.239.0` | `1.249.0` |
| [github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect](https://github.com/aws/aws-sdk-go-v2) | `1.29.1` | `1.32.1` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.61.1` | `1.63.4` |
| [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.67.1` | `1.73.1` |
| [github.com/aws/aws-sdk-go-v2/service/elasticache](https://github.com/aws/aws-sdk-go-v2) | `1.47.1` | `1.50.1` |
| [github.com/aws/aws-sdk-go-v2/service/glue](https://github.com/aws/aws-sdk-go-v2) | `1.121.0` | `1.128.1` |
| [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-sdk-go-v2) | `1.44.1` | `1.47.3` |
| [github.com/aws/aws-sdk-go-v2/service/identitystore](https://github.com/aws/aws-sdk-go-v2) | `1.29.1` | `1.32.2` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.42.1` | `1.45.1` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.74.1` | `1.77.2` |
| [github.com/aws/aws-sdk-go-v2/service/memorydb](https://github.com/aws/aws-sdk-go-v2) | `1.28.1` | `1.31.2` |
| [github.com/aws/aws-sdk-go-v2/service/opensearch](https://github.com/aws/aws-sdk-go-v2) | `1.49.0` | `1.52.1` |
| [github.com/aws/aws-sdk-go-v2/service/organizations](https://github.com/aws/aws-sdk-go-v2) | `1.40.1` | `1.44.2` |
| [github.com/aws/aws-sdk-go-v2/service/rds](https://github.com/aws/aws-sdk-go-v2) | `1.100.1` | `1.104.1` |
| [github.com/aws/aws-sdk-go-v2/service/redshift](https://github.com/aws/aws-sdk-go-v2) | `1.55.1` | `1.58.1` |
| [github.com/aws/aws-sdk-go-v2/service/redshiftserverless](https://github.com/aws/aws-sdk-go-v2) | `1.28.1` | `1.31.2` |
| [github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi](https://github.com/aws/aws-sdk-go-v2) | `1.27.1` | `1.30.2` |
| [github.com/aws/aws-sdk-go-v2/service/rolesanywhere](https://github.com/aws/aws-sdk-go-v2) | `1.18.1` | `1.21.2` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.85.1` | `1.87.3` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.36.1` | `1.39.2` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.35.1` | `1.38.1` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.39.1` | `1.42.3` |
| [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.61.1` | `1.64.2` |
| [github.com/aws/aws-sdk-go-v2/service/ssoadmin](https://github.com/aws/aws-sdk-go-v2) | `1.32.1` | `1.35.2` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.35.1` | `1.38.2` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.22.5` | `1.23.0` |
| [github.com/aws/smithy-go/tracing/smithyoteltracing](https://github.com/aws/smithy-go) | `1.0.6` | `1.0.7` |
| [github.com/beevik/etree](https://github.com/beevik/etree) | `1.5.1` | `1.6.0` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` |
| [github.com/fsouza/fake-gcs-server](https://github.com/fsouza/fake-gcs-server) | `1.52.2` | `1.52.3` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.1` | `4.1.2` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.3` | `5.3.0` |
| [github.com/grafana/pyroscope-go](https://github.com/grafana/pyroscope-go) | `1.2.4` | `1.2.7` |
| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.36.0` | `0.38.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.30` | `1.14.32` |
| [github.com/mdlayher/netlink](https://github.com/mdlayher/netlink) | `1.7.2` | `1.8.0` |
| [github.com/ohler55/ojg](https://github.com/ohler55/ojg) | `1.26.8` | `1.26.10` |
| [github.com/oracle/oci-go-sdk/v65](https://github.com/oracle/oci-go-sdk) | `65.97.0` | `65.99.1` |
| [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.1.0` | `1.1.1` |
| [github.com/snowflakedb/gosnowflake](https://github.com/snowflakedb/gosnowflake) | `1.15.0` | `1.16.0` |
| [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.5.0` | `2.6.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` |
| [github.com/testcontainers/testcontainers-go/modules/mysql](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.38.0` |
| [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.43.0` | `3.44.0` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `0.134.0` | `0.142.5` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.40.0` | `0.41.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.26.0` | `0.27.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.42.0` | `0.43.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.33.0` | `0.34.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.27.0` | `0.28.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.243.0` | `0.247.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250728155136-f173205681a0` | `0.0.0-20250825161204-c5933d9347a5` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.75.0` |
| google.golang.org/protobuf | `1.36.6` | `1.36.8` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.5` | `3.18.6` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.3` | `0.34.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.33.3` | `0.34.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.3` | `0.34.0` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.33.3` | `0.34.0` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.33.3` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.3` | `0.34.0` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.33.3` | `0.34.0` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.33.3` | `0.34.0` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20241210054802-24370beab758` | `0.0.0-20250604170112-4c0f3b243397` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.0` |


