- Omit control plane services from inventory list output for Cloud Hosted instances.
- Add leaf‑cluster dialing and non‑default Kubernetes domain support to tbot SSH multiplexer.
- Reduce auth server CPU under high load, fix Ubuntu 24.04 startup crash, and require MFA when re‑issuing expired kube‑proxy certificates.