This is a pure bugfix release. We fixed a major issue with allow_only security restrictions not working on crud controllers (and subclasses). If you use the CrudRestController or the CrudController you will want to upgrade immediately.
Other fixes worth mentioning: