- Upgraded to C++20 and unified clang/gcc toolchains while removing grpc credentials/aws iam extension and contrib squash filter (breaking change).
- Added many features: HTTP/3 pseudo‑header validation, override‑host load‑balancing policy, full‑duplex external processing, OAuth2 token encryption, OIDC logout, API key auth, AWS IAM Roles Anywhere, dynamic module metadata, Lua filter c...
- Fixed security issues (TLS inspector handling of large client hellos, empty CA file validation, CVE patches) and bugs (Wasm hang after VM crash, Lua filter crash, TCP proxy retry logic, connection‑pool capacity calculation).