{
  "summary": "Signing-CA rotation now takes effect everywhere at once. After an administrator regenerated the CA, agents were pushed and served the old CA until the controller restarted, while the proxy already signed with the new one; the controller, agents and standalone proxies now switch together. With Postgres, an automatic rotation before expiry now survives a restart instead of reverting to the old CA, every replica uses the same pending CA that agents were told to pre-trust, and only the leader rotates, so two replicas can no longer each promote their own. On a fresh scaled install, proxies no longer crash at startup: they fetch the signing CA from the controller instead of a shared file that is no longer written. The HA load balancer keeps serving when one controller replica is down. The supply-chain watcher no longer stops `cargo audit` or `cargo build` for reading cargo's own registry and advisory files as mass enumeration. The Android agent's TLS and error-handling libraries are updated for RUSTSEC-2026-0285 and RUSTSEC-2026-0190."
}