spiffe/spire v1.5.0 on GitHub

X.509-SVID and JWT-SVID TTLs can now be configured separately at both the entry-level and Server default level (#3445)
Entry protobuf type in /v1/entry API includes new jwt_svid_ttl field (#3445)
k8s-workload-registrar and oidc-discovery-provider CLIs now print their version when the -version flag is set (#3475)
Support for customizing SPIFFE ID paths of SPIRE Agents attested with the azure_msi NodeAttestor plugin (#3488)

Entry ttl protobuf field in /v1/entry API is renamed to x509_ttl (#3445)
External plugins can no longer be named join_token to avoid conflicts with the builtin plugin (#3469)
spire-server run command now supports DNS names for the configured bind address (#3421)
Documentation improvements (#3468, #3472, #3473, #3474, #3515)

k8s-workload-registrar is deprecated in favor of SPIRE Controller Manager (#3526)
Server default_svid_ttl configuration field is deprecated in favor of default_x509_svid_ttl and default_jwt_svid_ttl fields (#3445)
-ttl flag in spire-server entry create and spire-server entry update commands is deprecated in favor of -x509SVIDTTL and -jwtSVIDTTL flags (#3445)
-format flag in spire-agent fetch jwt CLI command is deprecated in favor of -output flag (#3528)
InMem telemetry collector is deprecated and no longer enabled by default (#3492)