teleport

accessgraph/apiclient

access-review[1]: Add core logic for tctl access-review command (#68283 )

2026-07-15 23:39:45 +00:00

accesslists

Refactor and move acl terraform gen from enterprise (#277 )

2026-08-25 11:35:10 -05:00

accessmonitoring

accessmonitoring: Evaluate constrained resources in access requests (#287 )

2026-08-25 11:35:10 -05:00

agentless

Add scope support to OpenSSH nodes (#64819 )

2026-05-19 18:41:29 +00:00

appresource

appresource: Add rule and decision types (#195 )

2026-08-25 11:35:10 -05:00

asciitable

Fix tctl access-review table from overflowing terminal width (#190 )

2026-08-25 11:35:10 -05:00

auth

Remove dead HeartbeatV1 code for v19 (server-side) (#502 )

2026-08-25 11:35:10 -05:00

authz

Remove dead HeartbeatV1 code for v19 (server-side) (#502 )

2026-08-25 11:35:10 -05:00

automaticupgrades

…

autoupdate

Sign managed updates Linux tarballs with cosign (#68053 )

2026-08-07 20:05:42 +00:00

aws

[AWSIC] Tightened filter validation and application (#67234 )

2026-06-19 03:48:01 +00:00

backend

Remove Firestore key migration (#69590 )

2026-08-12 21:24:08 +00:00

benchmark

Properly escape resource names in predicate expressions (#67227 )

2026-05-29 13:38:48 +00:00

boundkeypair

Deprecate recording of join metadata into bot instance record (#69571 )

2026-08-13 08:15:04 +00:00

bpf

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650 )

2026-06-24 18:07:01 +00:00

cache

Remove unused access list matcher plumbing (#347 )

2026-08-25 11:35:10 -05:00

cgroup

…

client

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

cloud

Integrate Windows VM discovery in to Azure watcher (#68807 )

2026-08-11 09:21:25 +00:00

componentfeatures

types: add ResourcePrincipalSet to unified resources protos and types (#68879 )

2026-08-06 23:44:07 +00:00

config

teleport reconfigure (#250 )

2026-08-25 11:35:10 -05:00

configurators

…

connectmycomputer

…

cryptosuites

Add AppClient CA (#66273 )

2026-04-30 19:05:23 +00:00

darwin

Update Go version to v1.26.4 (#67476 )

2026-06-08 14:28:40 +00:00

decision

Fix agent not enforcing MFA device lock after in-band MFA. (#224 )

2026-08-25 11:35:10 -05:00

defaults

Add Linux desktop support (#65841 )

2026-07-09 07:41:47 +00:00

desktop

Add Linux desktop support (#65841 )

2026-07-09 07:41:47 +00:00

devicetpm

…

devicetrust

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

events

app: Add audit event for role v9 HTTP deny (#194 )

2026-08-25 11:35:10 -05:00

expression

Add set conversion helper for generic_oidc predicate expressions (#68699 )

2026-07-22 21:03:16 +00:00

fipscheck

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690 )

2026-05-20 00:42:41 +00:00

fixtures

Add fixture for SAML connector without role-mapping (#69412 )

2026-08-06 12:22:13 +00:00

gcp

…

hardwarekey

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

healthcheck

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

httplib

Restore Stripe CSP for stripe-managed tenants (#68824 )

2026-07-31 16:27:51 +00:00

integrations

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

inventory

Implement tctl observability (#67904 )

2026-08-12 22:23:22 +00:00

itertools

prepare scoped roles/assignments for namespacing (#68457 )

2026-07-16 17:41:49 +00:00

join

Scopes: support tpm joining (#289 )

2026-08-25 11:35:10 -05:00

jwt

Update Go version to v1.26.4 (#67476 )

2026-06-08 14:28:40 +00:00

kube

Clean up stale doc comments in kube roundtrip (#68532 )

2026-08-05 21:27:28 +00:00

labels

…

limiter

Make rejected accepts retryable in lib/limiter (#66928 )

