- tctl now skips its config file when the auth service is disabled, preferring identity files or tsh profiles.
- Web UI gains the ability to edit user traits, and all authenticated users can read the cluster vnet configuration.
- Stability and performance enhancements include Firestore event‑read limits to avoid OOM, faster label‑based dialing, jamf service validation skip when disabled, and corrected plugin images for amd64.