Release 15.2.4

[camscale]

Note: This release supersedes 15.2.3 which was not released due to build
failures.

• Fixed a deprecation warning being shown when tbot is used with OpenSSH. #40837
• Added a new Audit log event that is emitted when an Agent or Bot request to join the cluster is denied. #40814
• Fixed regenerating cloud account recovery codes. #40786
• Changed UI for the sign-up and authentication reset flows. #40773
• Added a new Prometheus metric to track requests initiated by Teleport against the control plane API. #40754
• Fixed an issue that prevented uploading a zip file larger than 10MiB when updating an AWS Lambda function via tsh app access. #40737
• Patched CVE-2024-32650. #40735
• Fixed possible data race that could lead to concurrent map read and map write while proxying Kubernetes requests. #40720
• Fixed access request promotion of windows_desktop resources. #40712
• Fixed spurious ambiguous host errors in ssh routing. #40706
• Patched CVE-2023-45288 and CVE-2024-32473. #40695
• generic "not found" errors are returned whether a remote cluster can't be found or access is denied. #40681
• Fixed a resource leak in the Teleport proxy server when using proxy peering. #40672
• Added Azure CLI access support on AKS with Entra Workload ID. #40660
• Allow other issue types when configuring JIRA plugin. #40644
• Added regexp.match to access request filter and where expressions. #40642
• Notify the requester in slack review request messages. #40624
• Handle passwordless in MFA audit events. #40617
• Added auto discover capability to EC2 enrollment in the web UI. #40605
• Fixes RDP licensing. #40595
• Added support for the ascii variants of smartcard calls. #40566
• Added the ability to configure labels that should be set on the Kubernetes secret when using the kubernetes_secret destination in tbot. #40550
• Updated cosign to address CVE-2024-29902 and CVE-2024-29903. #40497
• The Web UI now supports large number of roles by paginating them. #40463
• Improved the responsiveness of the session player during long periods of idle time. #40442
• Fixed incorrect format for database_object_import_rule resources with non-empty expiry. #40203
• Updated Opsgenie annotations so approve-schedules is used for both alert creation and auto approval if notify schedules is not set. #40121

[github-actions]

🤖 Vercel preview here: https://docs-k3lc1q6mq-goteleport.vercel.app/docs/ver/preview