- In‑memory TLS certificate cache now persists across reloads and private keys are not reused, making reloads lightweight and more secure.
- Significant HTTP/3 performance gains with 0‑RTT, added PROXY protocol support for reverse proxy, and new Caddyfile features like heredoc, import‑args slice syntax, and named routes.
- Breaking deprecations: “ask” endpoint required for on‑demand TLS, lookup‑srv removed, remote‑ip matcher deprecated, placeholder syntax changed, and plugin authors must use http.ResponseController.

