- Enable encrypted run fallback files by default, providing an offline encrypted cache and a new `run clean` command for old files
- Enclave secrets download files are now encrypted and default to JSON, with added support for environment‑variable setup, auto‑selecting config options, and confirmation prompts for token revocation
- Breaking changes include removal of the plain flag, moving configuration storage to /.doppler, and default secret format changes; extensive bug fixes and documentation updates were applied