The pinned source changelog includes development notes for ACL enforcement, HTTP identity handling, scripting behavior and regression coverage. “Unreleased” is the label used in that file; it is not presented here as a separate published release.
ACL command and key-pattern enforcement across command paths.
HTTP ACL identity handling and session binding.
Lua script and registered function argument handling.
Regression tests for authentication and authorization behavior.
The upstream changelog records TLS hardening, cluster input validation, HTTP command restrictions and fixes across persistence, replication and concurrent access.