- Added extensive extensibility features: new access‑log operators, ext‑authz header block‑list and decoder‑mutation controls, and external processor support for observability mode and route‑cache actions.
- Introduced networking and protocol enhancements: gRPC side‑stream flow control, QUIC server‑preferred address and error reporting, ProxyProtocol listener metadata population, and a "happy‑eyeballs" feature for HTTP/3 upstream connections.
- Added operational improvements: local‑cluster shared rate limiting, a new retry policy that resets before request, TLS matching on OtherName SAN, and disabled OpenCensus by default (deprecation).