- Added Kubernetes support to Relay Service and shared state between tsh and Teleport Connect, enabling seamless login syncing.
- Implemented SCIM PATCH support, full‑region EC2 discovery, and Azure OIDC authentication for resource discovery; added AWS account labels for Identity Center resources.
- Fixed JWT SVID timestamp scientific notation, SSH‑cert‑not‑found errors, and duplicate audit events; tuned Helm charts to better respect memory limits.