Release 13.4.4

[camscale]

13.4.4 (10/18/23)

• Prevented remote proxies from impersonating users from different clusters. #33540
• Web SSH sessions are terminated right away when a user closes the tab. #33532
• Added the ability for bots to submit access request reviews. #33510
• Added access review notifications when logging in via tsh or running tsh status. #33469
• Added optional security group selection in AWS RDS Discovery flow. #33454
• Added new "Identity Governance & Security" navigation section in web UI. #33425
• Fixed access list audit log messages to properly include user names. #33384
• Added notification icon to Web UI to show Access List review notifications. #33382
• Fixed access lists to allow them to affect access request permissions. #33351
• Added job to update the Teleport version for deployments in Amazon ECS used during RDS Enrollment. #33311
• Added support for Windows AD root domain for PKI operations. #33276

Unsure

• [v13] Remove sending tracingContext in NewClientConn #33584
  • This is not a backport, but a direct change to branch/v13 - not sure how this affects users.

Ignored

• Docs
  • [v13] docs: Reorganize and revise moderated sessions #33546
  • [v13] docs: update okta service setup #33465
  • [v13] [docs] clarify RDS/Aurora databases getting modified #33411
  • [v13] docs: Add agent updates follow the cluster upgrade to the FAQ #33401
  • [v13] docs: Fix a couple of typos and reword scenario descriptions #33398
  • [v13] Add Docker to Slack access request plugin #33392
  • [v13] docs: Add Docker to Mattermost access request plugin #33389
  • [v13] docs: Add Docker to MSFT teams plugin #33386
  • [v13] docs: update macos app remove command to delete dir and correct fips debug container address #33368
  • [auto] docs: Update version to v13.4.3 #33360
  • [v13] docs: Add Docker to email access request plugin #33320
  • [v13] docs: include servicenow and opsgenie in plugin index #33293
  • [v13] docs: join_sessions overrides the deny rule for sessions a user is allowed … #33160
  • [v13] Add pcscd install instructions for hardware key support #33377
• Test-only changes
  • [v13] Deflake TestChaosUpload #33611
  • [v13] fix oidc test race #33431
• Trivial user-visible changes
  • [v13] Web: Fix passing in color to wrong field name #33489
• No user-visible changes
  • [v13] OpenTelemetry Update Backport #33551
  • [v13] Missed v13 golang backport updates #33527
  • [v13] AWS OIDC: Only consider Linux/UNIX when listing EC2 instances #33514
  • [v13] Bump google.golang.org/grpc to v1.57.1 #33488
  • [v13] Include 'nextAuditDate' in 'CreateAccessListReview' method #33484
  • [v13] Add a duration for starting notifications to access lists. #33473
  • [v13] Add usage events for desktop access #33456
  • [v13] Bump for word-wrap and semver #33452
  • [v13] Fix user login state gRPC client upsert. #33450
  • [v13] Bump golang.org/x/net Backport #33447
  • [v13] Update @babel/core to 7.23.2 and dedupe babel deps #33442
  • [v13] Fix an issue tsh fails when Proxy is in separate mode and web port is TLS-terminated by a load balancer #33407
  • [v13] Refactor desktop event emission #33336
  • [v13] Remove access lists and members from the cache. #33324
  • [v13] Remove deprecated Aurora MySQL version 1 from Database discovery #33236
• e updates
  • [v13] Update e #33606
  • [v13] Update e #33531
  • [v13] Update e #33526
  • [v13] Update e #33494
• Previous release
  • Release 13.4.3 #33291