Updates `cloud.google.com/go/cloudsqlconn` from 1.17.3 to 1.18.1
- [Release notes](https://github.com/googlecloudplatform/cloud-sql-go-connector/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/cloud-sql-go-connector/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googlecloudplatform/cloud-sql-go-connector/compare/v1.17.3...v1.18.1)

Updates `cloud.google.com/go/compute` from 1.41.0 to 1.44.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.41.0...pubsub/v1.44.0)

Updates `cloud.google.com/go/compute/metadata` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/v0.7.0...v0.8.0)

Updates `cloud.google.com/go/spanner` from 1.83.0 to 1.85.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.83.0...spanner/v1.85.0)

Updates `cloud.google.com/go/storage` from 1.56.0 to 1.56.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.56.0...storage/v1.56.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.18.2...sdk/azcore/v1.19.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azidentity/v1.10.1...sdk/azcore/v1.11.0)

Updates `github.com/ClickHouse/ch-go` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/ClickHouse/ch-go/releases)
- [Commits](https://github.com/ClickHouse/ch-go/compare/v0.67.0...v0.68.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.37.1 to 1.38.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.37.1...v1.38.3)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.30.2 to 1.31.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.2...config/v1.31.6)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.2 to 1.18.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.2...config/v1.18.10)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.20.1 to 1.20.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.20.1...service/kms/v1.20.9)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue` from 1.19.1 to 1.19.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.19.1...service/m2/v1.19.9)

Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.1 to 1.18.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.6/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.18.1...config/v1.18.6)

Updates `github.com/aws/aws-sdk-go-v2/feature/rds/auth` from 1.6.1 to 1.6.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.6.1...service/tnb/v1.6.6)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.18.2 to 1.19.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.2...service/m2/v1.19.4)

Updates `github.com/aws/aws-sdk-go-v2/service/applicationautoscaling` from 1.37.1 to 1.40.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.37.1...service/s3/v1.40.1)

Updates `github.com/aws/aws-sdk-go-v2/service/athena` from 1.52.1 to 1.55.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.52.1...service/s3/v1.55.2)

Updates `github.com/aws/aws-sdk-go-v2/service/dax` from 1.25.1 to 1.28.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.25.1...config/v1.28.2)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.45.1 to 1.50.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.45.1...service/s3/v1.50.1)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodbstreams` from 1.27.1 to 1.30.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.27.1...v1.30.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.239.0 to 1.249.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.239.0...service/ec2/v1.249.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect` from 1.29.1 to 1.32.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.29.1...v1.32.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.61.1 to 1.63.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/ecs/v1.63.4)

Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.67.1 to 1.73.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.67.1...service/s3/v1.73.1)

Updates `github.com/aws/aws-sdk-go-v2/service/elasticache` from 1.47.1 to 1.50.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.47.1...service/s3/v1.50.1)

Updates `github.com/aws/aws-sdk-go-v2/service/glue` from 1.121.0 to 1.128.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.121.0...service/glue/v1.128.1)

