diff --git a/_service b/_service
index e391fdf..72cd560 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
git
disable
.git
- v13.1.0
+ v13.1.1
@PARENT_TAG@
enable
v(.*)
diff --git a/_servicedata b/_servicedata
index 2940bde..6285b4b 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
https://github.com/gravitational/teleport
- d83ec7470b3d594fc7c6a423c5944f3be97823be
\ No newline at end of file
+ ef700dd83fd8fc103223c19acf54c9ba5f83d183
\ No newline at end of file
diff --git a/teleport-13.1.0.obscpio b/teleport-13.1.0.obscpio
deleted file mode 100644
index 5c7c65e..0000000
--- a/teleport-13.1.0.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f89bd04a2685ceb8318a48aeec3bfff18bf53995769163045b3f7f2d9240e69d
-size 254745614
diff --git a/teleport-13.1.1.obscpio b/teleport-13.1.1.obscpio
new file mode 100644
index 0000000..4a72d40
--- /dev/null
+++ b/teleport-13.1.1.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8e32fbd3da5092f8fdc0ef239ec53874c2ae254e8550d3879d5852b6db5af942
+size 255016462
diff --git a/teleport.changes b/teleport.changes
index ead6663..256c9a8 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,117 @@
+-------------------------------------------------------------------
+Wed Jun 14 18:37:49 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 13.1.1:
+ * [v13] Fix an issue ALPN handshake test does not respect
+ "HTTPS_PROXY" (#27810)
+ * Set default limit for ListResourcesRequest (#27839)
+ * [v13] Trim yum release version in install-linux.mdx (#27777)
+ * Move Cloud Matchers to proto (#27162) (#27530)
+ * [v13] bump e (#27818)
+ * [v13] Add Proto types for storing TPM Platform Attestation in
+ Collected Data (#27757)
+ * bump e (#27806)
+ * [v13] Delete proxy heartbeats on graceful shutdown (#27786)
+ * [v13] Fix an issue kube local proxy requirement is wrong in
+ separate port mode (#27732)
+ * Fix: time.Since should not be used directly after a defer
+ statement (#27795)
+ * Default to SymlinksTrySecure rather than SymlinksSecure
+ (#27784)
+ * [v13] bump e-ref (#27736)
+ * app access: fix broken docs link in error message (#27766)
+ * Don't use WithError() when logging "Missing session cookie"
+ (#27768)
+ * [v13] Docs: document labels for trusted clusters (#27738)
+ * [v13] Fix flaky test
+ `TestHeadlessAuthenticationWatcher_WaitForUpdate` (#27765)
+ * [v13] MongoDB Protocol Hardening (#27741)
+ * docs: Fix curl commands on Windows (#27759)
+ * remove confusing variable delineation (#27746)
+ * [v13] docs: update desktop session recording reference (#27749)
+ * [v13] Change Campaign to utm_campaign (#27706)
+ * Implement in-memory vector DB (#27587)
+ * Add UI `node` lock to use `server_id` instead (#27621)
+ * Fix Teleport Connect assume roles (#27723)
+ * [v13] Abort reverse tunnel connections early if the proxy is
+ already claimed (#27699)
+ * Add scaling warning re: DynamoDB (#27600)
+ * [v13] helm: Add conditional RBAC/ServiceAccount to
+ `teleport-kube-agent` post-delete hook (#27637)
+ * [v13] docs: update navigation instructions for sso audit log
+ troubleshooting (#27675)
+ * add styles to tooltip for team pages (#27417) (#27642)
+ * Set UID/GID for ARC runner builds (#27638) (#27689)
+ * Fix TestAuthorizeWithLocksForLocalUser flakiness (#27687)
+ * usagereporter: add context check in RunSubmitter (#27678)
+ * [v13] feat: label expressions (#27641)
+ * Bump vite from 4.2.0 to 4.2.3 (#27670)
+ * Fix redirects (#27593)
+ * add new CTA event property (#27216) (#27643)
+ * [v13] export etcd event processing metrics (#27220)
+ * Added 06/08 Upcoming Releases Update (#27631)
+ * [v13] Update description of Roles UI (#27539)
+ * Update e (#27640)
+ * [v13] Bump cloud version to v13.1.0 (#27633)
