- Added TLS 'certs' option for multi‑certificate support and enabled nkey authentication for leafnodes and no‑auth users.
- Improved JetStream performance and memory usage with faster random number generation, optimized filter matching, snapshot handling, and reduced lock contention.
- Fixed several bugs and security issues, including account guard RNG, OCSP stapling behavior, MQTT error messages, and detection of corrupt subjects during recovery.