Updates `github.com/aws/aws-sdk-go-v2/service/iam` from 1.44.1 to 1.47.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/iot/v1.44.1...service/s3/v1.47.3)

Updates `github.com/aws/aws-sdk-go-v2/service/identitystore` from 1.29.1 to 1.32.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.29.1...v1.32.2)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.42.1 to 1.45.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.42.1...service/s3/v1.45.1)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.74.1 to 1.77.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.74.1...service/rds/v1.77.2)

Updates `github.com/aws/aws-sdk-go-v2/service/memorydb` from 1.28.1 to 1.31.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.28.1...config/v1.31.2)

Updates `github.com/aws/aws-sdk-go-v2/service/opensearch` from 1.49.0 to 1.52.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.49.0...service/s3/v1.52.1)

Updates `github.com/aws/aws-sdk-go-v2/service/organizations` from 1.40.1 to 1.44.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.40.1...service/kms/v1.44.2)

Updates `github.com/aws/aws-sdk-go-v2/service/rds` from 1.100.1 to 1.104.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.100.1...service/rds/v1.104.1)

Updates `github.com/aws/aws-sdk-go-v2/service/redshift` from 1.55.1 to 1.58.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.55.1...service/s3/v1.58.1)

Updates `github.com/aws/aws-sdk-go-v2/service/redshiftserverless` from 1.28.1 to 1.31.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.28.1...config/v1.31.2)

Updates `github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi` from 1.27.1 to 1.30.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.27.1...v1.30.2)

Updates `github.com/aws/aws-sdk-go-v2/service/rolesanywhere` from 1.18.1 to 1.21.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.18.1...v1.21.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.85.1 to 1.87.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.85.1...service/s3/v1.87.3)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.36.1 to 1.39.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.36.1...service/amp/v1.39.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.35.1 to 1.38.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/pi/v1.35.1...v1.38.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.39.1 to 1.42.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ivs/v1.39.1...service/sqs/v1.42.3)

Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.61.1 to 1.64.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/iot/v1.64.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ssoadmin` from 1.32.1 to 1.35.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.1...service/iot/v1.35.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.35.1 to 1.38.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/pi/v1.35.1...v1.38.2)

Updates `github.com/aws/smithy-go` from 1.22.5 to 1.23.0
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/smithy-go/compare/v1.22.5...v1.23.0)

Updates `github.com/aws/smithy-go/tracing/smithyoteltracing` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/smithy-go/compare/metrics/smithyotelmetrics/v1.0.6...metrics/smithyotelmetrics/v1.0.7)

Updates `github.com/beevik/etree` from 1.5.1 to 1.6.0
- [Release notes](https://github.com/beevik/etree/releases)
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/beevik/etree/compare/v1.5.1...v1.6.0)

Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](https://github.com/coreos/go-systemd/compare/v22.5.0...v22.6.0)

Updates `github.com/fsouza/fake-gcs-server` from 1.52.2 to 1.52.3
- [Release notes](https://github.com/fsouza/fake-gcs-server/releases)
- [Commits](https://github.com/fsouza/fake-gcs-server/compare/v1.52.2...v1.52.3)

Updates `github.com/go-jose/go-jose/v4` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2)

Updates `github.com/golang-jwt/jwt/v5` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0)

Updates `github.com/grafana/pyroscope-go` from 1.2.4 to 1.2.7
- [Release notes](https://github.com/grafana/pyroscope-go/releases)
- [Commits](https://github.com/grafana/pyroscope-go/compare/v1.2.4...v1.2.7)

Updates `github.com/mark3labs/mcp-go` from 0.36.0 to 0.38.0
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](https://github.com/mark3labs/mcp-go/compare/v0.36.0...v0.38.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.30 to 1.14.32
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.30...v1.14.32)

