- Added new CLI capabilities and config flags (access‑monitoring rule listing, kubeconfig context display, AWS HA bastion instance type, SSH‑agent handling, device‑trust enforcement, and SAML connector handling)
- Introduced security enhancements such as JWK header in JWTs, mandatory device‑trust mode, and audit logging for plugin CRUD operations
- Applied several bug fixes and breaking changes: Linux Teleport Connect now requires glibc 2.31+, SSH agent forwarding disabled by default, plus numerous stability and crash fixes