- Added Oracle join method and container image digest capture for Workload Identity, plus support for WorkloadIdentity in the Teleport Kubernetes Operator
- Introduced a new proxy protocol allow‑downgrade field and support for specifying a WorkloadIdentity max TTL, enhancing proxy and TTL configuration
- Fixed multiple bugs: Ed25519 SSH key formatting for PuTTY, slow SAML metadata URL handling, Azure VM auto‑discovery, and Identity Center group provisioning