- Fixed MetricsQL timestamp function compatibility with Prometheus for sub‑expressions when search.disableImplicitConversion is enabled.
- Prevented vmagent remote‑write ingestion from stopping on push errors in the Google Pub/Sub integration.
- Corrected vmauth mTLS authorization routing and added automatic Let's Encrypt TLS certificate issuance for enterprise components.