- Updated core dependencies (thrift, x/crypto, grpc) and bumped Go to 1.26.8 to remediate security vulnerabilities.
- Added Okta JWT provider with group fetching, allowed IPv4 CIDR ranges for secrets import, and new PKI revocation‑reason field.
- Fixed multiple bugs across enterprise and core components, including Vault panics, token lookup errors, billing scalar miscalculations, ACL metric panics, mount path handling, OIDC RAR enforcement, plugin reload issues, sync association ...