- Security: Agent now defaults to yaml.safe_load and yaml.safe_dump for all checks, mitigating CVE‑2017‑18342 and fixing unsafe usage in the kubernetes client library.
- Feature: Adds pod/container tagging via annotations, Docker image signing, local‑wheel integration install, JMXFetch 0.26.1 concurrent collection, global log processing rules, ECS awsvpc mode support, and a new secrets command.
- Bugfix/Performance: fixes autodiscovery rescheduling, DogStatsD load handling, trace‑agent memory leak, UDP log splitting, Kubernetes tag cleanup, and corrects JSON output for the status command.