- Bumped Go to 1.16.4 and rebuilt all executables and Docker images.
- Introduced TLS pinned certificates configuration (fingerprint whitelist) to reject unknown certificates.
- Fixed several bugs: JetStream panic on bad redelivery values, snapshot restore needing /tmp, peer removal replication, MQTT replica handling, monitoring HTTP stats initialization, and double‑import subject mapping.