gravitational · doggydogworld · Jan 10, 2025 · Jan 10, 2025 · Jan 10, 2025
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -267,7 +267,27 @@ credential for per-session MFA.
 
 TOTP will continue to be accepted for the initial login.
 
-## 16.4.12 (12//18/2024)
+## 16.4.13 (1/10/2025)
+
+* Fixes an issue causing Azure join method to fail due to throttling. [#50929](https://github.com/gravitational/teleport/pull/50929)
+* Prevent quoting errors in log messages. [#50822](https://github.com/gravitational/teleport/pull/50822)
+* Fix an issue "tsh aws ssm start-session" fails when KMS encryption is enabled. [#50797](https://github.com/gravitational/teleport/pull/50797)
+* Updates the UI login redirection service to honor redirection to enterprise/saml-idp/sso path even if user is already authenticated with Teleport. [#50794](https://github.com/gravitational/teleport/pull/50794)
+* Fixed a Postgres database-access auto-user provisioning syntax error that caused a misleading debug level error log in most cases, unless the database admin is not a superuser and the database was upgraded from Postgres v15 or lower to Postgres v16 or higher, in which case the role "teleport-auto-user" must be granted to the database admin with the ADMIN option manually. [#50783](https://github.com/gravitational/teleport/pull/50783)
+* Fixes a bug where S3 bucket details fail to fetch due to incorrect bucket region. [#50764](https://github.com/gravitational/teleport/pull/50764)
+* Prevent panicking during shutdown when SQS consumer is disabled. [#50647](https://github.com/gravitational/teleport/pull/50647)
+* Add a --labels flag to the tctl tokens ls command. [#50625](https://github.com/gravitational/teleport/pull/50625)
+* Fix a bug in the `tbot` Helm chart causing invalid configuration when both default and custom outputs were used. [#50527](https://github.com/gravitational/teleport/pull/50527)
+* Restore the ability to play session recordings in the web UI without specifying the session duration in the URL. [#50461](https://github.com/gravitational/teleport/pull/50461)
+* Fix missing roles in Access Lists causing users to be locked out of their account. [#50460](https://github.com/gravitational/teleport/pull/50460)
+* Fixed an issue that could cause some antivirus tools to block Teleport's Device Trust feature on Windows machines. [#50454](https://github.com/gravitational/teleport/pull/50454)
+* Reverted a change that caused the Kubernetes cluster name to be displayed at the end of the tab title in Teleport Connect. [#50390](https://github.com/gravitational/teleport/pull/50390)
+
+Enterprise:
+* Fix missing cleanup actions if the Oracle db connection is closed in its initial phases.
+* Fixed an issue where the Access Graph HTTP endpoint resolution failed to retry after the initial failure.
+
+## 16.4.12 (12/18/2024)
 
 * Updated golang.org/x/net to v0.33.0 (addresses CVE-2024-45338). [#50398](https://github.com/gravitational/teleport/pull/50398)
 * Improved the performance of Teleport agents serving a large number of resources in Kubernetes. [#50280](https://github.com/gravitational/teleport/pull/50280)

diff --git a/Makefile b/Makefile
@@ -11,7 +11,7 @@
 #   Stable releases:   "1.0.0"
 #   Pre-releases:      "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
 #   Master/dev branch: "1.0.0-dev"
-VERSION=16.4.12
+VERSION=16.4.13
 
 DOCKER_IMAGE ?= teleport
 

diff --git a/api/version.go b/api/version.go
diff --git a/build.assets/macos/tsh/tsh.app/Contents/Info.plist b/build.assets/macos/tsh/tsh.app/Contents/Info.plist
@@ -19,13 +19,13 @@
 		<key>CFBundlePackageType</key>
 		<string>APPL</string>
 		<key>CFBundleShortVersionString</key>
-		<string>16.4.12</string>
+		<string>16.4.13</string>
 		<key>CFBundleSupportedPlatforms</key>
 		<array>
 			<string>MacOSX</string>
 		</array>
 		<key>CFBundleVersion</key>
-		<string>16.4.12</string>
+		<string>16.4.13</string>
 		<key>DTCompiler</key>
 		<string>com.apple.compilers.llvm.clang.1_0</string>
 		<key>DTPlatformBuild</key>

