+- [#11185](https://github.com/emqx/emqx/pull/11185) Add support for [topologySpreadConstraints](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/) in the Helm chart.
+
+## Bug Fixes
+
+- [#11347](https://github.com/emqx/emqx/pull/11347) Ensure that OCSP request path is properly URL encoded.
+
+- [#11372](https://github.com/emqx/emqx/pull/11372) Removed the recently introduced `cacerts` option from TLS client schema due to incompatibilities with some cluster discovery mechanisms.