- Breaking changes: audit logs can now include 'correlation-id' headers (not HMAC'ed by default) and HA seal requires 'multiseal' enabled; the Request Limiter beta is deprecated.
- Enterprise feature additions: PKI certificate metadata, Adaptive Overload Protection, expression‑based audit filtering, hierarchical LDAP secret paths, Plugin Identity Tokens, Workload Identity, and Transit AES‑CMAC support.
- Various improvements and fixes: new agent lease‑renewal threshold and auto‑auth re‑trigger, extended activity log retention, SDK/UI enhancements, numerous plugin version updates, and multiple bug fixes.