- Added canary update support for Managed Updates v2, enabling staged updates of up to 5 Linux agents per group
- Enabled YubiKey firmware 5.7.4/5.43 as PIV hardware keys and improved client‑tool behavior (tctl warnings, fallback login, read‑only FS handling, Teleport Connect clipboard crash, macOS entitlements, default client‑tool version in distro...
- Fixed bugs across the stack including SPIFFE issuer import warnings, tbot expired identity renewal, RemoteCluster revision errors, API pagination limits, AD certificate revocation with HSM, SCIM user provisioning, and client‑tool downgra...