v2026.4.2
- Default secret vault backend changed from encrypted-file to the OS keyring (macOS Keychain / Linux Secret Service). Headless boxes can still opt out with vault.storage = "encrypted-file".
Full Changelog: v2026.4.1...v2026.4.2
Full Changelog: v2026.4.1...v2026.4.2