0.2.3

Added

• Variable type tracking for boto3 clients and resources — improves extraction precision when clients are passed across function boundaries (#128)
• Support for boto3.Session().client() / .resource() patterns in variable type tracking (#232)
• --resource-cutoff CLI flag and resource_cutoff MCP input to configure when resource lists collapse to * (#217)
• Support for namespace imports in TypeScript/JavaScript (#190)
• Added partial support for permissions needed by aws-lambda-powertools (#186)

Fixed

• We now respect the system's native certificate store instead of using bundled certificates (#209)
• --explain now shows every call site when the same operation appears multiple times (#188)
• Condition values for the same key are now merged instead of overwritten when serializing policies (#199)

Changed

• EnrichmentEngine::new now requires a resource_cutoff parameter; use DEFAULT_RESOURCE_CUTOFF to preserve existing behavior (#217)