- Added new CLI flags: `--shell` for `pulumi stack output` and `--insecure` for `pulumi login` to bypass TLS verification
- Introduced an `unsecret` intrinsic in PCL and migrated Go SDKs to use the standard `errors.New`
- Fixed Azure DevOps cloning, reserved "provider" name validation, and corrected Output dict key handling in Python SDK