- Added new extensions and configurability: HTTP basic auth, ext‑authz route metadata, per‑route body buffering, CEL support in ext‑proc, and configurable HTTP status for global rate‑limit failures.
- Extended protocol and platform support: xDS for Envoy Mobile Android AAR, Redis WATCH/GETDEL commands, new oghttp2 codec, refined HTTP/2 host header handling, and configurable idle timeout for gRPC side‑streams.
- Improved observability and reliability: Opentelemetry resource detector, Datadog sampling decision handling, strict mode for stateful session filter, and drop‑overload Cluster API.