- Added TLS configuration for account resolver, TLS 1.3 logging, client‑IP exposure in INFO and subscription‑detail endpoints (routez/connz).
- Introduced new trace/debug verbosity flags, GOMAXPROCS reporting, and duration‑based ping‑interval parsing.
- Fixed several regressions: server now exits on lame‑duck signal, corrected buffer reuse, applied debug/trace reload to existing clients, and updated crypto dependencies for CVE mitigation.