rosstimothy e82eceb456 Make resolved access requests immutable (#66736) ...

Prevent access requests in APPROVED, DENIED, or PROMOTED states from
being updated through SetAccessRequestState, including same-state
updates that could otherwise mutate resolution metadata.

2026-05-28 14:11:41 +00:00

..

accessgraph/apiclient

Add OpenAPI-generated access graph REST client for tctl (#65949)

2026-05-11 22:50:05 +00:00

accesslists

refactor: return sentinel ErrDeniedAccessListDeletion for acl deletion error (#66692)

2026-05-13 15:42:23 +00:00

accessmonitoring

…

agentless

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

asciitable

…

auth

Make resolved access requests immutable (#66736)

2026-05-28 14:11:41 +00:00

authz

fix: Propagate DeviceExtensions in remote user identity mapping (#67016)

2026-05-24 01:22:12 +00:00

automaticupgrades

…

autoupdate

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

aws

Write AWS config files with stricter permissions (#66825)

2026-05-21 00:14:03 +00:00

backend

Fix sqlite backend KeepAlive revision mismatch (#66930)

2026-05-21 13:52:38 +00:00

benchmark

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

boundkeypair

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366)

2026-04-16 02:06:24 +00:00

bpf

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

cache

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

cgroup

…

client

Add leaf cluster to MFA prompt and fix resource casing; Improve look of MFA modal in Connect (#66714)

2026-05-14 07:27:11 +00:00

cloud

Fix Azure/GCP IMDS tests when HTTP_PROXY is set (#66996)

2026-05-27 15:42:17 +00:00

componentfeatures

[Web] Account for interim private releases in appServerEffectiveFeatures (#66911)

2026-05-21 19:32:26 +00:00

config

Replace FileConfig.DebugDumpToYAML with YAMLString (#66903)

2026-05-27 13:39:33 +00:00

configurators

…

connectmycomputer

…

cryptosuites

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

darwin

…

decision

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

defaults

[refactoring] remove some deadcode (#66583)

2026-05-11 13:36:46 +00:00

desktop

…

devicetpm

…

devicetrust

Tightens DMI output parser (#66992)

2026-05-28 01:50:34 +00:00

events

Add web ui audit event for AccessGraphSettingsUpdateCode (#66530)

2026-05-08 09:30:47 +00:00

expression

…

fipscheck

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690)

2026-05-20 00:42:41 +00:00

fixtures

…

gcp

…

hardwarekey

lib/tbot: Add identity/key-agent service (#66535)

2026-05-13 10:04:29 +00:00

healthcheck

Support username in role templates and expressions (#64888)

2026-04-15 16:29:41 +00:00

httplib

Add SSE events read/write helper functions to httplib (#67042)

2026-05-27 14:00:59 +00:00

integrations

app: Consolidate app name and public_addr validation (#65728)

2026-05-20 05:04:19 +00:00

inventory

app: Consolidate app name and public_addr validation (#65728)

2026-05-20 05:04:19 +00:00

itertools

…

join

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

jwt

Add Device Bound Session Credentials to App Access (#65431)

2026-04-28 22:35:47 +00:00

kube

Extend kube mock server with a generic resource store (#66902)

2026-05-22 14:21:44 +00:00

labels

…

limiter

Rate limiter lib - update error (#66827)

2026-05-27 12:01:50 +00:00

linux

…

loginrule

…

loglimit

…

modules

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690)

2026-05-20 00:42:41 +00:00

msgraph

delete unused ErrMissingDeltaToken (#67131)

2026-05-27 18:21:45 +00:00

multiplexer

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

observability

…

oidc

…

okta

…

openssh

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

player

…

plugin

…

plugins

…

proxy

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

relaypeer

…

relaytransport

…

relaytunnel

…

release

…

resourceusage

…

resumption

…

reversetunnel

Fix: scoped remote conn cleanup (#66990)

2026-05-26 19:01:34 +00:00

reversetunnelclient

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

scopes

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

secret

…

secretsscanner

Extract gRPC bidi proxy to separate package and fix edge cases (#66143)

2026-05-11 10:38:30 +00:00

service

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

services

Make resolved access requests immutable (#66736)

2026-05-28 14:11:41 +00:00

session

…

srv

fix(aws-sync): fix data race and wrong fallback in EC2 fetcher (#67135)

2026-05-28 10:29:18 +00:00

sshagent

…

sshca

Always populate AllowedResourceIDs on decoded Identity (#66870)

2026-05-21 18:13:15 +00:00

sshutils

Capture reexec networking stderr for logging (#65202)

2026-04-29 20:04:39 +00:00

subca

Refactor duplicated CA override logic into lib/subca (#67023)

2026-05-27 14:32:19 +00:00

system

…

systemd

Add join failure handling for ec2 using readyz health check (#64296)

2026-04-20 14:59:21 +00:00

tbot

Merge branch 'master' of github.com:gravitational/teleport into STeve/vnet_process_app_https_tunnel (#66451)

2026-05-27 14:44:32 +00:00

teleterm

Connect: Avoid falling back to system CA in tshd gRPC server when cert cannot be read (#67038)

2026-05-28 08:52:15 +00:00

terminal

…

tfgen

tfgen: add hash to sanitized resource name (#66227)

2026-04-30 15:46:30 +00:00

tlsca

Always populate AllowedResourceIDs on decoded Identity (#66870)

2026-05-21 18:13:15 +00:00

tlscatest

…

tpm

Fix ./lib/tpm tests using -tags=tpmsimulator (#65807)

2026-04-16 15:07:00 +00:00

uds

…

ui

…

usagereporter

fix: Use pointer types for generated protobuf messages (#66777)

2026-05-20 18:28:42 +00:00

usertasks

Add support for enrolling uniform Azure VM Scale Sets (#66631)

2026-05-20 16:08:33 +00:00

utils

MCP: Reject tools/call Requests without lowercase "name" param (#66989)

2026-05-27 19:34:58 +00:00

versioncontrol

…

vnet

Merge branch 'master' of github.com:gravitational/teleport into STeve/vnet_process_app_https_tunnel (#66451)

2026-05-27 14:44:32 +00:00

watcher

…

web

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

windowsexec

…

windowsservice

…

winpki

Calculate CA overrides on GenerateDatabaseCert (#66770)

2026-05-20 14:21:22 +00:00