- Fixed numerous critical bugs: Kubernetes API spec compliance, tsh kube credential relogin, DynamoDB event overwrites, private‑key policy handling, and various panics and regressions across tsh, tbot, and the proxy.
- Added new features: explicit proxy configuration for TBot, expanded EC2 joining for new AWS regions, GCP MySQL IAM authentication, ssh service enhanced recording path option, and a distroless TBot container image reducing size by ~80%.
- Applied security and maintenance updates: upgraded Go to 1.21.8, patched electron‑builder for CVE‑2024‑27303, removed telnet from legacy Ubuntu images (CVE‑2021‑40491), and added version server defaults.