2.0.1

What's Changed

• Update code-style agent guidance for CodeAnalysisTreatWarningsAsErrors=true by @romanett in #4690
• Number commit-id-only prerelease previews 0 so they never outrank a release by @romanett in #4692
• GDS: pin SecurityAdmin-only delivery of ApplicationRegistrationChangedAuditEvents; document CTT defect C57 by @romanett in #4693
• Cut CI runner minutes: duration-packed test batches, CodeQL on Linux/daily, cancellable branch packing by @romanett in #4694
• Server: hold anonymous session-less requests to the channel security of CreateSession by @biancode in #4689
• Release: stop retrying 404s in the feed gates; keep GitHub Release notes under the size limit by @romanett in #4696
• Fix CI test flakes: WotCon end-to-end timeout and HTTPS listener port race by @romanett in #4697
• Secure channel: never answer with an expired token; accept a just-expired one (+ labelled soak/stress CI) by @romanett in #4698
• WebApi: apply the REST auth opt-ins to the opcua+openapi WebSocket upgrade by @romanett in #4699
• Enable nullable reference types centrally; migrate all unset and annotations-only projects by @romanett in #4700
• Aggregates: TreatUncertainAsBad never applies to bounding values; DurationGood/Bad count Good/Bad regions only by @romanett in #4702
• Enable ECC security policies on net48 via a BouncyCastle raw-ECDH polyfill by @romanett in #4703
• Redundancy.Server session mirroring: fix fast reconnect lifecycle (#4627) by @romanett in #4704
• WoT: move GeneratesEvent off Object instances (OPC 10000-3 §7.15) by @romanett in #4706
• Enable AES-GCM and ChaCha20-Poly1305 policies on net48 via BouncyCastle (stacked on #4703) by @romanett in #4705
• Tests: scope MeterListeners to the meter under test (fix flaky ClientBaseTests metrics test) by @romanett in #4708
• Server: cut request-path lock contention and allocation; add load harness by @romanett in #4707
• Avoid boxing and per-value copies on encoder, enum and server hot paths by @romanett in #4715
• Update the guides and the MCP server docs for the 2.0.0 release by @marcschier in #4713
• Use a 4-byte KeyNonce in the reference PubSub sample by @marcschier in #4710
• Let servers start in globalization-invariant mode by @marcschier in #4716
• Send UDP multicast on the network interface the transport joins by @marcschier in #4711
• Reset the push coordinator after each PushComplianceRegressionTests test by @marcschier in #4719
• Secure the UADP DataSetMetaData announcement on secured connections by @marcschier in #4712
• Dispose the certificate leaked by PushComplianceTests by @marcschier in #4721
• Make the encoder stack-depth tests hold on a reused thread stack by @marcschier in #4722
• Fix scoped certificate-store resolution in GDS push operations by @cristipogacean in #4726
• Fail CI when a test fixture's setup or teardown fails by @marcschier in #4723
• Fix empty LocalizedText binary field encoding by @cristipogacean in #4709
• Fix stress Contract/Integration failures and run them in stress-test.yml by @romanett in #4718
• Client: cut per-request allocation and CPU in the channel and session; measure the client in the load harness by @romanett in #4720
• Test that a secured connection refuses its JSON metadata announcement by @marcschier in #4724
• Add README status badges for scheduled CI workflows by @romanett with @Copilot in #4734
• Merge master into release/2.0 and set version 2.0.1 by @romanett in #4740

Full Changelog: 2.0.0...2.0.1