- All Argo CD container images and CLI binaries are now signed with cosign and provide SLSA Level 3 provenance, with verification documentation added.
- Security advisory GHSA‑92mw‑q256‑5vwg is addressed, introducing a breaking API change—review the advisory before upgrading.
- Includes numerous bug fixes (content‑type enforcement, deployment list permissions, UI scroll, missing owner refs, GRPC keep‑alive, appset handling), a docs formatting fix, and dependency upgrades.