- Upgrade Go builder to 1.24.10 and golang.org/x/crypto to v0.43.0, addressing CVE‑2025‑47913.
- Fix bugs: enable HTTP/2 for vmagent/vmsingle discovery, drop empty‑value labels in vmalert, enforce maxDataSize limits on zstd requests, correct vmui median calculation, and reject retentionFilter durations larger than retentionPeriod.
- RetentionFilter duration must now be lower than retentionPeriod before upgrading; otherwise deployment will fail.