- Added new client traffic metrics (client msgs/bytes in/out) to the /varz endpoint.
- Improved TLS handling: certificates without subject DNs but with SANs are accepted and TLS listeners now work with the PROXY protocol.
- Numerous stability fixes: resolved deadlocks, race conditions, panics, and lock contention across clustering, JetStream, Raft, and leafnode components.