- High‑severity security fix addressing privilege persistence in Okta SCIM‑only integrations, preventing unassigned users from retaining roles.
- Added a new "teleport_roles_total" metric, Windows Desktop LDAP filtering, enriched join token audit events, and expanded Helm chart and plugin support (Datadog, device auto‑enroll, custom SQS lock).
- Various bug fixes and performance improvements including event handler scaling, Let’s Encrypt renewal, PostgreSQL session PID logging, and added tctl subcommands for bot management.