Release 11.3.22

[camscale]

• Fixed S3 metric name for completed multipart uploads. #30712
• Fixed Teleport Connect to properly show errors from the remote end. #30694
• Fixed Review Requests to disallow reviews after request is resolved. #30688
• Fixed Discovery service panics on GKE clusters without labels. #30648
• Fixed memory leak using PAM libraries. #30519
• Fixed "user is not managed" error when accessing ElastiCache and MemoryDB. #30358
• Fixed resources being deleted from Firestore on update. #30289
• Updated LDAP desktop discovery to handle slow DNS queries better. #30465
• Updated SAML certificate parsing to allow leading/trailing spaces. #30452
• Improved audit logging support for large SQL Server queries. #30245
• Explicitly mention registered and new device when running tsh mfa add on Windows. #30217
• Tighten discovery service permissions. #29996
• helm: Add support for custom annotations in the teleport-kube-agent Secret. #30840

Security fixes

• Security improvements with possible medium severity DoS conditions through protocol level attacks. #30854