- Added extensive credential mode support, including safe bearer token authentication, explicit CredentialMode in LokiStack spec, multi‑bucket AWS STS, Azure and Google Workload Identity, and OpenShift managed credentials
- Introduced new metrics and status enhancements such as a custom metric for schema‑upgrade LokiStacks, clear running vs. ready status, and improved error messages
- Fixed numerous issues (duplicate metrics, remote‑write timeout config rename, blocked query encoding, storage secret handling) and upgraded dependencies to address CVE‑2023‑44487