v3.91.0

3.91.0 (2026-06-23)

Bug Fixes

• auth: fall back to UPN/username when Microsoft omits the email claim (6e27044)
• cloud-security: combine GCP direct-API checks with SCC, skip SCC when unavailable (29ddd1a)
• cloud-security: honor disabled-service toggle in GCP direct-API checks (0182676)
• drata: handle non-array policy content in bulk pdf render (33d9157), closes #3249
• policies: use deterministic template engine for individual policy regen (aad6a80)

Features

• cloud-security: make GCP auto-fix first-class for direct-API findings (5684b97)