Features

WebCrypto Ed25519 and X25519 support — Edwards-curve signatures and X25519 ECDH now available via subtle.sign, subtle.verify, and subtle.deriveBits
WebCrypto wrapKey() and unwrapKey() support added, including the AES-KW algorithm and JWK-format unwrap
crypto.randomUUID() — RFC 4122 v4 UUID generator
await expressions are now allowed in tagged templates and as call arguments
ngx.shared.SharedDict.ttl() — returns the remaining time-to-live for a key in a shared dict
Improved shared dict eviction strategy — evicts oldest entries more aggressively when the zone is under memory pressure

Improvements

Built-in crypto module switched to the OpenSSL EVP interface for hashing, reducing reliance on low-level OpenSSL APIs

nginx modules

Removed spurious js vm init notice log emitted during configuration parsing
Removed shared dict expiration from read-locked paths — expiry side effects no longer run while a reader holds the shared-memory lock
Fixed double-free in shared dict update when eviction triggers
Fixed per-entry TTL being reset on SharedDict.incr() calls — a previously set custom timeout was silently replaced by the zone default

Core

Fixed call argument evaluation order
Fixed error handling when redefining the length property of an Array instance

Full Changelog: 0.9.6...0.9.7