diff --git a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
@@ -17,13 +17,13 @@
 		<key>CFBundlePackageType</key>
 		<string>APPL</string>
 		<key>CFBundleShortVersionString</key>
-		<string>16.4.12</string>
+		<string>16.4.13</string>
 		<key>CFBundleSupportedPlatforms</key>
 		<array>
 			<string>MacOSX</string>
 		</array>
 		<key>CFBundleVersion</key>
-		<string>16.4.12</string>
+		<string>16.4.13</string>
 		<key>DTCompiler</key>
 		<string>com.apple.compilers.llvm.clang.1_0</string>
 		<key>DTPlatformBuild</key>

diff --git a/e b/e
diff --git a/examples/chart/access/datadog/Chart.yaml b/examples/chart/access/datadog/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.4.12"
+.version: &version "16.4.13"
 
 apiVersion: v2
 name: teleport-plugin-datadog

diff --git a/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap
@@ -26,6 +26,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-datadog
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-datadog-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-datadog-16.4.13
       name: RELEASE-NAME-teleport-plugin-datadog
diff --git a/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-datadog
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-datadog-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-datadog-16.4.13
       name: RELEASE-NAME-teleport-plugin-datadog
     spec:
       replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
             app.kubernetes.io/instance: RELEASE-NAME
             app.kubernetes.io/managed-by: Helm
             app.kubernetes.io/name: teleport-plugin-datadog
-            app.kubernetes.io/version: 16.4.12
-            helm.sh/chart: teleport-plugin-datadog-16.4.12
+            app.kubernetes.io/version: 16.4.13
+            helm.sh/chart: teleport-plugin-datadog-16.4.13
         spec:
           containers:
           - command:

diff --git a/examples/chart/access/discord/Chart.yaml b/examples/chart/access/discord/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.4.12"
+.version: &version "16.4.13"
 
 apiVersion: v2
 name: teleport-plugin-discord

diff --git a/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap
@@ -24,6 +24,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-discord
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-discord-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-discord-16.4.13
       name: RELEASE-NAME-teleport-plugin-discord
diff --git a/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-discord
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-discord-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-discord-16.4.13
       name: RELEASE-NAME-teleport-plugin-discord
     spec:
       replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
             app.kubernetes.io/instance: RELEASE-NAME
             app.kubernetes.io/managed-by: Helm
             app.kubernetes.io/name: teleport-plugin-discord
-            app.kubernetes.io/version: 16.4.12
-            helm.sh/chart: teleport-plugin-discord-16.4.12
+            app.kubernetes.io/version: 16.4.13
+            helm.sh/chart: teleport-plugin-discord-16.4.13
         spec:
           containers:
           - command:

diff --git a/examples/chart/access/email/Chart.yaml b/examples/chart/access/email/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.4.12"
+.version: &version "16.4.13"
 
 apiVersion: v2
 name: teleport-plugin-email

diff --git a/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap
@@ -26,8 +26,8 @@ should match the snapshot (mailgun on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on):
   1: |
@@ -59,8 +59,8 @@ should match the snapshot (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, no starttls):
   1: |
@@ -92,8 +92,8 @@ should match the snapshot (smtp on, no starttls):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, password file):
   1: |
@@ -125,8 +125,8 @@ should match the snapshot (smtp on, password file):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, roleToRecipients set):
   1: |
@@ -161,8 +161,8 @@ should match the snapshot (smtp on, roleToRecipients set):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, starttls disabled):
   1: |
@@ -194,6 +194,6 @@ should match the snapshot (smtp on, starttls disabled):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 16.4.12
-        helm.sh/chart: teleport-plugin-email-16.4.12
+        app.kubernetes.io/version: 16.4.13
+        helm.sh/chart: teleport-plugin-email-16.4.13
       name: RELEASE-NAME-teleport-plugin-email