- Fixed regressions in Unix socket admin endpoints, Caddy trust command, and duplicate access logs.
- Added forward‑auth wrapper and pre‑check request support, enabling forward authentication via reverse proxy.
- Improved hash‑based load‑balancing policies with HRW algorithm and allowed resolver addresses without ports.