Release 13.4.17

[camscale]

• tbot-distroless image is now published. This contains just the tbot binary and therefore has a smaller image size. #38720
• Fixed Postgres v16.x compatibility issue preventing multiple connections for auto-provisioned users. #38541
• Ensured that tsh continues to function if one of its profiles is invalid. #38512
• Fixed logging output for teleport configure ... commands. #38510
• Removed telnet from legacy Ubuntu OCI due to CVE-2021-40491. Use nc instead. #38507
• Fixed tsh/WebAuthn.dll panic on Windows Server 2019. #38488
• Added ssh_service.enhanced_recording.root_path configuration option to change the cgroup slice path used by the agent. #38396
• Fixed a potential panic in the tsh status command. #38303
• Optionally permit the auth server to terminate client connections from unsupported versions. #38187
• Force agents to terminate Auth connections if joining fails. #38003
• Improved error handling when idle desktop connections are terminated. #37957
• Updated Go to 1.21.7. #37849
• Fixed app redirection loop on browser's incognito mode and 3rd party cookie block. #37698
• Fixed a database lateral movement exploit if a self-hosted database host is compromised, see Database CA Migrations. #35951

Enterprise:

• [v13] Drop TIA from web UI. #3508
• [v13] Web: Add owner grants to access list for create/read/update. #3505
• [v13] chore: Bump golangci-lint to v1.56.1. #3464
• [v13] Verify public key during Hardware Key attestation. #3423

[camscale]

Docs lint is failing because one changelog entry has an absolute URL link to the docs and the linter wants relative links to the docs for changelog.mdx. But we want absolute links for CHANGELOG.md and the GitHub release. The latter I can transform manually, but not the former, and it appears to be the source for changelog.mdx. Have asked on #docs.