- Added configurable resource labels in the Teleport Operator chart and support for delegated Bitbucket Pipelines joining; Kubernetes cluster joins now accept tokens scoped to the cluster name.
- Improved UI and tooling: Teleport Connect shows trusted‑device status and refreshes after Access Request drops; Web UI and Connect now support searchable session recordings and in‑session SSH text search; long‑running kube exec/port‑forw...
- Fixed numerous issues including proxy peering listener address handling, PAM interactive auth restoration, Postgres auto‑provisioning permissions, operator secret‑watching bug, resource leaks, and false‑positive YubiKey errors.