- Added optional relay support, credential‑less agents, custom X.509 extensions, and a copy‑secrets workflow, plus self‑serve upgrade and time‑unit env vars for secret scanning.
- Implemented extensive UI/UX upgrades (v3 migrations, shared Z‑index, redesigned settings, hotkey focus) and improved docs (get‑started overhaul, hero image update).
- Fixed numerous bugs: queue job failure logging, auth autofill handling, webhook loss prevention, cross‑project key deletion, Azure secret revocation retries, and refreshed Debian security pins.