Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>

* refact: to use go-dbw CreateItems, DeleteItems

Latest version of go-dbw updated the signature of
CreateItems(...) and DeleteItems(...) on a happy
note this latest version of go-dbw actually does
batch inserts and updates for this functions.

* all: regenerate protos with new protoc-gen-go version

…able (#4993)

* docs: Fix broken anchor link in Credential management

* docs: Update link titles

* add changelog sections

* doc: add changelog for storage bucket credential

* add ui changes to changelog

* fix indenting & parentheses

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
Co-authored-by: Lisbet Alvarez <lisbet.alvarez@hashicorp.com>

…5006)

…5013)

* implement configurable getDownstreamWorker timeout

* add parsing test

* typos

* fix tests

* fix worker tests

* 0 is a valid value

* test(e2e): Add test for worker api tags

* CR: Add additional check for an API tag that's the same as a config tag

Other parts of CI do not fail on cache miss, and it might
be necessary to allow it to fail to successfully restore it later.

all: upgrade Go to 1.23.0

Update GRPC Gateway tickets to compare tickets in constant-time

* Update changelog for `0.16.3` & `0.17.1`

* docs: Update release notes

* docs: Rephrase item

* docs: Add Important changes table to 0.17.1

* docs: Add info about wget and health checks

* docs: Fix typos

* docs: Minor rewrite

* code block fixes, style guide enhancements, metadata description refresh

* docs: Update location of wget binary

* docs: Fix bulleted list

* Update website/content/docs/operations/health.mdx

Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>

* docs: Updates based on feedback

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>

Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.

Using time.After makes the intent clearer

Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.

The API automatically paginates to the end of a pagination,
and would take into account any items updated and subsequently
removed since the last pagination. It now also removes any items
removed during the current pagination.

* feat: Add support for capturing URL actions in request info

- Pass request context to services to validate actions.
- Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported

A query parameter `max_result_set_size` can be specified to set a
per-request limit, with `-1` meaning all values. If there were more
entries than the max size used for the request, an `incomplete` boolean
is set in the response.

* feat (clientcache): use a persistent cache

By default, we will use a persistent cache for the
client cache. This will allow us to keep the cache
across restarts of the server and it will also
reduce the amount of time it takes to start the
server while reducing the amount of memory used.

This change also includes a validation of the cache
schema version. If the schema version is different
from the one expected, the cache will be
reset/recreated.

This allows getting a list of scope IDs known by the cache via cached
targets and sessions. It is not refreshed from the controller. The name
contains `implicit` in case we ever want e.g. `scopes`.

This ensures we don't have competing update processes running. When doing the
inline RefreshForSearch, a specific error will be returned so we can hint in
the API that we're in the middle of a refresh.

* Replace `interface{}` with `any`
* For options that are bools, don't always set true; set to the actual
  value passed in (some options already behaved this way, but they all
  should)

Fix ensures that the TestServer returned uses the
correct directory for writing its sqlite files,
which was created via t.TempDir()