New Features
- PAM: Added --target-node and range support to CyberArk PAM import (import --format=cyberark)
- Export: Added --owned-only flag to export only owned records
- PAM: Added Terraform app setup support, gated by Min-Commander-Version
- PAM: Added GitHub USS configuration support via updated KRouter endpoints
Security
- Fixed email-config title lookup so shared-in records can no longer redirect --send-email SMTP traffic
- Restricted Service Mode host file I/O and PAM tunnel commands
Bug Fixes
- Fixed PAM project export by discovering records from project folders
- Fixed NSF import/extend for PAM projects: KSM app grants and root folder reuse
- Fixed NSF record fields to be handled the same way as classic add/update
- Fixed NSF record update failing with "This object no longer exists" after PAM tunnel/connection edits
- Fixed pykeepass bug when using quotes in record titles
- Fixed PAM GitHub configuration type not being recognized