Accepting request 1297084 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1297084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/teleport?expand=0&rev=155

_service

@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v17.6.0</param>
+    <param name="revision">v17.7.0</param>
     <param name="match-tag">v*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>

teleport-17.6.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6d52e1e5709482998d6d84256ee982bcc0c710df6d50dde1dc1561f4ff6f1f9e
-size 286468622

teleport-17.7.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e76fe9359453c21128ba08adbfbad71e1abca91246a4aaf3239ac242ae215ee4
+size 287139342

teleport.changes

@@ -1,3 +1,72 @@
+-------------------------------------------------------------------
+Fri Aug  1 13:04:21 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 17.7.0:
+  * Managed Updates canary support
+    Managed Updates v2 now support performing canary updates. When
+    canary updates are enabled for a group, Teleport will update a
+    few agents first and confirm they come back healthy before
+    updating the rest of the group.
+
+    You can unable canary updates by setting canary_count in your
+    autoupdate_config:
+
+      kind: autoupdate_config
+      spec:
+        agents:
+          mode: enabled
+          schedules:
+            regular:
+            - name: dev
+              days:
+              - Mon
+              - Tue
+              - Wed
+              - Thu
+              start_hour: 20
+              canary_count: 5
+          strategy: halt-on-error
+
+    Each group can have a maximum of 5 canaries, canaries are
+    picked randomly among the connected agents.
+    Canary update support is currently only support by Linux
+    agents, Kubernetes support will be part of a future release.
+  * Other fixes and improvements
+    - Allow YubiKeys running 5.7.4+ firmware to be usable as PIV
+      hardware keys. #57217
+    - Tctl will now warn the user when importing a SPIFFE issuer
+      override chain that contains the root CA. #57168
+    - Fixed fallback for web login when second factor is set to on
+      but only OTP is configured. #57159
+    - Fix a bug causing tctl/tsh to fail on read-only file systems.
+      #57148
+    - The teleport-distroless container image now disables client
+      tools updates by default (when using tsh/tctl, you will
+      always use the version from the image). You can enable them
+      back by unsetting the TELEPORT_TOOLS_VERSION environment
+      variable. #57148
+    - Fixed a crash in Teleport Connect that could occur when
+      copying large clipboard content during desktop sessions.
+      #57131
+    - Audit log events for SPIFFE SVID issuances now include the
+      name/label selector used by the client. #57128
+    - Fixed client tools managed updates downgrade to older
+      version. #57111
+    - Removed unnecessary macOS entitlements from Teleport Connect
+      subprocesses. #57067
+    - Machine and Workload ID: The tbot client will now discard
+      expired identities if needed during renewal to allow
+      automatic recovery without restarting the process. #57062
+    - Define access-plugin preset role. #57057
+    - Resolved an issue where RemoteCluster objects stored in the
+      cache had incorrect revisions, causing Update calls to fail.
+      #56974
+    - Update Application APIs to use pagination to avoid exceeding
+      message size limitations. #56949
+    - Fix certificate revocation failures in Active Directory
+      environments when Teleport is using HSM-backed key material.
+      #56928
+
 -------------------------------------------------------------------
 Thu Jul 24 09:27:24 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 

teleport.obsinfo

@@ -1,4 +1,4 @@
 name: teleport
-version: 17.6.0
-mtime: 1753217447
-commit: 4c3b13b66c781f7280bfa85a01c3084b621c5ecd
+version: 17.7.0
+mtime: 1753812230
+commit: 5f1b1cb687a7e7ef43347847fc5a7f5c45855b0f

teleport.spec

@@ -17,7 +17,7 @@
 
 
 Name:           teleport
-Version:        17.6.0
+Version:        17.7.0
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        AGPL-3.0-only

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:6330e9a6f33665f0d78fd44534238d672e6ca148ff2a1527e659ae10315f3b99
-size 51416681
+oid sha256:5bdd7a37ca9e183c71f1a3095fe8bf79a72a379653c47422b0fd3b270ee70c93
+size 51440723