Release 17.7.13

[fheinecke]

• Fixed an issue where logging in to the Web UI with Device Trust would lose query params of the redirect URL. #62678
• Fixed an issue where Teleport Connect could generate a flurry of notifications about not being able to connect to a resource. #62672
• Fixed issuance of wildcard DNS SANs with Workload Identity. #62669
• Added IAM joining support from new AWS regions in asia. #62628
• Added cleanup of access entries for EKS auto-discovered clusters when they no longer match the filtering criteria and are removed. #62599
• Fixed some auto update audit events showing up as unknown in the web UI. #62548
• The join tokens UI now indicates which tokens are managed by the Teleport Cloud platform. #62543
• Audit log and session uploader now respect region field of external_audit_storage resource when present. #62519
• Fixed an issue that prevented searching for users by role in the web UI. #62475
• Acknowledging a cluster alert no longer requires the create permission. #62469
• Fixed tilde expansion for moderated SFTP. #62454
• Fixed a potential SSRF vulnerability in the Azure join method implementation. #62420
• Updated github.com/quic-go/quic-go to 0.57.0 to mitigate CVE-2025-64702. #62294
• Fixed issue where AltGr key combinations did not work correctly in remote desktop sessions. #62197
• Fixed a memory leak in access list reminder notifications affecting clusters with more than 1000 pending Access List reviews. #62664