3.19.21 (2026-10-10) Bug Fixes align replies with RFC 5321 and fix a crash after STARTTLS (40e7480) honor sniOptions for STARTTLS and drop pending sockets on close (0aed41d) refuse XFORWARD after XCLIENT ADDR and validate proxy NAME values (bca4889)