- Added server entry point option to limit request header values and a global default for aliasHeadersStrategy.
- Fixed backend connection leaks for NTLM/Kerberos, middleware response writer bugs, and ingress‑nginx name collisions; lowered some logs to debug.
- Updated several dependencies, Docker docs, and security announcement links; migration guide required for breaking changes.