Updates `github.com/mdlayher/netlink` from 1.7.2 to 1.8.0
- [Release notes](https://github.com/mdlayher/netlink/releases)
- [Changelog](https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mdlayher/netlink/compare/v1.7.2...v1.8.0)

Updates `github.com/ohler55/ojg` from 1.26.8 to 1.26.10
- [Release notes](https://github.com/ohler55/ojg/releases)
- [Changelog](https://github.com/ohler55/ojg/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/ohler55/ojg/compare/v1.26.8...v1.26.10)

Updates `github.com/oracle/oci-go-sdk/v65` from 65.97.0 to 65.99.1
- [Release notes](https://github.com/oracle/oci-go-sdk/releases)
- [Changelog](https://github.com/oracle/oci-go-sdk/blob/master/CHANGELOG.md)
- [Commits](https://github.com/oracle/oci-go-sdk/compare/v65.97.0...v65.99.1)

Updates `github.com/sigstore/sigstore-go` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.1.0...v1.1.1)

Updates `github.com/snowflakedb/gosnowflake` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/snowflakedb/gosnowflake/releases)
- [Changelog](https://github.com/snowflakedb/gosnowflake/blob/master/release.go)
- [Commits](https://github.com/snowflakedb/gosnowflake/compare/v1.15.0...v1.16.0)

Updates `github.com/spiffe/go-spiffe/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/spiffe/go-spiffe/releases)
- [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md)
- [Commits](https://github.com/spiffe/go-spiffe/compare/v2.5.0...v2.6.0)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.1)

Updates `github.com/testcontainers/testcontainers-go` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.37.0...v0.38.0)

Updates `github.com/testcontainers/testcontainers-go/modules/mysql` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.37.0...v0.38.0)

Updates `github.com/zitadel/oidc/v3` from 3.43.0 to 3.44.0
- [Release notes](https://github.com/zitadel/oidc/releases)
- [Changelog](https://github.com/zitadel/oidc/blob/main/.releaserc.js)
- [Commits](https://github.com/zitadel/oidc/compare/v3.43.0...v3.44.0)

Updates `gitlab.com/gitlab-org/api/client-go` from 0.134.0 to 0.142.5
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v0.134.0...v0.142.5)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.38.0)

Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0
- [Commits](https://github.com/golang/crypto/compare/v0.40.0...v0.41.0)

Updates `golang.org/x/mod` from 0.26.0 to 0.27.0
- [Commits](https://github.com/golang/mod/compare/v0.26.0...v0.27.0)

Updates `golang.org/x/net` from 0.42.0 to 0.43.0
- [Commits](https://github.com/golang/net/compare/v0.42.0...v0.43.0)

Updates `golang.org/x/term` from 0.33.0 to 0.34.0
- [Commits](https://github.com/golang/term/compare/v0.33.0...v0.34.0)

Updates `golang.org/x/text` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.27.0...v0.28.0)

Updates `google.golang.org/api` from 0.243.0 to 0.247.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.243.0...v0.247.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250728155136-f173205681a0 to 0.0.0-20250825161204-c5933d9347a5
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.74.2 to 1.75.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.74.2...v1.75.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8

Updates `helm.sh/helm/v3` from 3.18.5 to 3.18.6
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.18.5...v3.18.6)

Updates `k8s.io/api` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/api/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.3 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.33.3...v0.34.0)

Updates `k8s.io/apiserver` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.33.3...v0.34.0)

Updates `k8s.io/cli-runtime` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.33.3...v0.34.0)

Updates `k8s.io/client-go` from 0.33.3 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.33.3...v0.34.0)

Updates `k8s.io/component-base` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/component-base/compare/v0.33.3...v0.34.0)

Updates `k8s.io/kubectl` from 0.33.3 to 0.34.0
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.33.3...v0.34.0)

