- Date/time API parameters now require RFC3339 format and proper URL‑encoding; ISO‑8601 remains supported with a deprecation warning.
- Webserver `expose_hostname` default changed to False, disabling hostname exposure by default for security.
- Extensive bug‑fix wave covering log rendering, SIGTERM callbacks, scheduler crashes, KubernetesExecutor behavior, REST API auth, UI permissions, and many minor regressions.