- Fixed numerous bugs across Azure join throttling, S3 bucket region handling, shutdown panics, Helm chart config, Access List role locking, session playback URLs, Oracle DB cleanup, and Access Graph retries
- Added new capabilities: a `labels` flag to `tctl tokens ls`, UI login redirection honoring enterprise/SAML paths, and restored session recordings without needing a duration in the URL
- Addressed security and compatibility issues, including Device Trust false positives on Windows antivirus, AWS SSM session failures with KMS encryption, and Azure join method failures due to throttling