- Added application tunnel service for Machine ID and new CLI flags (tsh play idle‑skip, tbot systemd install), plus support for existing ingresses and Rocky/AlmaLinux enrollment in the UI.
- Fixed numerous stability and security issues: large‑cluster stability, Paramiko compatibility, UID lookup crash, audit upload panic, DoS prevention, arbitrary redirect removal, eBPF startup error, DynamoDB cursor loop, and many UI/CLI bugs.
- Removed deprecated S3 bucket option, enhanced audit visibility (AWS/Azure resource actions, MFA admin‑action changes) and added more app icon guesses.