- Fix for CVE‑2021‑27668: prevents unauthenticated reading of Vault licenses on DR secondary clusters.
- secrets/mongodbatlas provider now uses the access‑list API instead of the whitelist API.
- Multiple bug fixes: Kubernetes token‑review cancellation, identity merge deadlock, duplicate quotas, DR secondary sync issues, and Azure service‑principal forwarding.