- Added new client traffic metrics to the /varz endpoint and allowed TLS certificates with DNS SANs without subject DNs.
- Stability and performance fixes including idempotent server shutdown, reduced lock contention, timer leak fixes, and numerous panic, race‑condition, and TLS/PROXY handling corrections.
- JetStream and Raft enhancements such as correct batch sequence parsing, snapshot handling, cache invalidation, consumer redelivery fixes, and proper JetStreamMaxMemory/Store handling in embedded mode.