- Security updates: upgraded CA bundles, disallowed specific root CAs, rejected root policy alias traversal, and bumped Go to 1.27.3 fixing CVE‑2026‑111943.
- Feature: added automatic SPIFFE authentication method for agents.
- Bugfixes: resolved role‑based quota detection, TPM group update indexing, SCIM user adoption conflict, managed‑key handling in transit and MACs, SQL identifier quoting for MSSQL/MySQL, and UI MFA breadcrumb rendering.