2026-06-22 19:05:20 +00:00

linux

…

loginrule

…

loglimit

…

mobile/verify/enroll

lib/client/proxy/insecure: Add support for api/client.ALPNConnUpgradePing (#69355 )

2026-08-07 07:00:29 +00:00

modules

Use split Identity Security entitlements (#68944 )

2026-07-31 09:02:59 +00:00

msgraph

msgraphtest: monkeypatch user and group delta endpoint (#67980 )

2026-06-22 14:08:00 +00:00

multiplexer

chore: Update k8s modules to v0.36.2 (#68645 )

2026-07-15 19:01:47 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919 )

2026-03-24 14:17:20 +00:00

oidc

Caching OIDC validator improvements (#67913 )

2026-06-26 02:57:09 +00:00

okta

…

openssh

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

player

Deflake TestPlayerError (#68132 )

2026-06-29 14:39:57 +00:00

plugin

Okta: Remove plugin validation (moved to e) (#64648 )

2026-08-03 17:56:40 +00:00

plugins

…

proxy

Add Scope Namespacing support for SSH Servers (Nodes) (#69213 )

2026-08-07 22:49:04 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

relaypeer

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

relaytunnel

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

release

…

resourceusage

…

resumption

Set Teleport version in SSH clients (#65004 )

2026-04-07 18:06:00 +00:00

reversetunnel

MFA service stores and propagates the device ID used to satisfy a challenge. (#69572 )

2026-08-13 15:26:48 +00:00

reversetunnelclient

Add Linux desktop support (#65841 )

2026-07-09 07:41:47 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401 )

2026-04-22 15:54:43 +00:00

scopes

More descriptive error for scoped token validation (#628 )

2026-08-25 11:35:10 -05:00

secret

…

secretsscanner

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

service

Implement tctl observability (#67904 )

2026-08-12 22:23:22 +00:00

services

Remove unused access list matcher plumbing (#347 )

2026-08-25 11:35:10 -05:00

session

…

srv

Remove dead HeartbeatV1 code for v19 (server-side) (#502 )

2026-08-25 11:35:10 -05:00

sshagent

Allow concurrent connections to forwarded SSH agents (#67116 )

2026-06-01 08:56:52 +00:00

sshca

[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785 )

2026-07-31 21:08:00 +00:00

sshutils

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

subca

Add sub-CA cert auth type to sub-kind mapper func. (#252 )

2026-08-25 11:35:10 -05:00

system

…

systemd

Add join failure handling for ec2 using readyz health check (#64296 )

2026-04-20 14:59:21 +00:00

tbot

MWI: tbot: Add scoped app access support (output and tunnel) (#291 )

2026-08-25 11:35:10 -05:00

teleterm

feat: added llm apps proxy support via teleport connect- #68647 (#239 )

2026-08-25 11:35:10 -05:00

terminal

…

tfgen

Refactor and move acl terraform gen from enterprise (#277 )

2026-08-25 11:35:10 -05:00

tlsca

[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785 )

2026-07-31 21:08:00 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113 )

2026-03-02 16:29:45 +00:00

tpm

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

uds

…

ui

…

usagereporter

MWI: Bot Scope Namespacing (#68253 )

2026-08-06 09:55:16 +00:00

usertasks

discovery: include Azure identity in subscription failure UserTasks (#69056 )

2026-08-12 11:57:22 +00:00

utils

Linux: fix potential deadlock/segfault when calling into libnss for user mgmt (#295 )

2026-08-25 11:35:10 -05:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145 )

2026-04-01 12:34:10 +00:00

vnet

[vnet] Skip rewriting /etc/resolver files when DNS config is unchanged on macOS (#68746 )

2026-08-11 17:21:55 +00:00

watcher

…

web

fix instances ui bug (#69551 )

2026-08-13 20:58:27 +00:00

windowsexec

…

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438 )

2026-03-19 07:45:58 +00:00

winpki

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00