- Security hardening and stricter config validation reject unsafe hosts, path traversal and malformed TLS settings.
- Extensive bug fixes across HTTP/2/3 handling, reverse proxy headers, load balancing, file server, PHP/FastCGI, connection upgrades, and encoding.
- New features include per‑route idle timeout precedence, log level directive, {time.now.rfc3339} placeholder, TLS matcher extensions, and privileged port binding with reduced capabilities.