Updates `k8s.io/utils` from 0.0.0-20241210054802-24370beab758 to 0.0.0-20250604170112-4c0f3b243397
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/cloudsqlconn
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/compute
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/spanner
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ClickHouse/ch-go
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-version: 1.20.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodbstreams/attributevalue
  dependency-version: 1.19.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/rds/auth
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/applicationautoscaling
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/athena
  dependency-version: 1.55.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dax
  dependency-version: 1.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodbstreams
  dependency-version: 1.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.249.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.63.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/elasticache
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/glue
  dependency-version: 1.128.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/iam
  dependency-version: 1.47.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/identitystore
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.77.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/memorydb
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/opensearch
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/organizations
  dependency-version: 1.44.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/rds
  dependency-version: 1.104.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/redshift
  dependency-version: 1.58.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/redshiftserverless
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi
  dependency-version: 1.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/rolesanywhere
  dependency-version: 1.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.87.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm
  dependency-version: 1.64.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssoadmin
  dependency-version: 1.35.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/smithy-go/tracing/smithyoteltracing
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/beevik/etree
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fsouza/fake-gcs-server
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grafana/pyroscope-go
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/mdlayher/netlink
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ohler55/ojg
  dependency-version: 1.26.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/oracle/oci-go-sdk/v65
  dependency-version: 65.99.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/snowflakedb/gosnowflake
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/spiffe/go-spiffe/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go/modules/mysql
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/zitadel/oidc/v3
  dependency-version: 3.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 0.142.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/mod
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.247.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250825161204-c5933d9347a5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/kubectl
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20250604170112-4c0f3b243397
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy all

* Bump github.com/sigstore/rekor to v1.4.1

* Add ap-southeast-6 AWS region

* make grpc

* make -C integrations/operator crd

* Update tbot golden files

* Revert cloud.google.com/go/spanner to 1.83.0

The update to 1.85.0 brought changes which were causing tests to
fail and should be remediated in a separate change.

```
 {"timestamp":"2025-09-04T14:10:31Z","level":"debug","caller":"spanner/interceptors.go:60","message":"failed to handle Spanner RPC","component":"db:service","id":"5a639394-c212-41b5-92e8-77e8e869a6dc","db":"my-spanner","full_method":"/google.spanner.v1.Spanner/CreateSession","error":"rpc error: code = Unimplemented desc = method CreateSession not implemented"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":":0","message":"Multiplexed session is not enabled on this project, continuing with regular sessions"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":"eventstest/channel.go:46","message":"EmitAuditEvent","component":"channel_emitter","event_type":"db.session.spanner.rpc","event_code":"TSPN001I"}
{"timestamp":"2025-09-04T14:10:31Z","level":"info","caller":"db/auth_test.go:356","message":"Generating Cloud Spanner auth token source","component":"auth:test","database_user":"admin@project-id.iam.gserviceaccount.com"}
    spanner_test.go:307:
        	Error Trace:	/__w/teleport/teleport/lib/srv/db/spanner_test.go:307
        	Error:      	Not equal:
        	            	expected: "ExecuteStreamingSql"
        	            	actual  : "CreateSession"

        	            	Diff:
        	            	--- Expected
        	            	+++ Actual
        	            	@@ -1 +1 @@
        	            	-ExecuteStreamingSql
        	            	+CreateSession
        	Test:       	TestAuditSpanner/successful_flow
```

* fix kubeconfig tests

* revert rekor and testify updates

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <tim.ross@goteleport.com>
2025-09-05 13:33:30 +00:00
Sakshyam Shah 46014e3055 add entra_id_groups_provider field to oidc connector (#58098)
* add EntraIDGroupsProvider prorot

* use bool enabled state

* add EntraIDGroupsProvider getter and config validator

* make default checkandsetter private

* run make -C integrations/operator crd

* make -C integrations/terraform docs

* tuck entra groups provider checker under the same type and add test

* fix imports

* honour groups source link by default and make entra id groups provider config opt-in