+ * [Docs] Assist built-in role access (#27602)
+ * [Docs] Assist - remove MFA section (#27603)
+ * [v13] Web: Plugin tweaks and new plugin icons #27427 (#27576)
+ * [v13] feat: label expression protobuf types (#26977)
+ * fix: record applied login rules in github login event (#27607)
+ * [v13] Add deprecation note to PAM user creation guide (#27626)
+ * [v13] update agentless docs to use 'teleport join openssh'
+ (#27624)
+ * [v13] Update docker images (#27502)
+ * [v13] docs: provide information on local user locks from login
+ attempts (#27609)
+ * Update `github.com/gravitational/predicate` to `v1.3.1`
+ (#27483)
+ * [v13] Docs: Trusted Clusters - Mention the correct expiration
+ time as per tctl command (Buddy PR) (#27498)
+ * [v13] use proxy port in openssh config (#27545)
+ * [v13] Proxy Templates overwrite CLI cluster value (#27581)
+ * docs: add headless auth as faq question (#27584)
+ * docs: adds configuration and helm chart to app access getting
+ started (#27529)
+ * [v13] Fix not being able to "login" with auth type set to sso
+ but no connectors set yet (#27589)
+ * Primarily changes "match: '^.*\.dev\.example\.com$'" to "match:
+ '^.*\.dev\.example\.com'" so that users aren't mistakenly
+ guided towards eliminating the implicit ":3389" from their
+ regex matches (#27516)
+ * Fix the default `teleport-kube-agent` upgrade server (#27572)
+ * Only fallback to SSH_TELEPORT_ env variables for proxy, user,
+ and cluster name when used with headless. (#27507)
+ * Support authenticating with AWS IAM role for MongoDB Atlas
+ (#26439) (#27494)
+ * Bump e (#27501)
+ * [v13] Implement leaf app access: `tsh app login --cluster=leaf`
+ (#27197)
+ * [v13] Backport hardened AMI resources (#27454)
+ * [v13] include changelog for docs tests (#27479)
+ * [v13] Docs: GCP join method (#27487)
+ * Fix SEO issues (#27242)
+ * [v13] Document all installer script template vars (#27482)
+ * Create api handler specifically for FormData (#27408)
+ * [v13] Docs: improve Postgres in GCP (#27471)
+ * Propagate proxy public addr in Web UI ssh session. (#27058)
+ (#27420)
+ * [v13] Document new Okta import rule regexes. (#27453)
+ * [v13] docs: add enterprise value for kube agent reference
+ (#27472)
+ * docs: update version (#27473)
+ * Extend host lock enforcement to other built in roles besides
+ `Node` (#27018) (#27442)
+ * Build change for when go caching should be used (#27209)
+ (#27284)
+ * chore: Bump golangci-lint to v1.53.2 (#27456)
+ * [v13] WebDiscover: Check for RDS length before setting a limit
+ for listing DBs (#27415)
+ * Jamf config for PluginSpecV1 (#26374) (#27459)
+ * [v13] loadtesting automation improvements (#27438)
+ * Add prometheus endpoint to tbot (#27432)
+ * [v13] Add docs for database auto user provisioning (#27289)
+
-------------------------------------------------------------------
Mon Jun 12 20:37:19 UTC 2023 - kastl@b1-systems.de
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 3654b4d..c0a5b46 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
name: teleport
-version: 13.1.0
-mtime: 1686011921
-commit: d83ec7470b3d594fc7c6a423c5944f3be97823be
+version: 13.1.1
+mtime: 1686762314
+commit: ef700dd83fd8fc103223c19acf54c9ba5f83d183
diff --git a/teleport.spec b/teleport.spec
index d0d858c..bea8bf6 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: teleport
-Version: 13.1.0
+Version: 13.1.1
Release: 0
Summary: Identity-aware, multi-protocol access proxy
License: Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 89cd646..738f7e5 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:9e8cfaacc79f6e2ce4bcca0d4b8fd37e553550fcc9268157b08eeba9883eaf68
-size 33197917
+oid sha256:28417a910adaff32476577bb1fddd13d63e5c532a3220aee83e8de183242bae1
+size 33219531