- Added option to keep original Host header in vmauth, introduced 99th‑percentile scrape duration panel in vmagent dashboard, and changed vmauth to return HTTP 502 when all backends are unavailable.
- Security update: upgraded base Alpine Docker image to 3.20.2.
- Fixed multiple bugs: panic on malformed metricql in vmselect, TLS key/cert validation on startup, path handling and body‑reading errors in vmauth, and autocomplete/quote handling in vmui.