- Service - Add Chocolatey, Scoop, vcpkg, .NET, pip, Cargo, npm, and Bun package broker support
- Service - Allow clients to cancel package operations
- Service - Bundle multi-pwsh for PowerShell Universal integration
- Service - Expose the active package policy through an authenticated API; policy files must now use JSON
- Service - Publish a multi-architecture Agent container with PowerShell Universal enabled by default
- Service - Route JMUX sessions through matching connected agents
- Service - Stream package-operation output and status updates to clients
- Service - Harden package policy, executable, signature, ownership, and permission validation
- Service - Restrict new Agent Tunnel private keys to SYSTEM and Administrators
- Service - Verify package-broker clients and isolate elevated operations more securely
- Service - Make Agent Tunnel DNS route matching explicit and predictable
- Service - Report only installed package managers as capabilities
- Service - Report PowerShell DVC availability accurately and retry transient channel opens
- Service - Support Windows app execution aliases for elevated package operations