NEW: [D-Bus] search by service parameters. [HTTP] mod_shield WAF, an enhanced successor to mod_evasive. Supports LRU auto-eviction, auto-expiry, and early short-circuit processing on blocked IPs. HTTP response status and response times are scorable dimensions. See Shield.md for further information. [NSS] Rewrite PAM + NSS C handlers. NSS translations support user@siteXX and uid@siteXX lookups. NSS module is now re-entrant and thread-safe. PAM module handles jailing but old NSS jailing behavior may be induced by passing a non-null _NSS_AUTOJAIL environment variable. FIXED: [apnscpd] Spurious "apnscp" connection errors logged to MySQL. [Diskquota] Resolve "DEFAULT" value for uninitialized diskquota,group configuration. [Error Reporter] Chained exceptions mask faulty line. [mapCheck] Call to protected constructor during database sweep. [Metrics] System controller logged as next free site ID instead of null. [MySQL] Parsing special characters - specifically "()" - in password field. [upcp] Presence of edge lock file short-circuits remote history fetch thus sticking panel in commit purgatory. [Web Apps] Graceful handling for apps that do not export plugin version metadata. CHANGED: [License] Treat truncated domainmap.tch as if it were non-existent. Previously license check balked during domain check routine if supported by license feature. [Telemetry] metrics() supports optional $extended: bool flag to show extended metric label/type. [UI] Activate session multipath support. REMOVED: [Dovecot] IMAP COMPRESS protocol. Inhibits client hibernation.