- Fixed MetricsQL timestamp function compatibility with Prometheus for sub‑expressions when search.disableImplicitConversion is enabled.
- Prevented vmagent remote‑write ingestion from stopping on Google Pub/Sub push errors.
- Corrected vmauth mTLS authorization routing and added automatic Let's Encrypt TLS certificate issuance for all enterprise components.