- Extensive UI cleanup: removed unused dependencies, replaced react‑helmet with native metadata, made many table rows and navigation items real links, added draggable secret comment popover and improved focus handling.
- New capabilities: OIDC issuer support, agent vault MCP server with guided setup checklist, delegated approvals policy and external request approval, secret outbox events, expanded telemetry metrics, and Windows Server PKI discovery.
- Various fixes and enhancements: secure randomness for password generation, MFA flow improvements, LDAP URL validation, SAP ASE connection string quoting, helm rollout annotation opt‑out, and license enforcement for session logs.