- Introduce a new Golang network filter, CONNECT‑UDP support, and CEL‑based access‑log formatting/universal matcher expressions.
- Add load‑shedding, deferred stats instantiation, detailed admin stats bucket mode, and an OpenTelemetry‑compatible stats collector.
- Enhance security with hot‑reloaded CRL files, an ext‑proc header allowlist, and a FIPS‑compliant arm64 build.