Release 14.3.7

[fheinecke]

• Resolved sporadic errors caused by requests fail to comply with Kubernetes API spec by not specifying resource identifiers. #39167
• Fixed a bug when using automatic updates and the discovery service. The default install script now installs the correct Teleport version by querying the version server. #39100
• Teleport Proxy Service now runs a version server by default serving its own version. #39096
• Fixed a regression where tsh kube credentials fails to re-login when credentials expire. #39074
• TBot now supports --proxy-server for explicitly configuring the Proxy address. We recommend switching to this if you currently specify the address of your Teleport proxy to --auth-server. #39056
• Expanded the EC2 joining process to include newly created AWS regions. #39052
• Added GCP MySQL access IAM Authentication support. #39041
• Fixed an issue in SAML IdP entity descriptor generator process, which would fail to generate entity descriptor if the configured Entity ID endpoint would return HTTP status code above 200 and below 400. #38988
• Updated Go to 1.21.8. #38985
• Updated electron-builder dependency to address possible arbitrary code execution in the Windows installer of Teleport Connect (CVE-2024-27303). #38966
• Improved reliability and performance of tbot. #38929
• Filtered terminated sessions from the tsh sessions ls output. #38886
• Prevented panic when AccessList's status field is not set. #38862
• Fixed an issue with over counting of reported Teleport updater metrics. #38832
• Fixed a bug that caused tsh to return "private key policy not met" errors instead of automatically initiating re-login to satisfy the private key policy. #38818
• Fixed application access events being overwritten when using DynamoDB as event storage. #38816
• Fixed issue where DynamoDB writes could fail when recording too many records. #38762
• Added a tbot-only tbot-distroless container image, bringing an 80% size reduction over the Teleport teleport image. #38719
• Fixed a Postgres v16.x compatibility issue preventing multiple connections for auto-provisioned users. #38542
• Tsh will now show access list review deadlines in dates rather than remaining hours.. #38526
• Fixed an issue where tsh would not function if one of its profiles is invalid. #38513
• Fixed an issue where teleport configure command logs would not use the configured logger. #38509
• Removed telnet from legacy Ubuntu images due to CVE-2021-40491. Netcat nc can be used instead. #38506
• Fixed a ths WebAuthn.dll panic on Windows Server 2019. #38489
• Added ssh_service.enhanced_recording.root_path configuration option to change the cgroup slice path used by the agent. #38395
• Fixed a bug which allowed the operator to delete resources it does not own. #37751

[r0mant]

What's a "ths"? Should it say "tsh"?

[fheinecke]

Yep - just typo'd it.