- Security updates: upgraded etcd client to v3.7.1 and pkcs12 to v0.7.2, plus Go bump to 1.26.7 to address known vulnerabilities.
- New enterprise features: Agent Registry UI, automatic DNS‑01 challenge for PKI external CAs (AWS, Azure, GCP, RFC2136), PKCS12/JKS bundle support, SLH‑DSA hybrid sign/verify, and OAuth Resource Server no longer requires activation flag w...
- Extensive bug‑fixes and improvements, including race‑condition fixes, OAuth JWT revocation denylist, UI enhancements, and fixes for seal integration, lease handling, and various engine behaviors.