Carson Anderson 1d85289ba5 postgres: add client certificate reloading for pg compatible backends/events (#62616) ...

* Update pg backend types to allow cert reloading

* fix interface method name, formatting

* fix missing rename

* fix missed formating fix

* fix name, move config to query param

* rename var

* consistent backend name

* change names, change to greater than check

2026-01-09 18:19:18 +00:00

..

accesslists

Allow accesslist cycles pt.1 (#60034)

2025-12-31 17:08:55 +00:00

accessmonitoring

access_monitoring_rule: evaluate rules using UserLoginState (#60782)

2025-11-07 21:25:37 +00:00

agentless

…

asciitable

tsh request search, add support for --format flag (#62015)

2025-12-09 14:49:29 +00:00

auditd

…

auth

Store ValidatedMFAChallenge resource after successful MFA challenge validation (#62494)

2026-01-09 15:42:38 +00:00

authz

Store ValidatedMFAChallenge resource after successful MFA challenge validation (#62494)

2026-01-09 15:42:38 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066)

2025-12-09 17:59:21 +00:00

autoupdate

Managed Updates: Kube Canaries (#61360)

2025-12-12 04:47:21 +00:00

aws

Fix tsh app login when setting up access for AWS using Roles Anywhere integration (#60044)

2025-10-14 15:21:20 +00:00

backend

postgres: add client certificate reloading for pg compatible backends/events (#62616)

2026-01-09 18:19:18 +00:00

benchmark

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

boundkeypair

MWI: Remove bound keypair experiment flag (#56592)

2025-07-09 23:01:29 +00:00

bpf

use a map of strings to empty structs instead of bools for ESR configured events map (#61523)

2025-11-19 14:59:35 +00:00

cache

implement instance inventory frontend (#62027)

2025-12-19 23:29:12 +00:00

cgroup

Replace aquasecurity/libbpfgo with cilium/ebpf (#60541)

2025-11-11 15:33:32 +00:00

client

Add SSH client keyboard-interactive auth handler (#62694)

2026-01-09 17:48:23 +00:00

cloud

Azure VM discovery: stats, refactor, add test coverage (#62513)

2026-01-09 13:11:50 +00:00

componentfeatures

Add Component Feature Advertisement (#61647)

2025-12-19 19:06:39 +00:00

config

moving scoped token secret into the scoped token spec in order to make the resource (#62112)

2026-01-05 18:53:19 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967)

2025-12-04 09:40:10 +00:00

connectmycomputer

…

cryptosuites

adding rotation process to Manager and exposing with new RPCs and (#57577)

2025-08-26 21:06:16 +00:00

darwin

…

decision

adding support for scoped joining of SSH nodes using dynamic tokens (#60362)

2025-10-28 22:00:18 +00:00

defaults

Warn when connecting to cloud not on 443 (#62356)

2025-12-30 19:31:18 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674)

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294)

2025-11-12 20:37:19 +00:00

devicetrust

Unify device verification logic under lib/devicetrust/authz (#62523)

2025-12-30 14:11:28 +00:00

events

postgres: add client certificate reloading for pg compatible backends/events (#62616)

2026-01-09 18:19:18 +00:00

expression

implement filtering and sorting (#61089)

2025-12-05 01:09:03 +00:00

fixtures

Reduce testing symbols in production binaries (#55360)

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205)

2025-11-18 00:46:04 +00:00

hardwarekey

Remove (auth.Server) SetClock (#60526)

2025-10-29 15:19:44 +00:00

healthcheck

Refactor lib/srv/db/endpoints package (#61752)

2025-11-25 18:02:24 +00:00

httplib

Add login_hint to identifier first login for OIDC (#60975)

2025-11-14 23:16:21 +00:00

integrations

Add support to sign MCP egress JWT with OIDC CA (#62043)

2026-01-02 15:16:23 +00:00

inventory

Skip app_server heartbeats with no changes (#61960)

2025-12-10 16:02:34 +00:00

itertools

Add DynamicBatchSizeIter util (#61157)

2025-11-12 09:15:01 +00:00

join

Allow nodes to join the cluster based on their AWS Organization (#62023)

2026-01-08 10:46:16 +00:00

jwt

Add support to sign MCP egress JWT with OIDC CA (#62043)

2026-01-02 15:16:23 +00:00

kube

Record Kubernetes session join/leave events to session recordings (#62408)

2025-12-22 17:09:14 +00:00

labels

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

limiter

Fix WithUnauthenticatedLimiter and WithAccessDeniedLimiter rate limiters (#61788)

2025-11-26 13:22:12 +00:00

linux

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598)

