- Breaking changes: configuration file renamed fields (hosts → contact points), plugin config schema renamed, API name validation tightened, database schema updated, and migration script required for cluster updates.
- Feature additions: new plugins (Response Rate Limiting, ACL, JWT, HMAC) and per‑plugin migration scripts to support independent data storage.
- Bugfixes & security: Basic Auth passwords now SHA1‑encrypted, support for Proxy‑Authorization header, stricter auth parameter handling, resolver querystring matching fixed, admin API cascade delete fixed, OAuth2 flow improvements, and pr...