Release 15.4.25

[doggydogworld]

• Prevent quoting errors in log messages. #50823
• Fix an issue "tsh aws ssm start-session" fails when KMS encryption is enabled. #50798
• Updates the UI login redirection service to honor redirection to enterprise/saml-idp/sso path even if user is already authenticated with Teleport. #50795
• Fixed a Postgres database-access auto-user provisioning syntax error that caused a misleading debug level error log in most cases, unless the database admin is not a superuser and the database was upgraded from Postgres v15 or lower to Postgres v16 or higher, in which case the role "teleport-auto-user" must be granted to the database admin with the ADMIN option manually. #50785
• Fixes a bug where S3 bucket details fail to fetch due to incorrect bucket region. #50765
• Prevent panicking during shutdown when SQS consumer is disabled. #50646
• Fix a bug in the tbot Helm chart causing invalid configuration when both default and custom outputs were used. #50528
• Restore the ability to play session recordings in the web UI without specifying the session duration in the URL. #50462
• Fixed an issue that could cause some antivirus tools to block Teleport's Device. #50455
• Updated golang.org/x/net to v0.33.0 (addresses CVE-2024-45338). #50399
• Improved the performance of Teleport agents serving a large number of resources in Kubernetes. #50281
• Improve performance of Kubernetes App Auto Discover. #50267
• Properly close ssh port forwarding connections to prevent requests hanging indefinitely. #50240

Enterprise:

• Fix missing cleanup actions if the Oracle db connection is closed in its initial phases.
• Fixed an issue where the Access Graph HTTP endpoint resolution failed to retry after the initial failure.

[ptgott]

@doggydogworld We should make sure we port the CHANGELOG changes to the other release branches. Otherwise, this version of the changelog is only available on v15 of the docs, which is not the intended user experience.