- Fixed backward compatibility issue causing "dynamic" access list type validation errors.
- Added glob‑style matching for Spacelift join rules and ensured PKINIT certificates always include CDP information.
- Updated Application APIs to use pagination to avoid message size limits and made tbot /readyz endpoint reflect bot health.