- Updated auth/jwt plugin to v0.21.0 and added UI support for creating session‑token‑type roles for the AWS secrets engine.
- Fixed multiple CPU‑spike issues in agent and proxy plus bugs in TCP listener proxy‑protocol config, audit‑logging context handling, PKCS7 parsing, Azure storage init, Raft namespace cache restoration, and replication cache invalidation.
- Improved autopilot logging clarity, hid Secrets Sync from the sidebar for users without access, and refined Secrets Sync handling (tag removal, error codes, GitHub repo validation).