- Refreshed web UI with improved access‑list UI, dynamic Windows desktop registration, and image rendering in web SSH sessions.
- Introduced modern EC signature algorithms (preview), hardware‑key support for Teleport Connect, and signed‑notarized macOS assets.
- Breaking changes: separate macOS tsh.pkg removed, stricter hostname validation, removal of TELEPORT_ALLOW_NO_SECOND_FACTOR, and deprecation of per‑session TOTP MFA.