v0.350.0 CHANGELOG heading (MinAgent 0.158.1, unchanged) — the release build's commit; the Traefik load test's figures

CHANGELOG.md

@@ -1,4 +1,12 @@
-## Unreleased — next controller release (MinAgent unchanged, 0.158.1); commit only, 2026-11-02 night
+## v0.350.0 (2026-11-03) — Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); a restore forgets the update-held flag (R-1347); a failed put-back at start-up mails (R-1348); three false start-up lines (R-1339, R-1351, R-1323)
+
+### 2026-11-03
+
+**MinAgent: 0.158.1** (unchanged).
+
+**Load test, scratch 9202 only, from the LAN, 2026-11-03** (felhom.eu `audits/release-2026-11-03/part1/`): the same many short TLS connections with an
+`Authorization: NTLM` header to the dashboard route. v3.7.16: Traefik's anonymous memory 18.7 → 79.0 MiB after 920 connections, not released (stopped at
+twice its start, as the test's bound says). v3.7.17: 16.2 → 25-26 MiB, flat for 25,116 connections and the whole 300 s.
 
 **Traefik v3.7.17 (GHSA-xv5x-242w-7hf7, high, published 2026-11-02).** v3.7.14–v3.7.16: an unauthenticated client that
 sends a `Negotiate` or `NTLM` `Authorization` header gets a dedicated backend transport per connection, and it is not