Token binding (mTLS PoP) is now supported for confidential client (app-only) tokens and downstream API calls.
New CPU targets (Renesas RxV2, C33, M8C, Kalimba, 88k, NS32k), a --env switch to override environments, SysV intrinsic recognition, and NanoO32 calling convention for MIPS.
Big upgrades: chroot‑isolated AWF containers with faster startup (--skip-pull), a new workflow secrets field with validation, richer file previews (.md/.yml/.yaml/.toml), and a friendlier gh aw init that prints setup instructions.
Adds autonomous task planning with tool use, long‑term memory, OS/external resource access, and a skill engine for creating and running custom skills.
Photo watermarks with EXIF/device info, button remaps (mute media/toggle ringer), DIY device effects automation, plus new QS tiles for Private DNS and USB Debugging.
Adds CUDA 13 and Python 3.13 support, QCI backend integration, and real-time QEC decoding on Quantinuum.
CSP nonce support, new country/currency/language/locale/timezone filters, confirm-before-actions, default row-click actions, customizable autocomplete, and preferred choices for Choice/Association fields.
AWS Bedrock support just landed, along with a flexible multi-auth provider architecture for smoother model integration.
New TableProvider with predicate pushdown and column pruning, Variant type support, and macros in Distributed engine cluster names.