- Introduces Teleport VNet for virtual IP subnet/DNS proxy, Device Trust enforcement for the Web UI, and per‑session MFA across UI, CLI, and Connect.
- Adds Web UI notifications, resources view access requests, Windows build of tctl, and major plugin improvements (multi‑arch binaries, image signing, versioned tags).
- Breaking changes: Community Edition now limits commercial use, license file validation on startup, mandatory MFA for local users, removal of Active Directory wizard and Teleport Assist, and rejection of outdated client versions.