- Enforced max TTL on transform role encodes, switched transform secrets to pgx driver, and added FIPS 140‑2 RPM/DEB packages.
- Fixed a range of bugs: core routing, identity group loading, replication DR address update, Azure 401 auth issue, PKI issuer re‑appearance, nil panic in transform templates, service registration active‑node labeling, and UI SSH role edit...
- Added PKI tidy config options to explicitly disable stored certificate counts and related metrics.