- Extended Discovery Service for cross‑project resource discovery and added new APIs (AccessMonitoringRule, AWS Terraform, Teleport Connect SSH‑agent controls, JWT enhancements).
- Security hardening: RBAC session‑listing bug fixed, secret join tokens redacted by default, device‑trust enforcement, MFA prompt fix, and improved JWK headers.
- Numerous bug fixes (tsh logout parsing, resource‑label handler crash, UI rule displays, Go upgrade) plus added Terraform provider docs and new plugins.