- Fixed CVE GHSA‑3ccp‑42pg‑hgv6 and added migration guidance for updated CONNECT request handling.
- Adjusted server behavior: defer CONNECT payload until tunnel acceptance, stop re‑adding CONNECT requests to the pool, and upgraded gRPC to v1.82.1.
- Fixed middleware/k8s CRD bug by adding missing ErrorRequestHeaders field and added documentation note for CONNECT migrations.