- Enable HTTP timeouts by default via a new 'timeouts' directive, improving security against slowloris attacks.
- Fix a critical TLS SNI‑01 renewal deadlock and boost proxy performance (faster handling, lower memory, better HTTPS/websocket support) while deprecating the old proxy header subdirective.
- Add a Caddyfile validation flag, new placeholders ({when iso}, {rewrite path}), browse sanitization, fastcgi root property, and assorted minor feature and bug fixes.