- Fix regression in PHP directory indexes and tighten FastCGI security (env precedence, reject ambiguous/Windows 8.3/ADS paths).
- Add features: configurable plain‑text browse time format, case‑insensitive placeholder matching, and plugin helper IsNamedRoute.
- Breaking change: conflicting client auth in merged TLS policies now triggers a Caddyfile error.