- Added non‑disruptive PKI intermediate/root certificate rotation and expanded API capabilities (PEM‑byte certs, context‑aware functions, MFALogin, WithNamespace, global output‑policy flag).
- Removed legacy MFA support, stored‑license endpoints, and the replication performance filter endpoint, introducing breaking changes and tightening security.
- Implemented many bug fixes and improvements including TOTP rate‑limiting, DynamoDB region env var, Ember UI upgrade, Go 1.17.9 bump, race‑condition fixes, and UI/CLI enhancements.