- Dynamic upstreams and reverse proxy improvements, including X-Forwarded header handling, response copy handler, and deprecation of the srv JSON field.
- Automatic HTTPS upgrades: Tailscale certificate support, external certificate managers, DNS challenge overrides, propagation delay/timeout controls, and more reliable revocation handling.
- OpenTelemetry tracing integration, extensive logging enhancements (redaction, filters, new placeholders, UUID), new Caddyfile directives, and numerous bug fixes.