Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package teleport for openSUSE:Factory checked in at 2025-08-02 00:43:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/teleport (Old) and /work/SRC/openSUSE:Factory/.teleport.new.1085 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "teleport" Sat Aug 2 00:43:27 2025 rev:155 rq:1297084 version:17.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/teleport/teleport.changes 2025-07-24 18:50:42.542622836 +0200 +++ /work/SRC/openSUSE:Factory/.teleport.new.1085/teleport.changes 2025-08-02 00:45:01.350698880 +0200 @@ -1,0 +2,69 @@ +Fri Aug 1 13:04:21 UTC 2025 - Johannes Kastl <opensuse_buildserv...@ojkastl.de> + +- update to 17.7.0: + * Managed Updates canary support + Managed Updates v2 now support performing canary updates. When + canary updates are enabled for a group, Teleport will update a + few agents first and confirm they come back healthy before + updating the rest of the group. + + You can unable canary updates by setting canary_count in your + autoupdate_config: + + kind: autoupdate_config + spec: + agents: + mode: enabled + schedules: + regular: + - name: dev + days: + - Mon + - Tue + - Wed + - Thu + start_hour: 20 + canary_count: 5 + strategy: halt-on-error + + Each group can have a maximum of 5 canaries, canaries are + picked randomly among the connected agents. + Canary update support is currently only support by Linux + agents, Kubernetes support will be part of a future release. + * Other fixes and improvements + - Allow YubiKeys running 5.7.4+ firmware to be usable as PIV + hardware keys. #57217 + - Tctl will now warn the user when importing a SPIFFE issuer + override chain that contains the root CA. #57168 + - Fixed fallback for web login when second factor is set to on + but only OTP is configured. #57159 + - Fix a bug causing tctl/tsh to fail on read-only file systems. + #57148 + - The teleport-distroless container image now disables client + tools updates by default (when using tsh/tctl, you will + always use the version from the image). You can enable them + back by unsetting the TELEPORT_TOOLS_VERSION environment + variable. #57148 + - Fixed a crash in Teleport Connect that could occur when + copying large clipboard content during desktop sessions. + #57131 + - Audit log events for SPIFFE SVID issuances now include the + name/label selector used by the client. #57128 + - Fixed client tools managed updates downgrade to older + version. #57111 + - Removed unnecessary macOS entitlements from Teleport Connect + subprocesses. #57067 + - Machine and Workload ID: The tbot client will now discard + expired identities if needed during renewal to allow + automatic recovery without restarting the process. #57062 + - Define access-plugin preset role. #57057 + - Resolved an issue where RemoteCluster objects stored in the + cache had incorrect revisions, causing Update calls to fail. + #56974 + - Update Application APIs to use pagination to avoid exceeding + message size limitations. #56949 + - Fix certificate revocation failures in Active Directory + environments when Teleport is using HSM-backed key material. + #56928 + +------------------------------------------------------------------- Old: ---- teleport-17.6.0.obscpio New: ---- teleport-17.7.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ teleport.spec ++++++ --- /var/tmp/diff_new_pack.HFw8UA/_old 2025-08-02 00:45:06.950931632 +0200 +++ /var/tmp/diff_new_pack.HFw8UA/_new 2025-08-02 00:45:06.966932296 +0200 @@ -17,7 +17,7 @@ Name: teleport -Version: 17.6.0 +Version: 17.7.0 Release: 0 Summary: Identity-aware, multi-protocol access proxy License: AGPL-3.0-only ++++++ _service ++++++ --- /var/tmp/diff_new_pack.HFw8UA/_old 2025-08-02 00:45:07.410950750 +0200 +++ /var/tmp/diff_new_pack.HFw8UA/_new 2025-08-02 00:45:07.450952413 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="submodules">disable</param> <param name="exclude">.git</param> - <param name="revision">v17.6.0</param> + <param name="revision">v17.7.0</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ teleport-17.6.0.obscpio -> teleport-17.7.0.obscpio ++++++ /work/SRC/openSUSE:Factory/teleport/teleport-17.6.0.obscpio /work/SRC/openSUSE:Factory/.teleport.new.1085/teleport-17.7.0.obscpio differ: char 49, line 1 ++++++ teleport.obsinfo ++++++ --- /var/tmp/diff_new_pack.HFw8UA/_old 2025-08-02 00:45:08.042977018 +0200 +++ /var/tmp/diff_new_pack.HFw8UA/_new 2025-08-02 00:45:08.074978348 +0200 @@ -1,5 +1,5 @@ name: teleport -version: 17.6.0 -mtime: 1753217447 -commit: 4c3b13b66c781f7280bfa85a01c3084b621c5ecd +version: 17.7.0 +mtime: 1753812230 +commit: 5f1b1cb687a7e7ef43347847fc5a7f5c45855b0f ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/teleport/vendor.tar.gz /work/SRC/openSUSE:Factory/.teleport.new.1085/vendor.tar.gz differ: char 124, line 1