- Added several new capabilities: selecting database roles via `tsh`, callback flag for `tsh login`, Database Roles column in `tsh db ls`, auto‑enrolling RDS discovery in UI, version server in proxy for auto‑agent upgrades, and future assu...
- Fixed numerous stability and security issues including a goroutine leak per SSH session, refresh‑identity bug, cache‑state access‑denied errors, Kubernetes audit IP misreport, panic on backend watcher failure, and protection against dele...
- Updated the Go runtime to v1.21.6 and introduced a breaking change disallowing resources named `.` or `..`, requiring renaming before upgrade.