Release 17.7.12

[fheinecke]

• Fixed an Auth Service bug causing the event handler to miss up to 1 event every 5 minutes when storing audit events in S3. #62149
• Fixed bug where event handler dies on malformed session events. #62142
• Changed "tsh --mfa-mode=cross-platform" to favor security keys on current Windows versions. #62136
• Improved detail of error messages for identity service in tbot. #62121
• Fixed bug where event handler types filter is ignored for Teleport clients using Athena storage backend. #62083
• Fixed intermittent issues with VNet on Windows when other NRPT rules from GPOs are present under HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig. #62053

Enterprise:

• Fix a potential race where Okta assignments may never be cleaned up if the Okta integration is down while the assignment expires.
• Updated AWS Identity Center integration sign-in start URL format to support AWS GovCloud accounts.
• Added support for AWS Account name and ID labels (teleport.dev/account-id, teleport.dev/account-name) on AWS Identity Center resources (aws_ic_account_assignment and aws_ic_account). These labels improve compatibility with Access Monitoring Rules, allowing users to more easily target and audit AWS IC accounts.
• Prevented Trivy from reporting false positives when scanning the Teleport binaries.
• Added support for Jamf's /v2/computers-inventory API (addresses Jamf's deprecation of /v1/computers-inventory).
• Updated the AWS Identity Center resource synchronizer to handle AWS Account name changes more gracefully.

[github-actions]

Amplify deployment status

Branch	Commit	Job ID	Status	Preview	Updated (UTC)
release/17.7.12	HEAD	1	✅SUCCEED	release-17-7-12	2025-12-15 19:56:38