- Fixed backward compatibility issue causing "dynamic" access list type validation errors introduced in 17.5.5/18.0.1
- Added glob‑style matching support for Spacelift join rules
- Improved PKINIT compatibility by always including CDP information in certificates