- Implement automatic context detection with three secret‑backend chains, enabling hooks like GCSHook and S3Hook to operate correctly in API server, scheduler, and worker contexts without code changes.
- Remove the insecure `/api/v2/dagReports` endpoint that executed user DAG code in the API server and fix secret exposure in Jinja template error messages.
- Apply a host of bug fixes: improve UI load speed, resolve logout failures, correct API list performance, fix scheduler max‑active‑runs handling, XCom NaN migration issues, and trigger‑rule task context errors.