rspamd/rspamd 4.0.1 on GitHub

Features

Settings merge: Layered collect-then-merge flow for settings, weak dependencies and disabled status in symcache, force-enable override for settings conflicts
Fuzzy dynamic blocks: Dynamic block API for fuzzy storage worker, custom response codes (403 for ratelimits vs 503 for bans), ratelimit_whitelist check exposed to Lua

Proxy milter fd leak: Original fd was not closed after milter dup(), leaking one fd per milter connection — caused unbounded CLOSE_WAIT accumulation in production (regression in 4.0.0)
Proxy self-scan task timeout: Used upstream wire timeout (e.g. 120s) instead of task_timeout (8s default) for self-scan tasks
ARC AAR parsing (#5963): Replace naive semicolon split with LPeg grammar respecting RFC 8601 comments and quoted strings — fixes cv=fail on multi-hop ARC chains where i=N appeared inside comments
Fix ev_now() usage for dynamic ban expiry
Fix deps in pre/postfilters and settings flow
Fix missing #include <memory> in redis_backend.cxx

Full changelog: 4.0.0...4.0.1