- Container images and CLI binaries are now signed with cosign and include SLSA‑Level 3 provenance for verification.
- Various bug fixes: optional executor instances, Bitbucket Server SCM handling, helm HTTPS keep‑alive disabled, and ApplicationSet requeue on validation errors.
- Documentation updates for the new `sourceNamespaces` field and added example jq path expression.
