This release introduces Delete notes for supervisors, security enhancements, and bug fixes affecting all schemes including CSCS Cards and White Label partners.

CSCS Online Backend:
- (New Feature) Supervisors can delete notes from Applications and Customer Profiles based on scheme permissions. Users must type "delete" to confirm. All deletions are logged in the Change Log for audit purposes.
- (Bug Fix) Unable to activate legacy accounts - resolved error when creating/activating accounts.
- (Bug Fix) Company name now correctly displays in delivery address when employers select alternate addresses during application process.
- (Improvement) New processed_on database field captures timestamp when applications are approved or rejected, enabling better reporting on application processing times and identifying stuck applications.
- (New Feature) Tracking number import functionality processes tracking data from APS return files and updates applications automatically with delivery tracking information.

CSCS Online Customer Portal:
- (Improvement) "Claim My Card" popup updated with clearer messaging directing new users to call CSCS Helpdesk (0344 994 4777) to link existing cards before applying, preventing application delays.
- (Improvement) Mobile app download banner added to all web portal pages for individual cardholders, encouraging migration to MyCSCS app with direct App Store and Google Play links.

GQA API & Low Tech Scheme Portal:
- (Security Fix) Apache Tomcat version information removed from error messages to prevent information disclosure.
- (Security Fix) Password reset flow updated to prevent user enumeration attacks - all password reset requests now return consistent messaging.