- Added count/for_each and depends_on support for modules, plus custom variable validation blocks and a new Kubernetes backend.
- Introduced mandatory provider source specifications for non‑HashiCorp providers, consolidated required_providers to a single block, and removed several deprecated options (e.g., import flag, old S3 lock args).
- Enhanced CLI security with TLS 1.3 and Ed25519 support, improved provider trust signatures, and added new subcommands for state and provider management.