Summary for 2025-11: This month focused on security-driven TLS identity management improvements in vectordotdev/vector, delivering PEM-based identity storage, FIPS-ready workflows, and groundwork for safer identity handling. The primary feature delivered was a TLS Identity Management overhaul that switches the storage of TLS identity to PEM format, with on-load conversion from PKCS12 to PEM to preserve compatibility. The IdentityStore was enhanced to securely hold the certificate, private key, name, and optional CA certificates, enabling clearer auditing and tighter security controls. As a result, TLS identities are now managed in a FIPS-friendly, PEM-based path, with IdentityStore becoming the canonical identity container. No major bugs were reported or fixed this month; the emphasis was on delivering security-focused features, refactoring for safer identity handling, and improving code quality and documentation.