- Added several security fixes including SFTP restrictions for normal users, SSRF mitigation in reverse tunnels, macOS DYLD variable filtering, and protection against Access List privilege escalation
- Introduced new IAM join method support and extra argument capability for the kube‑agent chart, plus improved formatting of access‑list notifications
- Fixed numerous bugs such as websocket upgrade failures, data race in HeartbeatV2, PIV support on Windows, and performance enhancements for high‑volume TCP forwarding