- Security hardening: upgraded Go builder to 1.27.2, added request throttling for invalid auth tokens, and fixed XSS issues in vmui pages.
- New features: added /influx/ping endpoint, introduced oidc.auth params for SSO, and implemented request abort/cancel on client disconnect and graceful shutdown across cluster components.
- Extensive bug fixes: corrected TCP keep‑alive probes, regex matching, alert rule calculations, vmalert notifier handling, header handling for SRV URLs, and numerous stability and memory‑leak issues.