- Reordered CRs to newest‑first, introduced a Cohorts app with membership ledger and added several experimentation enhancements like 365‑day retention and multivariate split support.
- Implemented security hardening such as SSRF‑safe webhook URL validation and disabled Google sign‑in pending OAuth script, plus added RBAC role handling and other bug fixes.
- Expanded documentation covering RBAC plan scopes, SCIM capabilities, and the new Flagsmith CLI, alongside various UI/UX polish.