- Enforced RBAC logging and disabled fine‑grained inheritance by default, introducing several breaking default changes (e.g., logs RBAC, compare options, resource exclusions).
- Added supply‑chain security: all container images and CLI binaries are now cosign‑signed and include SLSA Level 3 provenance.
- Introduced many new features such as Azure workload identity support, default Redis health storage, batch event processing, Helm 3.17, kubectl 1.32.1, kustomize enhancements, and extensive UI improvements.
