- Secure token storage is now default: tokens are stored as selector+verifier with a v2 prefix, never the full token.
- UI enhancements: Add Strategy dialog simplified to three options, tags can be deleted, and flag links moved to a Resources section.
- New constraint operators (regex, IP address, SEMVER GTE/LTE) added, plus numerous security patches and breaking changes such as removal of administrative metadata from the client API config.