- Added a paginated, searchable, and filterable Access Requests UI with automatic database request prompts and start‑time scheduling.
- Introduced Workload Identity MVP issuing SPIFFE X.509 certificates for mTLS, added Kubernetes 1.29+ websocket exec support, and enabled zero‑downtime web asset rollout.
- Extended IaC support: Terraform and Operator now handle OpenSSH/agent‑less nodes, allow separate CRD/operator deployment, propagate labels, and prevent forced resource recreation on version changes.