* run crd and terraform gens

* elaborate graph_endopint comment

* rename force_disable -> disabled

* run terraform and crd docgens
2025-09-01 16:47:12 +00:00
milos-teleport 1beade1a45 Fix information in the tbot helm chart readme (#58450)
* Fix information in the tbot helm chart readme

* another correction

* also apply to lint

* also update the helm-reference
2025-08-28 15:13:28 +00:00
Leszek Charkiewicz 21a137589d Support tbot embedding in access plugins and event-handler charts (#57425)
* plugins: support tbot embedding in access plugins

* plugins: support tbot embedding in event-handler

* update docs

* fix ConfigMaps and Deployments

* remove <plugin>.teleportAddress helper

* fix comments

* fixes
2025-08-25 12:28:07 +00:00
rhammonds-teleportandRyan Hammonds 7c41b86e6a OIDC: Enable Separate 'Request Object Mode' For MFA Flow (#58177)
* OIDC: Allow users to specify a separate 'request_object_mode' specifically for MFA. If 'request_object_mode' is omitted from MFA settings, then the base connector's configuration it used for both login and MFA flows.

* gen crds

* Add a word of caution about the default behavior of 'OIDCConnectorMFASettings.RequestObjectMode' if omitted.

---------

Co-authored-by: Ryan Hammonds <ryan.hammonds@Ryans-MacBook-Pro.local>
2025-08-22 17:27:25 +00:00
Ben ArentandTiago Silva 31143cca86 Update Helm chart guide reference link (#58188)
* Update Helm chart guide link and access_graph version

Changed the Helm chart guide URL in the example chart index.html to point to the reference documentation. Also updated the access_graph version in docs/config.json from 1.28.1 to 1.28.0.

* Update docs/config.json

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>

---------

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
2025-08-22 16:00:07 +00:00
86852353ed GCP AlloyDB support (#56078)
* Proto changes

* Types changes

* Configuration changes

* Cloud client, `go.mod`

* Add method to fetch AlloyDB token

* Engine changes

* `make -C integrations/operator crd`

* lint fix

* `make -C integrations/terraform docs`

* change GCPCloudSQL comment in proto

* Update lib/srv/db/postgres/alloydb.go

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>

* Update lib/srv/db/common/auth.go

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>

* address review comments

* lint fix

* Rename `is_alloy_db` to `is_alloydb`

* Clarify comments for AlloyDB database fields in DatabaseGCP struct

* Nudge user towards proper permissions

* Update lib/srv/db/postgres/alloydb.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* remove todo in favor of longer comment

* reduce indentation

* suggest custom IAM role with minimal required scope

* Major implementation update:
- new URI format `alloydb://<connection uri>`
- removed some configuration fields; added `gcp.alloydb.endpoint` instead
- added connection URI resolution against configured endpoint type
- made query cancellation and health checks aware of AlloyDB needs
- unified query cancellation logic to use the `connector` type

* Revert description changes for flags; these are redundant for AlloyDB

* Enhance error handling in ParseAlloyDBConnectionURI function and add comprehensive test cases for invalid URIs

* split `endpoint` into `endpoint_type` and `endpoint_override`

* Remove indentation from custom error messages

* Log resolved database address

* fix serialization test

* explain the logic in `getGCPType`

* use string instead of enum for endpoint type

* add missing cast

---------

Co-authored-by: Marco Dinis <marco.dinis@goteleport.com>
Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
2025-08-20 15:04:12 +00:00
Dan Upton 715aeb9db1 MWI: kubernetes/argo-cd service (#58000)
* K8S client supports `Apply` operations now

* MWI: Add `kubernetes/argo-cd` service type

* Add argocd to the tbot Helm chart

* Fix broken service builder calls in terraform integration

* Fix linting errors

* Make test assertions easier to read

* Use `t.Context` in test helper

* Support for user-defined secret annotations
2025-08-20 10:02:07 +00:00
Gavin Frazar 36a386bfae Add ElastiCache Serverless metadata protobuf (#58014) 2025-08-19 22:10:04 +00:00