8.43.0

Added

• Add org-to-app entitlement (EA) support for organizations. [#1454]
• Support full group metadata for Google Workspace directory sync (GA). [#1456]

Fixed

• Create phone templates on import instead of skipping when they have no ID. [#1457]
• Address path traversal vulnerability and false warnings in config file handlers. [#1449]
• Exclude org-scoped roles from tenant export by filtering type='tenant'. [#1453]
• Strip read-only field from roles to fix export/import round-trip. [#1445]