- Added ACL‑based access control to the web interface, introduced a new macOS .pkg installer, and expanded support for custom control servers, Kubernetes ingress, and Mullvad family‑friendly DoH server
- Improved reliability and performance with per‑client TCP forwarding limits, link‑local IPv6 preference, DNS timeout handling, battery usage reductions on iOS, and better DNS transition handling across platforms
- Fixed regressions including DERP region switching bugs, infinite DNS loops on Amazon Linux, Windows MDM policy key and MSI upgrade handling, and nftables DNAT rule management