2025-08-05 18:41:26 +00:00

loglimit

…

modules

Close auth servers in tests (#62051)

2025-12-14 20:48:53 +00:00

msgraph

add msgraph test suite (#61842)

2025-12-05 20:41:25 +00:00

multiplexer

Bump the go group across 1 directory with 87 updates (#60972)

2025-11-04 21:59:52 +00:00

observability

metrics.Registry.Wrap() handle empty subsystems properly (#61392)

2025-11-14 21:21:48 +00:00

oidc

Add a caching OIDC validator for use with Kubernetes OIDC (#57862)

2025-09-25 02:01:40 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420)

2025-06-10 11:09:04 +00:00

openssh

…

pam

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

player

chore: Bump Go to 1.25.1 (#58875)

2025-09-15 21:49:53 +00:00

plugin

Add Okta plugin setting for time between imports (#59594)

2025-10-13 09:42:28 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187)

2025-12-19 06:27:17 +00:00

proxy

Scopes: validate scope when dialing (#61859)

2025-12-13 00:12:57 +00:00

puttyhosts

…

relaypeer

Relay SSH routing logic and transport server (#58855)

2025-09-25 15:18:03 +00:00

relaytransport

Kubernetes forwarding in the Relay Service (#60974)

2025-11-14 22:25:00 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974)

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423)

2025-08-01 18:42:18 +00:00

resourceusage

…

resumption

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

reversetunnel

keystore: add active health checker (#61962)

2026-01-05 15:35:08 +00:00

reversetunnelclient

implement app server watcher (#62128)

2025-12-31 16:08:38 +00:00

saml

…

scopes

moving scoped token secret into the scoped token spec in order to make the resource (#62112)

2026-01-05 18:53:19 +00:00

secret

Fix log messages and tsh command description (#61037)

2025-11-05 15:31:30 +00:00

secretsscanner

Avoid race conditions in getHostUsers (#61218)

2025-11-11 23:29:35 +00:00

selinux

[teleport-update] Fix SELinux warning and error breaking teleport-update remove (#59977)

2025-10-06 22:35:19 +00:00

service

moving scoped token secret into the scoped token spec in order to make the resource (#62112)

2026-01-05 18:53:19 +00:00

services

Store ValidatedMFAChallenge resource after successful MFA challenge validation (#62494)

2026-01-09 15:42:38 +00:00

session

Database Web UI REPL handles window resizing (#58641)

2025-09-08 20:18:53 +00:00

shell

…

srv

Fix logical error in TestStaticHostUserHandler (#62735)

2026-01-09 16:34:08 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292)

2025-09-18 19:43:20 +00:00

sshca

adding support for scoped joining of SSH nodes using dynamic tokens (#60362)

2025-10-28 22:00:18 +00:00

sshutils

Fix path errors moderated sftp (#62281)

2025-12-22 21:32:13 +00:00

system

…

tbot

MWI: Add /wait endpoint and tbot wait CLI helper (#62191)

2026-01-09 02:10:36 +00:00

teleterm

Refactor Desktop Connection Proxy / Improve Error Handling on Teardown (#58986)

2025-12-12 20:33:28 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266)

2025-10-15 15:21:54 +00:00

tfgen

Allow IAM Joins to use an Organization ID with integration creds (#62395)

2026-01-05 13:40:16 +00:00

tlsca

adding support for scoped joining of SSH nodes using dynamic tokens (#60362)

2025-10-28 22:00:18 +00:00

tpm

TPM method support in new join service (#61075)

2025-11-19 21:46:19 +00:00

uds

…

ui

…

usagereporter

Add usage events for the MWI GitHub Actions <> Kubernetes Wizard (#61919)

2025-12-08 12:07:25 +00:00

usertasks

EC2 Auto Discover: add new required permission account:ListRegions (#61967)

2025-12-04 09:40:10 +00:00

utils

Sort generated CLI docs flag and argument tables (#62467)

2026-01-08 19:53:42 +00:00

versioncontrol

core scope pinning logic (#58377)

2025-10-01 20:30:50 +00:00

vnet

VNet on Windows: Force refresh policies under group policy key, configure DNS only when necessary (#61881)

2025-12-08 10:59:45 +00:00

watcher

Adjust log level on some noisy entries (#61076)

2025-11-06 21:03:31 +00:00

web

Device Trust web: Ensure query params of redirect URL are not lost (#62389)

2026-01-07 14:31:29 +00:00

windowsexec

…

winpki

Remove legacy CRL generation (#62428)

2025-12-30 21:48:12 +00:00

runtimeflags.go

…