- Added CLI diff output for blocked resource replacements, support for overriding policy severity on violations, and backend journal entry forwarding when supported.
- Fixed engine snapshot integrity on failed destroy runs and improved import error messages to include missing resource IDs.
- Enhanced SDKs: secret values are now passed as Output objects to hooks in Node.js and Python, and scalar return codegen and secret map handling were corrected.