- Engine now auto‑populates Name/Type for ResourceReference and fixes snapshot integrity; CLI adds distinct exit codes, clearer SAML SSO reauth errors, and auto‑installs missing policy analyzer plugins.
- SDK updates: bun gains policy‑pack execution support, version compatibility checks, bundled plugin, and tests; Python SDK adds lock‑file detection for toolchain selection; Go SDK adds Azure DevOps git URL support for package publishing.
- Programgen fixes: correct Node.js expression generation, proper Python list/dict comprehension output, preserve traversal parts in rewrites, and deprecate labels on package blocks.