- Consistently enforce max HA assets limit and improve JetStream placement, AVL sequence set performance, fast batch publish gap reporting, and memory‑backed stream handling.
- Enhance security and authentication: TLS certificate pin validation after reload, TLS state available to auth callouts, remote proxy TLS support, and leafnode WebSocket TLS handling.
- Remove legacy $GR. reply prefix (breaking change) and fix numerous bugs and data races across JetStream, MQTT, leafnodes, gateways, and configuration reloads.