- Fixed web app access in leaf clusters with VNet, corrected desktop session recording UI and metadata summary display, and resolved DB session page redirect to empty page.
- Improved tsh and tctl performance when the profile directory resides on remote filesystems (NFS, SMB, etc.).
- Added platform information to ssm.run events, introduced server‑side secret obfuscation and UpsertScopedToken RPCs, and clarified MS Teams enrollment configuration values.